Privacy Policy
Last updated: 17 July 2026
At WellPilot, your privacy is fundamental to our mission. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the WellPilot platform.
1. Information We Collect
Personal Information
When you register for WellPilot, we collect information such as your name, email address, phone number, and professional details. For wellness center owners, we also collect clinic name and business information.
Health & Wellness Data
Our platform processes health metrics including body weight, body composition measurements (body fat percentage, muscle percentage, visceral fat), biological age, BMR, and body line measurements (chest, waist, hip). This data is provided by authorized coaches and wellness practitioners.
Usage Data
We automatically collect information about how you interact with our platform, including pages visited, features used, device information, browser type, and IP address.
2. How We Use Your Information
Service Delivery
We use your data to provide, maintain, and improve the WellPilot platform — including client progress tracking, body composition analytics, coach dashboards, and member portals.
Communication
We may use your contact information to send service-related notifications, updates, and support communications. We will never send unsolicited marketing emails without your consent.
Analytics & Improvement
Aggregated, anonymized usage data helps us understand platform performance and improve user experience. Individual health data is never shared or sold.
3. Data Security
Infrastructure Security
WellPilot is built on Supabase, leveraging enterprise-grade PostgreSQL databases with Row-Level Security (RLS) policies ensuring strict multi-tenant data isolation. Each clinic's data is completely isolated from other clinics.
Encryption
All data transmitted between your device and our servers is encrypted using TLS/SSL. Data at rest is encrypted using AES-256 encryption standards.
Access Controls
Role-based access controls (RBAC) ensure that owners, coaches, and members can only access data appropriate to their role. Authentication is handled via secure OTP-based phone verification.
4. Your Rights
Access & Correction
You have the right to access your personal data and request corrections to any inaccurate information. Contact your wellness center administrator or our support team for assistance.
Data Deletion
You may request deletion of your account and associated data at any time. Upon request, we will delete your personal information within 30 days, except where retention is required by law.
Data Portability
You have the right to request a copy of your personal data in a structured, machine-readable format.
5. Third-Party Services
Service Providers
We use trusted third-party services for hosting (Vercel), database management (Supabase), and authentication. These providers are bound by strict data processing agreements.
No Data Selling
We do not sell, rent, or trade your personal information or health data to any third parties. Period.
6. Contact Us
Privacy Inquiries
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at contact@wellpilot.in. We aim to respond to all privacy-related inquiries within 48 hours.
Children's Privacy
WellPilot is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.