Privacy Policy
Wellnote (“Wellnote”, “we”, “us”) is a photo-first calorie and nutrition tracking app. This policy explains what personal data we collect, why, who we share it with, and the choices you have.
Data controller: Akbar Berlian
Contact: hello@wellnoteapp.com
1. Data we collect
a. Account & identity
- Email address — to create and sign in to your account.
- Google account basic profile (email, name, profile image) — only if you choose “Sign in with Google”. We never receive your Google password.
b. Health, fitness & food data
- Food and meal logs, including AI-estimated calories, macronutrients and micronutrients.
- Photos of your meals that you choose to capture or upload.
- Exercise/activity logs, weight, water intake, personal notes, goals, and profile details you enter (e.g. age, sex, height, target) used to calculate your targets.
c. Diagnostics & technical data
- Crash reports and error diagnostics to keep the app stable (may include device model, OS version, a technical stack trace).
- Basic app events needed to operate features such as reminders and sync.
We do not collect your precise location, contacts, or advertising identifiers, and Wellnote contains no third-party ads.
2. How we use your data
- Provide the core service — log meals, recognize dishes, and estimate nutrition from your photos and text.
- AI food recognition — meal photos and text you submit are sent to AI processing services to identify the dish and estimate nutrition (see §4).
- Sync & backup — store your data in the cloud so it’s available across devices.
- Reminders & streaks — send the local notifications you enable.
- Reliability & security — diagnose crashes, prevent abuse, enforce per-user rate limits.
We do not sell your personal data, and we do not use your health or food data for advertising.
3. Legal basis (where applicable)
Where required (e.g. GDPR/UK), we process your data to perform our contract with you (providing the app), on the basis of your consent (e.g. submitting a meal photo for AI analysis), and for our legitimate interests (security, diagnostics, reliability). You may withdraw consent by ceasing to use the relevant feature and/or deleting your account.
4. Third parties we share data with (sub-processors)
We share data only with service providers that help us run Wellnote, under agreements that limit their use of it:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication & database hosting | Email, account data, food/health logs |
| Cloudflare R2 | Photo storage | Meal photos |
| AI processing providers | Dish recognition & nutrition estimation | Meal photos, text you submit |
| “Sign in with Google” (if used) | Google account basic profile | |
| Sentry | Crash & error diagnostics | Technical diagnostics, device info |
| Expo / EAS | App delivery & over-the-air updates | Basic technical/update data |
Meal photos and text submitted for AI analysis are transmitted to our AI processing provider(s) solely to return a nutrition estimate to you. These providers do not retain your inputs and do not use them to train their models; they process the data only to fulfil your request.
We may also disclose data if required by law, to protect our rights, or in connection with a business transfer.
5. Data storage, location & retention
- Your data is stored on cloud infrastructure operated by the providers above, which may process data outside Indonesia (e.g. in regional data centers).
- We retain your data while your account is active. When an in-app account deletion succeeds, we delete the account and associated stored server-side app records immediately. We complete any related deletion processing within 30 days, except where limited records must be retained to comply with law or protect the service from fraud or abuse.
- Wellnote is offline-first: a copy of your data is also stored locally on your device and is removed when you delete the app or its data.
6. Security
We protect your data with encryption in transit (HTTPS/TLS), per-user database access controls (row-level security) so users can only access their own records, and scoped storage keys so your photos are isolated to your account. No method of transmission or storage is 100% secure, but we work to protect your information.
7. Your rights & choices
- Access & export — export your data as a CSV file from within the app.
- Correction & deletion — edit or delete individual entries. To delete your account and associated data, open the side menu, tap Login to open your account, then select Delete account. If you cannot access the app, follow our account-deletion instructions.
- Notifications — control reminders in the app and in your device settings.
- Depending on where you live (e.g. Indonesia’s UU PDP, or GDPR/UK), you may have additional rights to access, rectify, erase, restrict, or object to processing, and to lodge a complaint with your data protection authority.
To exercise any right, contact hello@wellnoteapp.com.
8. Children
Wellnote is not directed to children. You must be at least 16 years old, or the age of digital consent in your country, to use Wellnote. We do not knowingly collect data from children below that age; if you believe a child has provided us data, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide a more prominent notice.
10. Contact
Questions or requests about this policy or your data: hello@wellnoteapp.com.