The short version
WellChime helps people and families share wellbeing information. Each person (the "Member") controls their sharing. We never sell your data or use health or location data for advertising. You can pause sharing, export your data, or delete your account.
What we collect
Account data — name, email, date of birth, optional phone number and profile photo, authentication identifiers, and subscription status. Date of birth is used for signup eligibility and family role settings. Complete-plan purchases are processed by Apple In-App Purchase. We receive transaction and entitlement status needed to provide the subscription, but we do not receive or store full card numbers.
Health and activity data (with the Member’s consent) — signals such as heart rate, blood oxygen, sleep, steps and activity, and motion events used to generate suspected-fall signals. Apple HealthKit data is used only to provide WellChime’s monitoring features, is never used for advertising or marketing, and is never sold or shared with data brokers.
Location data (optional, off by default) — if the Member enables location sharing, we collect device GPS location to show family where the Member is and to power place alerts (arrive/leave heads-ups for saved places). The Member can pause or turn this off at any time, on their own device.
Device and coverage data — device type, battery level, app state, and signal freshness, used to show whether monitoring is currently working ("Coverage Truth").
Care content — notes, check-ins, messages, and medication schedules that family members and the Member add.
Calories — the meals, foods, recipes and water that a person logs or that family log for them, and whether their meals are shared with the family. A meal or nutrition-label photo is read once to fill in the foods and is not kept.
Usage and diagnostics — app interactions such as setup, joining a family, viewing plans and purchase results, along with installation identifiers and operational errors. Signed-in usage events may be linked to your account. We use these to understand and improve the service, not for advertising.
How we use it
To provide the service: showing wellbeing status to invited family members, generating alerts, computing each Member’s personal baselines, delivering notifications, processing subscriptions, and providing support.
We do not sell personal data. We do not serve ads. We do not use health or location data for any advertising purpose.
Who can see the Member’s data
Only the family members the Member (or their authorized representative) has approved, with the sharing scope they chose. The Member can change visibility or pause sharing at any time. A profile photo, if a person adds one, is shown to the people in each family circle they belong to, including on the family map and family lists. They can remove it in Edit profile at any time; leaving a circle removes it from that circle, and deleting the account removes it from all of them. Our staff access personal data only when needed for support or safety, under minimum-necessary access controls, and access is logged.
Service providers
We use a small set of processors to run WellChime: Supabase (database, authentication, storage), Render (hosting), Apple (In-App Purchase and notifications), Expo (push delivery), Resend (email), Sentry (crash diagnostics), Google Analytics (marketing website pages only — not in-app health screens), Cloudflare (bot challenges when enabled), and OpenAI (Talk to WellChime, the suspected-fall voice check and reading meal and nutrition-label photos).
When you use Talk to WellChime, spoken or typed, OpenAI processes the conversation audio/text and the tool answers WellChime looks up for that turn — which can include health readings from Apple Health (such as heart rate, blood oxygen, heart rate variability, sleep and steps), medication names and doses, check-in status, shared location or place labels, calendar items, and first names in your circle — solely to answer from your family’s records. For the suspected-fall voice check, OpenAI processes your voice and responses to ask whether you need help. When you snap a meal or a nutrition label, OpenAI receives that photo and any note you add, once, to name the foods and amounts for you to review; WellChime does not keep the photo. OpenAI is not used for advertising. We do not sell this data.
These features send information to OpenAI only when you use them, under the Terms of Service; there is no separate permission screen. You can turn OpenAI features off at any time with “Use OpenAI features” in Privacy & Sharing (or Advanced Settings). While it is off, nothing is sent to OpenAI, everything else in WellChime still works, and a suspected-fall check uses the on-screen countdown instead of voice. Turning it off ends any live session; information already sent cannot be recalled. Stop AI ends a session immediately. Minimizing Talk keeps the conversation active while you browse WellChime; leaving the app stops it. Muting turns off your microphone while you can still hear WellChime.
Talk can use a short, dated record of your previous conversation in the same family circle to help you pick up where you left off. Previous conversations do not approve new changes or prove that a health reading is current. Conversation records are included in account data export and deletion.
On the public marketing website, we may derive approximate visitor location (city/region/country/ISP) from IP address via a geolocation lookup and may send operational visit summaries (including IP and that approximate location) to an internal Discord channel used for launch operations. This is not health data and is not used for advertising.
Alerts — what we do and don’t do
WellChime is not a medical device, does not diagnose conditions, and does not call 911 or dispatch emergency services. Suspected-fall signals are heuristic signals, not confirmed events. An alert is marked delivered only when a real delivery record exists.
Data retention and deletion
Raw high-frequency sensor data is kept briefly and aggregated; derived events and care content are kept while your account is active. When you delete your account (in-app or by emailing privacy@wellchime.com), we delete personal data within 30 days, except records we must keep for legal or billing reasons. You may request an export of your data at any time.
Breach notification
If a breach of identifiable health data occurs, we will notify affected users and regulators as required by law, including the FTC Health Breach Notification Rule.
Age eligibility
This version is for people age 13 and older. Accounts for children under 13 are not available. We ask for date of birth before new account setup and do not allow signup when the entered date indicates an age under 13.
If you are under 18, involve your parent or legal guardian before using WellChime and sharing health, location or other personal information. A family role called Child does not establish parental consent or allow an under-13 account.
If you believe a child under 13 has provided personal information, contact privacy@wellchime.com so we can investigate and address the account and information.
Your rights
Depending on your state or country, you may have rights to access, correct, delete, or port your data, and to opt out of certain processing. Contact privacy@wellchime.com and we will honor applicable rights regardless of where you live.
Changes & contact
We’ll post updates here and, for material changes, notify you in the app or by email before they take effect.
Contact: privacy@wellchime.com