Privacy
Last updated: 25 August 2026.
Wellfy is built in public by a small team in London. This policy covers both this website and the Wellfy app. It is written to be read, not to be survived, so if anything here is unclear please tell us and we will fix the wording.
The short version. We set no cookies for tracking, run no analytics, and embed no third-party trackers. We do not sell your data and we never will. Training is personal, so your workouts, your body measurements and your location are treated as sensitive. You can get a copy of everything we hold, or delete your account, from inside the app.
Who we are
Wellfy Ltd is the data controller for the personal information described in this policy, except for the narrow set of gym-created records explained under If your gym uses Wellfy. You can reach us at hello@wellfy.io for anything on this page, including a request to see or delete your data.
What we collect
If you join the waitlist on this website
The member form asks for your email address, your first name, your city, and where you currently train. The gym form asks for your email address, your name, your gym's name, your role, roughly how many members you have, and your region. Only the email address is required. We use this to email you when Wellfy opens in your area, and for the occasional build-in-public update.
When you create an account
- Your name, a username, and your email address.
- Your mobile number. We ask for this because we verify new accounts by text message rather than by email, and because it is what secures two-factor login if you turn it on.
- A password, which we store only as a salted hash. We never see or store the password itself.
- If you sign in with Google instead, we receive your name, your email address and a Google account identifier. We do not receive your Google password.
What you tell us when setting up
After sign-up we ask a series of questions to make the app useful from day one. Every one of these is optional and every step can be skipped. Skipping saves nothing.
- Date of birth and gender.
- Where you are based. This is stored as country, area, town and postcode. Your device works out the place name locally and sends only that text, so we never receive the coordinates behind it.
- Your goals, what motivates you, and how experienced you are.
- Height and weight.
- Any injuries, recorded as the part of the body affected.
- How you train: which types, what equipment you can get to, how often, and when you prefer to train.
- Your gym, if you want to connect to one.
- A short bio and a profile photo, if you add them later.
What we record when you train
- Every session you log: the exercises, sets, reps, loads, durations and any notes you add.
- Heart rate and calories, for the activities where you record them.
- What we work out from that: your personal bests, records, XP, level, streak and league position, plus a training profile that tracks which muscles you have worked recently.
Location
This is the area people ask about most, so here it is in full.
- When you finish a session, we store the coordinates of where it happened. This is what lets a workout be recognised as having taken place at your gym.
- When you check in at a gym, we store the coordinates of that check-in.
- A post only carries coordinates if you switch that on for that specific post. It is off by default.
- Recent map activity is kept for 24 hours and then deleted.
On the map itself, other people never see your device's coordinates. The map shows the gym's location, not yours. Your location sharing has three settings, and new accounts start on friends only, which means people you and they both follow. You can set it to public, or turn it off entirely, and you can hide your map pin separately.
Your device
- A push notification token, if you allow notifications, so we can send them.
- A device identifier tied to your login, so you can stay signed in and so you can sign out everywhere if you lose a phone.
- Your IP address is used momentarily to rate-limit requests and block abuse. We do not store it.
Payments
Wellfy Pro is billed through the App Store or Google Play, handled for us by IAPHub. We send them your Wellfy account identifier and receive back the transaction, which product you bought, the dates, the platform, the country, and the price. We never see your card details.
Health and fitness information
Your height, your weight, your injuries and your training logs say something about your health. UK data protection law treats that as a special category that needs stronger protection, and we agree.
We rely on your explicit consent to hold it. You give that consent by choosing to enter it, which is why every one of those questions is optional and skippable. You can withdraw consent at any time by clearing the fields or by deleting your account, and withdrawing it does not affect anything we did while it was given.
Why we are allowed to use it
| What | Lawful basis |
|---|---|
| Running your account and giving you the app you signed up for | Performance of a contract |
| Health and fitness information | Explicit consent (Article 9) |
| Verifying your phone, securing logins, blocking abuse | Legitimate interests, and our legal obligation to keep the service secure |
| Push notifications and waitlist emails | Consent |
| Taking payment for Wellfy Pro | Performance of a contract |
| Keeping records of purchases and disputes | Legal obligation |
What other people can see
Wellfy is social, so some things are visible by design. It matters that you know which.
