Privacy & Security

Only what you give it, directly or through a service you connect:

• Account — email, password (hashed, never visible to us), and optional two-factor settings.
• Profile — name, date of birth, sex, blood type, height, weight, conditions, allergies.
• Health records — lab results, clinical notes, imaging studies and images, body-composition scans, medications, symptoms, vaccines, screenings, appointments and your care team.
• Wearable data — sleep, activity, heart rate, HRV and related metrics from devices you connect.
• Files you upload — the original PDFs, images and exports, kept so results can be re-checked against the source.
• Things you write — chat conversations with Eva, notes, and the concerns you add to Visit Prep.
• Operational records — an access log of actions taken on your health data, sign-in attempts, and AI usage counts.

Every one of these is scoped to your account at the database level, so one account cannot read another's rows.

Asking Eva, generating insights, and parsing an uploaded document work by sending the relevant parts of your record to a third-party AI provider to be analysed. That is how the analysis happens — it cannot be done on your device alone.

Before anything is sent, we take out the parts that identify you:

• Your name, address, phone, email and record numbers.
• Your date of birth — it becomes an age instead.

For a document, we read the text out of the file and strip the same fields from it. What goes is the medical content and the name of the lab that produced it. Your details stay with us.

Two exceptions, stated plainly. A photo or a scanned page has no text to strip. An imaging picture may have details printed into the image itself. Those are sent as they are, because otherwise they can't be read at all.

Features you don't use send nothing. Everything else stays in your own encrypted record. AI output can be incomplete or wrong, and is never a diagnosis — see the Terms for what that means in practice.

WellTraces runs on a small number of providers. Each only receives what its job requires:

• Hosting & database — stores your record and uploaded files.
• AI provider — receives the medical parts of your record needed to answer a question, generate insights, or parse a document, with identifying fields removed first (with the two exceptions noted above).
• Wearable aggregator — for Garmin, WHOOP, Polar, Suunto, Strava and Ultrahuman, an open-source service holds the connection to that brand and passes readings through.
• Email — sends sign-in, invitation and notification email. Receives your email address, not your health data.

We do not sell your data, and we do not share it for advertising. It is disclosed only to these providers, to services you explicitly connect, and where the law requires it.

WellTraces sets no cookies. Not for analytics, not for advertising, not for anything. Open the site without signing in and nothing at all is stored.

Once you sign in, a few things are kept in your browser's local storage, never sent anywhere and never used to track you:

• Your sign-in session — so you stay signed in. Cleared when you sign out.
• Your preferences — light or dark, which menu sections you've opened, the filters you last used.
• A short-lived cache — a few minutes of your own trend data, so revisiting a page is instant.

Clearing your browser data removes all of it. Nothing is lost but the convenience: your record lives in your account, not in the browser.

There are no analytics, no advertising or social media pixels, and no third-party trackers anywhere in the app. Loading a page contacts no one but us. Even the fonts come from our own servers instead of a font CDN, so reading this page doesn't hand your IP address to anyone else.

You will not find a "do not sell my personal information" link here, and that is deliberate. That link exists for businesses that sell or share personal information for advertising. We do neither, so offering the choice would imply there was something to opt out of.

Wherever you live, you can:

• See it — everything WellTraces holds is visible in the app.
• Correct it — edit or remove any individual entry.
• Take it — export your full record as JSON at any time.
• Delete it — wipe your whole record, or one category, from Profile. To close the account itself, email us and we'll do it.
• Withdraw consent — disconnect any service, or stop using the AI features, without losing the rest.

If you are in the EU, UK or a US state with a privacy statute, these cover the access, rectification, erasure, portability and objection rights those laws grant. Email info@welltraces.com and we will respond within the period the applicable law requires.

Your record is kept while your account is open, because a health history is only useful over years. There is no automatic expiry.

"Delete all my data" in Profile removes your health record — labs, wearable readings, notes, imaging, medications, symptoms, vaccines, screenings, chats and uploaded files — and leaves your account open so you can start again. Closing the account removes the same data. Deleting a single entry removes it immediately.

A few things outlive that on purpose. None of them is your health data:

• The record that you accepted these terms.
• Our security log — sign-ins, and who opened what.
• The note that an address unsubscribed. Without it, unsubscribing wouldn't stick.

Backups roll off on their own cycle. We may keep the minimum a law requires.

Feedback you've sent us goes too, including any screenshot attached to it — a screenshot of your own page can contain your health data, so it shouldn't outlive the rest. One honest caveat: feedback also arrives in our support inbox as an email, and deleting your data can't reach a mailbox. Ask us and we'll clear that too.

International transfers. Our providers may process data outside your country, including in the United States. Where required, transfers rely on the safeguards the applicable law provides.

If something goes wrong. If your health data is exposed in a breach, we will notify you and the relevant authorities as required by law, without undue delay.

Age. WellTraces is for adults. It is not intended for children, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.