What this app knows about you

Who is responsible

Wellnest is run by one independent maker, who decides what the app collects and how it is used — the data controller under the GDPR. You reach that person through the contact page, and that is also where you send any request about your data.

What the app keeps

Only what you put in, plus what an account needs:

• Your email address and password (handled by the sign-in service), the display name you choose, and an optional recovery email for your app-lock code.
• Everything you save yourself: tasks and categories, calendar events, goals and their entries, self-care routines, notes, mood and energy check-ins, symptoms, day notes, and cycle logs with their comments.
• Small counters on the server that stop repeated email, import and deletion requests from being abused.
• Nothing else. No feed, no advertising, no analytics or tracking pixels, and no profiling.

Why it is stored

Each purpose rests on a specific legal basis under the GDPR:

• Your account and everything you save — needed to give you the service you signed up for (Art. 6(1)(b)).
• Mood, energy, symptoms and cycle entries, which count as health data — your explicit consent (Art. 9(2)(a)). You give it when you set up your profile, and you can withdraw it at any time.
• The welcome email, recovery codes, daily summary and push notifications — your consent, given when you ask for them (Art. 6(1)(a)).
• The abuse counters described above — a legitimate interest in keeping the service available and its email sending intact (Art. 6(1)(f)).

Where the data is stored

Wellnest runs on Base44, which stores the database, handles sign-in and serves the pages on Cloudflare infrastructure. Base44 keeps app data in the United States by default — the storage region can only be moved to the EU, the UK or Australia on its Enterprise plans, and that setting changes where data rests, not where requests are handled. Base44 processes the data on our behalf under its data processing agreement and publishes its subprocessors in its Trust Center. A few things always stay in the US: public files, Base44 account details and billing information. This applies to every record you save, including mood, energy, symptom, day-note and cycle entries — they are kept with the rest of your account, never on your device alone.

Who can see it

Only you. Every record is tied to your account and access rules check that on every request, so other people using the app cannot open your records — and neither can the person who runs Wellnest from inside the app. Nothing you save is sold or shared with advertisers. If someone else uses your phone while the app lock is off, they can open the app as you.

Cookies and local storage

There are no tracking cookies, no advertising pixels and no third-party analytics. Your browser stores the sign-in session, your chosen theme, and — if you set one — the 4-digit app lock, which never leaves this device. Those are needed for the app to work, not to follow you around.

How long it is kept

Your records stay until you delete them. Deleting runs immediately and permanently — there is no recycle bin and no backup copy you can ask us to restore. Rate-limit counters expire on their own. Your login stays until the account is closed; ask through the contact page if you want the email itself removed.

Your rights

Under the GDPR you can, at no cost:

• Get a copy of everything you saved — Settings → Your data → Download a copy gives you a machine-readable file.
• Correct anything that is wrong — edit your entries, or your name and recovery email in Settings.
• Delete your data or your whole account yourself, in Settings → Your data.
• Ask for the processing to be restricted, or object to it, through the contact page.
• Withdraw your consent — deleting your health entries (or all your data) ends the processing based on it.
• Complain to a supervisory authority. In Norway that is Datatilsynet (datatilsynet.no); you may also turn to the authority where you live.

Health data and your consent

Mood, energy, symptoms, day notes and cycle logs are special-category data, so they are stored only on your explicit consent, recorded with a date on your account. This is the consent you give when you set up your profile:

“I consent to Wellnest processing the information I record about my mood, cycle and symptoms. That information is stored by our data processor Base44 in the United States, and only I can open it — cycle and symptom entries live in my account, not on my device alone. I can delete all my data and withdraw my consent at any time in Settings.”

Declining or withdrawing means the app cannot keep that part of your history; you can still use tasks, events, goals and notes. To withdraw, delete those entries — or everything — in Settings.

The app lock

The 4-digit code lives on this device and keeps casual eyes out. It is a convenience lock, not encryption of your records.

Not medical advice

Mood, symptom and cycle insights are patterns in what you logged — estimates for your own reflection, never a diagnosis, and never a method of contraception.

Age and changes

Wellnest is meant for adults; if you are under 16, use it together with a parent or guardian. If this notice changes in a way that affects you, the date below changes and the new text is what applies from then on.