Data privacy & GDPR
What Wellex collects, where it lives and how to delete it.
Last updated: 2026-04-07
Principles
- On-device first. Sensor processing happens on the band and the phone. Raw waveforms never leave your phone.
- Aggregated to the cloud. Only your daily summaries (WVI, sleep summary, HRV averages) sync to the cloud, and only if you opt in.
- No third-party sale. Your body data is not sold, brokered or licensed to anyone, including advertisers, insurers or employers.
What we collect
| Category | Where it lives | Why |
|---|---|---|
| Account (email, name) | EU servers | Login and support |
| Daily WVI summary | EU servers (opt in) | Cross-device sync, web dashboard |
| Raw biometric streams | Your phone only | Never leaves the device |
| Diagnostic logs | EU servers, 30-day TTL | Debugging only, anonymised |
Retention
Daily summaries are kept as long as your account exists. Raw streams stay on your phone until you uninstall. Diagnostic logs auto-delete after 30 days.
Your GDPR rights
You can request export, correction or full deletion at any time from Settings → Privacy → My data. Deletion is irreversible and completes within 14 days.
Legal basis
Your consent (Art. 6(1)(a) GDPR), and contract necessity for delivering the service you paid for (Art. 6(1)(b)).