Privacy Policy

Last updated: June 18, 2026

Application: Well Body Tech (com.wellbodytech.tablet)

Published by: WellBodyTech

Contact: support@wellbodytech.com

1. Who this policy applies to

This Privacy Policy applies to anyone who uses the Well Body Tech mobile application, visits our website at wellbodytech.com, or uses related services that reference this policy. It covers both individual users and users acting within an organization (e.g., coaches, administrators, and athletes assessed through the platform).

If your organization provides you access to this app, they may have their own data governance obligations as a data controller. This policy describes our obligations as the application developer.

2. What information we collect

We collect only information that is necessary to operate the app. Below is a specific and complete inventory.

2a. Account and organizational information

• Email address (SuperAdmin login)
• Administrator name and organizational identifiers
• Athlete names, identifiers, and optional demographic information (age, gender, ethnicity — used for population-specific normative comparisons)
• Tags, group assignments, and team structure

2b. Health and fitness assessment data

• Body measurements (height, weight, body composition metrics)
• Assessment results from 600+ standardized fitness tests (strength, power, balance, flexibility, body composition, cardiovascular, and other fitness categories)
• Normative comparison outputs (age-, gender-, and population-matched fitness norms)
• Physical activity readiness responses (PAR-Q questionnaire)
• Optional health background information (injuries, surgeries, physical limitations — entered voluntarily)
• Medical clearance status (fitness-for-activity screening purposes; not a clinical diagnosis)
• Blood pressure, heart rate, and other biometric readings captured from connected fitness devices during assessments
• Assessment timestamps and session metadata

All health and fitness data is entered by users or captured from compatible fitness devices that users deliberately connect. We do not infer health data from passive device signals.

2c. Bluetooth device data

• Bluetooth device names and hardware identifiers (MAC addresses or equivalent) for compatible fitness measurement devices (e.g., force plates, heart rate monitors, blood pressure monitors, body composition analyzers, pulse oximeters, thermometers, weight scales)
• Real-time measurement data streamed from connected devices during assessment sessions
• Device assignment preferences stored locally on your tablet for reconnection

2d. Location data

Location permission (precise and approximate) is requested solely because Android requires it to scan for and connect to Bluetooth Low Energy (BLE) devices. We do not track your physical location, store GPS coordinates, use location for advertising, or share location data with any third party. This requirement is imposed by the Android operating system for BLE scanning; we have no control over it.

2e. Camera data

The camera is used exclusively for scanning QR codes to process athlete registration. The camera feed is processed entirely on your device in real time. We do not capture, record, store, or transmit photographs, video, or any camera frame as media, at any time, for any purpose.

2f. Notifications

The app may send local device notifications related to ongoing assessment sessions or background BLE operations. We do not send marketing notifications. You can disable notifications at any time in your device settings.

2g. Technical and diagnostic information

• App version, build number, platform type (Android)
• Error logs and crash diagnostic data used to maintain app stability
• API request metadata (timestamps, response codes) to monitor service health

We do not collect advertising identifiers, precise GPS location, browsing history, contacts, call logs, SMS, or financial information.

3. Why we collect it (legal bases)

Depending on where you are located, we rely on one or more of the following legal bases to process your personal information:

• Contract performance: Processing is necessary to provide the assessment, reporting, and athlete management features you or your organization have agreed to use.
• Legitimate interests: Technical diagnostics, security monitoring, and service improvement, where those interests are not overridden by your rights and expectations.
• Consent: For optional health background information and for any processing that requires explicit consent under applicable law. You may withdraw consent at any time by contacting us.
• Legal obligation: Where we are required to retain or disclose information by law.

For users located in the European Economic Area (EEA) or the United Kingdom, we process personal data in accordance with the General Data Protection Regulation (GDPR) / UK GDPR on the bases described above.

4. How we use information

We use the information we collect for the following purposes only:

• Delivering the core app features: Running assessments, capturing BLE sensor data, calculating and displaying normative comparisons, managing athlete and team profiles
• Generating reports: Producing PDF assessment reports and visualizations based on data you have entered or captured
• Cloud synchronization: Transmitting and storing assessment data securely on our backend infrastructure (api.wellbodytech.com) so it is accessible across devices and preserved offline
• Athlete registration via QR: Decoding QR codes to look up pending athlete registrations from our backend
• Authentication and access control: Verifying SuperAdmin credentials and managing organizational role access
• Maintaining and improving the service: Debugging, stability monitoring, performance optimization, and feature development
• Legal compliance: Fulfilling legal obligations and enforcing our agreements

We do not use health or fitness data for advertising, profiling, or selling to third parties. We do not use assessment data to train external AI or machine-learning models without explicit consent.

5. How we share information — and how we do not

What we do NOT do

• We do not sell your personal information or health data, to anyone, ever.
• We do not share your health or fitness data with advertisers, data brokers, or analytics companies for their own commercial purposes.
• We do not use your data for cross-context behavioral advertising.
• We do not share health data with insurance companies, employers, or government entities, except where legally compelled.
• We do not provide third parties with access to individual athlete records without authorization.

