Privacy & Security

Only what you give it, directly or through a service you connect:

• Account — email, password (hashed, never visible to us), and optional two-factor settings.
• Profile — name, date of birth, sex, blood type, height, weight, conditions, allergies.
• Health records — lab results, clinical notes, imaging studies and images, body-composition scans, medications, symptoms, vaccines, screenings, appointments and your care team.
• Wearable data — sleep, activity, heart rate, HRV and related metrics from devices you connect.
• Files you upload — the original PDFs, images and exports, kept so results can be re-checked against the source.
• Things you write — chat conversations with Eva, notes, and the concerns you add to Visit Prep.
• Operational records — an access log of actions taken on your health data, sign-in attempts, and AI usage counts.

Every one of these is scoped to your account at the database level, so one account cannot read another's rows.

Asking Eva, generating insights, and parsing an uploaded document work by sending the relevant parts of your record to a third-party AI provider to be analysed. That is how the analysis happens — it cannot be done on your device alone.

Before anything is sent, we remove the parts that identify you. Your date of birth becomes an age, and your name, address, phone, email and record numbers are taken out. For an uploaded document we read the text out of the file and strip those same fields from it, so the letterhead and patient details stay with us and only the medical content is sent. Two exceptions, stated plainly: a photo or a scanned page has no text to strip, and an imaging picture may have details printed into the image itself — those are sent as they are so they can be read at all.

Features you don't use send nothing. Everything else stays in your own encrypted record. AI output can be incomplete or wrong, and is never a diagnosis — see the Terms for what that means in practice.

WellTraces runs on a small number of providers. Each only receives what its job requires:

• Hosting & database — stores your record and uploaded files.
• AI provider — receives the medical parts of your record needed to answer a question, generate insights, or parse a document, with identifying fields removed first (with the two exceptions noted above).
• Wearable aggregator — for Garmin, WHOOP, Polar, Suunto, Strava and Ultrahuman, an open-source service holds the connection to that brand and passes readings through.
• Email — sends sign-in, invitation and notification email. Receives your email address, not your health data.

We do not sell your data, and we do not share it for advertising. It is disclosed only to these providers, to services you explicitly connect, and where the law requires it.

WellTraces sets no cookies. Not for analytics, not for advertising, not for anything. Open the site without signing in and nothing at all is stored.

Once you sign in, a few things are kept in your browser's local storage, never sent anywhere and never used to track you:

• Your sign-in session — so you stay signed in. Cleared when you sign out.
• Your preferences — light or dark, which menu sections you've opened, the filters you last used.
• A short-lived cache — a few minutes of your own trend data, so revisiting a page is instant.

Clearing your browser data removes all of it. Nothing is lost but the convenience: your record lives in your account, not in the browser.

There are no analytics, no advertising or social media pixels, and no third-party trackers anywhere in the app. Loading a page contacts no one but us — the fonts are served from our own servers rather than a font CDN, so rendering this page does not disclose your IP address to anyone else.

You will not find a "do not sell my personal information" link here, and that is deliberate. That link exists for businesses that sell or share personal information for advertising. We do neither, so offering the choice would imply there was something to opt out of.

Wherever you live, you can:

• See it — everything WellTraces holds is visible in the app.
• Correct it — edit or remove any individual entry.
• Take it — export your full record as JSON at any time.
• Delete it — clear a category, or delete your account entirely.
• Withdraw consent — disconnect any service, or stop using the AI features, without losing the rest.

If you are in the EU, UK or a US state with a privacy statute, these cover the access, rectification, erasure, portability and objection rights those laws grant. Email info@welltraces.com and we will respond within the period the applicable law requires.

Your record is kept while your account is open, because a health history is only useful over years. There is no automatic expiry.

When you delete your account, the health data attached to it is removed with it — labs, wearable readings, notes, imaging, medications, symptoms, vaccines, screenings, chats and uploaded files. Deleting a single entry removes it immediately. Backups roll off on their own cycle, and we may retain the minimum required to meet a legal obligation.

International transfers. Our providers may process data outside your country, including in the United States. Where required, transfers rely on the safeguards the applicable law provides.

If something goes wrong. If your health data is exposed in a breach, we will notify you and the relevant authorities as required by law, without undue delay.

Age. WellTraces is for adults. It is not intended for children, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.