WillHealth Privacy Policy

Effective date: 10 November 2026

WillHealth (“the app”, “we”, “us”) helps you track meals, habits, exercise and weight. This policy explains what personal data we collect, why, who we share it with, and the choices you have. We have tried to keep it plain and specific.

1. Who is responsible for your data

The controller under the EU General Data Protection Regulation (GDPR) is:

2. The short version

• We collect what you enter (meals, weight, habits, goals) and your account details (email and first name).
• If you connect Apple Health, the app reads your weight, steps, active calories and workouts. Only your weight is sent to our servers. Steps, active calories and workouts stay on your phone. We never write anything to Apple Health.
• Meal text and voice recordings are sent to OpenAI to turn them into calorie estimates and text. We do not store your voice recordings.
• We do not sell your data, show ads, or use analytics or tracking tools.
• You can delete your account and all your data inside the app, any time.

3. What we collect

Account details. Your email address and first name. If you sign in with Google or Apple, we receive the email and name that provider shares with us. If you choose Apple’s “Hide My Email”, we receive Apple’s relay address instead. Your password (if you use one) is held by our sign-in provider, not by us.

What you log.

• Meals: the text you type or dictate, plus the items, portions, calorie estimates, labels and summaries we generate from it.
• Weight entries (typed by you, or imported from Apple Health).
• Habits and the days you complete them.
• Your calorie goal, the free text you give when setting it, and the advice we generate.
• Saved meals you create.

Voice. If you tap the microphone, the app records audio on your device and uploads it so it can be turned into text. See section 6.

Notifications. If you turn on streak reminders, we store a push notification token for your device.

Technical data. Our hosting provider processes standard request data (such as IP address and timestamps) to deliver the service and keep it secure.

We do not collect your location, contacts, photos, advertising identifiers or device identifiers for tracking.

4. Apple Health

You choose whether to connect Apple Health, and you can change this at any time in the app and in iOS Settings (Health, then Data Access & Devices).

• What the app reads: body weight, step count, active energy burned, and workouts (type, time, duration and energy). Read-only.
• What leaves your phone: your most recent weight reading, which is saved to your WillHealth account so it appears in your weight history. Nothing else from Apple Health is sent to our servers.
• What stays on your phone: steps, active calories and workouts. They are shown on your device and are not uploaded or stored by us.
• Not used for advertising. Apple Health data is never used for advertising or marketing, never sold, and never shared with third parties for those purposes.
• No AI processing. Apple Health data is not sent to OpenAI.

5. Why we use your data, and our legal basis

6. Who we share data with

We use a small number of service providers (“processors”) who handle data on our behalf and only to run WillHealth. We do not sell your data.

Voice recordings. Audio is uploaded to our server and forwarded to OpenAI for transcription. We do not save the audio; only the resulting text is stored, as part of your meal. OpenAI states that it does not use API data to train its models by default and may keep API inputs and outputs for up to 30 days to detect abuse, after which they are deleted unless the law requires otherwise.

We may also disclose data where required by law.

7. Transfers outside the EU/EEA

Some of these providers are based in, or process data in, the United States. Where personal data leaves the EEA, we rely on safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

8. How long we keep data

We keep your data until you delete it or your account. When you delete your account in the app (Settings, then Delete account), we delete your account record and everything linked to it: meals, items, weight, habits, goals, saved meals and push tokens. Your sign-in account with Clerk is deleted at the same time.

Some copies may remain for a limited time in routine provider backups and server logs before they are overwritten. OpenAI’s short retention for abuse monitoring is described in section 6.

9. Security

Data is sent over encrypted connections (HTTPS) and stored with reputable hosting providers. Access to your data requires you to be signed in. No system is perfectly secure, but we take reasonable steps to protect your information.

10. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (you can edit or delete most entries in the app);
• have your data erased (use Delete account in the app, or contact us);
• restrict or object to certain processing, including the reminder emails;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• complain to a data protection authority. For us, that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-berlin.de). You may also contact the authority where you live or work.

To use these rights, or to ask us to stop reminder emails, contact willhoneywill@gmail.com.

11. Children

WillHealth is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

If we change this policy in a meaningful way we will update the date above and, where appropriate, tell you in the app.

13. Contact