What we may do

• Infrastructure providers: Your data may be processed by hosting and cloud infrastructure providers operating on our behalf, under contractual confidentiality and data processing obligations.
• Within your organization: Administrators you designate may view athlete data within the scope of their role. Data sharing within an organization is governed by that organization's own policies.
• Legal requirements: We may disclose information if required by applicable law, court order, or to protect the safety of users or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, with prior notice provided where required by law.

6. Device permissions explained

The following permissions are declared by the app and are explained here in plain language:

You can revoke any permission at any time in your device's Settings → Applications → Well Body Tech → Permissions. Revoking a permission may disable the feature that depends on it.

7. Data storage, security, and retention

Storage locations

• Cloud backend: Assessment data, athlete profiles, records, and reports are transmitted to and stored on our backend servers at api.wellbodytech.com. Connections use HTTPS/TLS encryption in transit.
• Local device storage: Certain preferences (BLE device assignments, cached records) are stored locally on your tablet to support offline functionality. This data is not accessible to other apps.

Security measures

We implement administrative, technical, and organizational safeguards appropriate to the sensitivity of health and fitness data, including:

• Encrypted data transmission (HTTPS/TLS)
• Access controls and authentication for backend services
• Role-based access limiting data access to authorized administrators
• Regular security reviews of our infrastructure

No method of electronic transmission or storage is 100% secure. If you have reason to believe your account has been compromised, contact us immediately at support@wellbodytech.com.

Retention

We retain personal information for as long as:

• Your account or organizational relationship with us is active, or
• Needed to provide the services and fulfill legitimate business purposes, or
• Required by applicable law or regulation

When data is no longer needed, we delete or anonymize it using reasonable technical means. You may request deletion of data we hold about you (see Section 9). Some data may be retained in anonymized or aggregated form for service improvement or research purposes, where it can no longer identify any individual.

8. Third-party services

The app uses the following categories of third-party services:

• Cloud infrastructure: Hosting and backend services that process data solely on our instruction, under contractual data processing agreements.
• Mobile libraries: Open-source Flutter packages used for BLE communication, QR scanning, PDF generation, and UI components. These libraries do not independently collect or transmit personal data.

We do not integrate third-party advertising SDKs, social media pixels, or behavioral analytics tools into this application.

9. Your rights and choices

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of personal information we hold about you
• Correction: Request that inaccurate data be corrected
• Deletion: Request that we delete your personal data, subject to legal retention obligations
• Restriction: Request that we limit how we process your data in certain circumstances
• Objection: Object to processing based on legitimate interests
• Portability: Receive your data in a structured, machine-readable format where applicable
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact: support@wellbodytech.com

We will respond within the timeframe required by applicable law (typically 30 days, or 45 days where an extension is permitted). We may ask you to verify your identity before fulfilling a request.

California residents (CCPA/CPRA):

• We do not sell personal information as defined by the CCPA/CPRA.
• We do not share personal information for cross-context behavioral advertising.
• We do not use sensitive personal information (including health data) for inferring characteristics about you for advertising purposes.
• You have the right to know, delete, and opt out. Contact us at the address below to exercise these rights.

EEA / UK residents (GDPR / UK GDPR): You have the rights described above under applicable data protection law. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

10. Children and minors

Well Body Tech is a professional tool for use by qualified practitioners (coaches, trainers, sports performance staff). It is not directed at children.

However, youth athletes (including individuals under 18, or under 13 in the US) may be assessed through the platform under the direct supervision of qualified adults. In such cases:

• The responsible adult (coach, trainer, guardian, or organization) is responsible for obtaining any required parental or guardian consent before entering a minor's information
• We do not knowingly solicit or collect personal information from children without appropriate authorization from a responsible adult or organization
• We do not use youth athlete data for advertising, profiling, or any purpose beyond providing the assessment services
• If you believe we have inadvertently collected personal information from a minor without appropriate consent, contact us immediately at support@wellbodytech.com and we will promptly investigate and delete the information

11. International data transfers

If you use the app from a country other than where our servers are located, your personal information may be transferred to and processed in a different jurisdiction. Where such transfers occur and where required by law (e.g., transfers from the EEA), we apply appropriate safeguards, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Contractual obligations with service providers
• Other lawful transfer mechanisms recognized under applicable law

By using the app, you acknowledge that your data may be transferred internationally as described in this policy.

12. Security incident notification

If we become aware of a security breach that is likely to result in a high risk to your rights and freedoms, we will notify you and/or the relevant supervisory authority as required by applicable law (e.g., within 72 hours under GDPR where required). Notification will be provided via the email address associated with your account or through other reasonable means.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the app's features, or applicable law. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Provide notice through the app, via email, or by other appropriate means

Continued use of the app after the effective date of an updated policy constitutes your acceptance of the revised terms. If you do not agree, you should stop using the app and contact us to request deletion of your data.

We encourage you to review this policy periodically.

14. How to contact us

For privacy questions, data requests, or concerns about this policy:

• Email: support@wellbodytech.com
• Website: https://wellbodytech.com

We take all privacy inquiries seriously and will respond promptly.

Summary of key commitments