Privacy Policy

Welltread, Inc. (“Welltread,” “we,” “us”) operates the websites at welltread.co and welltread.appand the Welltread mobile application (collectively, the “Service”). We provide personalized movement programs for adults 40 and over.

For privacy questions or requests, contact us at hello@welltread.co.

We collect the following categories of personal information:

• Account information. Email address, password (if you set one), and the timestamp at which you created your account.
• Quiz responses. Your answers to our movement assessment, which includes age range, niche selection, mobility concerns, daily activity, prior exercise history, and free-text responses about your movement goals.
• Plan and usage data.Your assigned movement plan, session completions, weekly check-ins, “this hurts” flags, and progress over time.
• Billing information. If you subscribe, our payment processor (Stripe) collects your payment details. We do not store full card numbers; we receive a token and metadata about your subscription status.
• Communications. Records of emails we send you, including delivery, open, and click events from our email service.
• Technical data. IP address, browser, device type, operating system, and approximate location (derived from IP). This is used for security, analytics, and to deliver the Service.
• Cookies and similar technologies. We use first-party cookies for authentication and to remember preferences. We do not currently use third-party advertising cookies; this may change in the future, and we will update this policy and provide a consent mechanism in jurisdictions where required.

• To create and manage your account
• To deliver your personalized movement plan and track progress
• To process payments and manage subscriptions
• To send transactional emails (account confirmations, plan reminders, billing notices) and, if you opt in, marketing emails
• To improve the Service through aggregated analytics
• To comply with legal obligations and enforce our Terms of Service

We share personal information with the following third-party processors strictly to provide the Service. Each operates under contractual data-protection terms.

• Supabase (Singapore, AWS) - database and authentication
• Cloudflare (United States) - hosting, content delivery, edge compute
• Stripe (United States) - payment processing
• Resend (United States) - transactional and marketing email
• Anthropic (United States) - AI processing of your free-text quiz answers to personalize plan copy. Anthropic does not train its models on this data per its commercial API terms.

We do not sell your personal information. We do not share it with advertisers for cross-context behavioral advertising.

Welltread operates in the United States. If you use the Service from outside the US, your information will be transferred to, stored, and processed in the US and other countries where our service providers operate. We rely on standard contractual clauses and similar mechanisms to safeguard cross-border transfers.

We retain account and plan data for as long as your account is active. After account deletion, we retain limited records necessary for legal and accounting purposes (typically up to seven years for financial records). We retain anonymized analytics indefinitely.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Request correction or deletion
• Object to or restrict certain processing
• Request a portable copy of your data in a machine-readable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email hello@welltread.co from the address associated with your account. We respond within 30 days.

California residentshave specific rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of “sales” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law.

Welltread is intended for adults aged 18 and over, and our movement content targets adults aged 40 and over. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, contact us at hello@welltread.co and we will delete it.

We use industry-standard security measures, including TLS encryption in transit, encrypted credentials at rest, and access controls limiting employee data access to those with a business need. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The “Last updated” date at the top reflects the latest revision. Continued use of the Service after changes take effect constitutes acceptance.

Welltread, Inc.
Email: hello@welltread.co