This notice is about the public website at wellbecoming.app, and about how visits to the app at my.wellbecoming.app are counted. The health record you keep in the app is a different matter: it lives on your own device, and the privacy architecture page explains how.
Who we are
Well Becoming is a service of Innov8 Global Labs, 21701 Stevens Creek Blvd #1022, Cupertino, California 95015, USA, which operates this website and is the controller for everything described here. For any request, to see what we hold, to correct it or to have it deleted, write to us through the access form with "privacy request" in the context field and only your contact details, and a person will answer. Pchol Kollektiv, credited in the footer, designed the site and the app. The credit does not make it the operator or the controller of anything described here.
What we collect
Visits are counted with Umami, which runs on our own server: the page viewed, the site you came from, your browser, device type, screen size, language and approximate location (country, region and city). It sets no cookie and does not store your IP address, and a visit is not linked to your name or to anything you send us. The app at my.wellbecoming.app is counted the same way and sees less: only that the app was opened, never a screen, a search or anything in your health record.
When you ask for access, we receive your name, your email address, the plan you chose, the priority you picked and whatever broad, non-medical context you type. The form asks you not to send diagnoses, lab values, medical documents or anything else sensitive about your health, and we mean it.
The companies that host and protect the site see the technical traces any website produces: IP address, device and browser details, timestamps, request logs. There are no advertising trackers, no profiling and no marketing cookies on this site.
Why, and on what basis
We use what you send through the form to answer you, to judge whether the product fits, and, if you go ahead, to set up your account and arrange payment. We use the technical logs to keep the site running and secure, and we count visits to learn which pages are read and how people find us. Depending on where you live, the legal basis is the steps you asked us to take, our legitimate interest in running a secure service, your consent for anything optional, or the contract once there is one.
Who else touches it
Netlify hosts the site and receives form submissions, and the provider that hosts our visit statistics runs that server for us. If payment is offered, checkout is hosted by Stripe, which handles card and billing details under its own terms; nothing about your card is entered into or held by this website. Both may process data outside your own country under their transfer safeguards. Nobody else receives what you send us, and we do not sell it.
How long we keep it
An access request is deleted or anonymised twelve months after our last contact with you about it, sooner if you ask and nothing obliges us to keep it. Payment records are kept for seven years, which is what accounting and tax rules require of us. Visit statistics are kept for as long as the site runs; a visit record holds no name, contact detail or IP address. Anything the law requires us to hold longer, we hold for exactly that long and no more.
Your rights
You can ask to see what we hold about you, to have it corrected or deleted, to limit how it is used, to object to some uses, to withdraw consent where consent is the basis, and where the law provides it, to receive a copy you can take elsewhere. You can also complain to the data-protection authority where you live. Use the access form as described above.
Security, and the honest limit of it
The site is served over HTTPS with a strict content policy: no third-party scripts run here, and the analytics never leave a server we control. A form submission travels to Netlify's form store and from there to us; that is ordinary hosting-grade protection, not end-to-end encryption, which is one more reason to keep health details out of it. The website holds no health record at all. Yours lives inside the app, on your device, behind your passcode, and the site cannot read it.
Children and emergencies
This site is not for children, and it is not an emergency or medical service. If you need urgent help, do not use this site to find it.
Changes
We change this notice when the product, a provider or the operator changes, and the date at the top moves with it. Where the law requires, we tell affected users about a material change. This notice describes practice; it is not legal advice.