- Your profile and your posts are public by default. That includes your name, username, photo, bio, level, badges and any stats you pin. You can make your account private in settings, which means only followers you approve can see your posts and profile.
- Leaderboards show your position and league tier to other members.
- Your location is friends only unless you change it, and your map pin can be hidden separately.
- Profile photos and banner images are served from a public address, so anyone with the link can view them. Photos in posts and stories are protected and need a signed link.
If your gym uses Wellfy
A gym can never create an account for you, and can never add you as a member without you either asking to join or accepting an invitation. You can leave at any time.
If you are a member of a gym on Wellfy, its staff can see your name, when you joined, when you last trained there, roughly how often you have been coming, and a rating we calculate of how likely you are to drop off. They can also see anything they have created about you themselves, such as an assigned workout or a note. They cannot see your email address, your phone number, your body measurements, your personal bests, or the sessions you log on your own.
You control this. In settings you can choose, per gym, what to share, what to share anonymously and what to hide. Two things are fixed: feedback you give your gym is always anonymised, and a session that gym staff ran for you is always visible to them, because they were there for it.
Where gym staff create records about you for their own purposes, such as notes and outreach, the gym is the controller for those records and we handle them on the gym's instructions under a written agreement. For everything else described in this policy, Wellfy is the controller.
Feedback you give about a gym is only ever shown to it in groups of at least three people, and if fewer than three have answered we show the gym nothing at all rather than a number it could work backwards from.
Who we share data with
We do not sell your data, we do not share it with advertisers, and we do not use it to build advertising profiles. We do use a small number of suppliers to run the service. Each of them only receives what they need to do their job.
| Supplier | What for | What they receive |
|---|---|---|
| Hetzner | Servers and database, in Germany and Finland | Everything, at rest |
| Twilio | Verification texts and two-factor codes | Your mobile number |
| Resend | Account emails | Your email address and the message |
| Google Firebase | Push notifications, passed to Apple on iPhones | Your device token and the notification text |
| IAPHub | Wellfy Pro subscriptions | Your account id and the transaction |
| Upstash | Passing jobs between our own services | Job data, which can include your account id and a session's location |
| Backblaze | Storing photos and videos | The media you upload |
| Cloudflare | Delivering that media quickly and checking access | The media, and your IP when you view it |
| CARTO | The background imagery on the map | Your IP and the area of the map on screen |
| unpkg | Delivering the mapping code the app uses | Your IP when you open the map |
| Sign in with Google, if you use it | Your Google account details |
We may also share information if the law requires it, or to protect someone's safety.
Where your data is held
Our servers and database are in Germany and Finland. Some of the suppliers above are based outside the UK and the European Economic Area, mainly in the United States. Where that is the case, the transfer is covered by the UK's International Data Transfer Addendum or standard contractual clauses.
How long we keep it
| What | How long |
|---|---|
| Your account and training history | Until you delete your account |
| Recent map activity | 24 hours |
| Waitlist details | Until you ask us to remove them, or two years after launch |
| Server logs | 7 days |
| Purchase records | 6 years, because tax law requires it |
Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, send it to another service, restrict what we do with it, or object to us using it. You can also withdraw any consent you have given.
You can download your data and delete your account from inside the app, under Settings. Deleting your account removes your profile, your posts and your training history. If you would rather we did it for you, or you want anything else on this list, email hello@wellfy.io and we will action it within one month.
If you are not happy with how we have handled something, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you came to us first so we can put it right.
Children
Wellfy is not intended for children under 13, and we ask you not to create an account if you are younger than that. If you believe a child has an account, email hello@wellfy.io and we will remove it.
Cookies and tracking
This website sets no cookies at all. It runs no analytics and loads no third-party scripts, so nothing here follows you around the internet.
The app uses a single sign-in cookie to keep you logged in. It is strictly necessary, it does no tracking, and there is no way to use an account without it.
Keeping your data safe
Passwords are salted and hashed. Traffic is encrypted in transit. Access to production data is limited to the people who need it. No system is perfect, and if there is ever a breach that puts you at risk we will tell you and the Information Commissioner's Office within the time the law allows.
Changes to this policy
If we change anything meaningful we will update the date at the top and, where the change actually affects you, tell you in the app before it takes effect.
Contact
Questions about privacy, or want to exercise any of the rights above? hello@wellfy.io.