LifeWell privacy policy
This is LifeWell's privacy policy: a plain-language account of what the app records about you, where that goes, who else can see it, and how to remove it. LifeWell holds health readings, family relationships and personal notes, so the policy is written to be read rather than survived — no defined terms in capital letters and no clause numbering. You choose what goes in; nothing is read off your phone and nothing is inferred about you. Your record sits in a database LifeWell rents from Supabase and controls, tied to your account, and it is never sold, never used for advertising and never shared with anyone for their own purposes. How you use the app is recorded as a replay of the screens you open, so problems can be seen rather than guessed at, and using the service means agreeing to that.
Questions
Is my LifeWell data sold or used for advertising?
No. It is not sold, not rented, not used to target advertising, not handed to anybody else to train their model, and not shared with an insurer, an employer or a data broker. There is no advertising in the app. The Android build does declare the advertising identifier permission and nothing in this release reads it — the permissions page carries that in full, and is where it would change. LifeWell does reserve the right to use content from free accounts to improve and train its own features; content in a paid plan is not used that way without your explicit consent.
Where is my data actually stored?
In a PostgreSQL database on hosted Supabase Cloud, in the Asia-Pacific (Singapore) region. Supabase operates that database for LifeWell and is named in the policy's processor table like every other company that touches your record. Your rows are separated from everyone else's by the database itself rather than by the app remembering to ask. Recently loaded pages, and anything you write while offline, are held on your device and sent when you reconnect; photos and documents go to your own Google Drive rather than to LifeWell.
Is my data encrypted?
Everything between the app and the database travels over an encrypted connection, and the database enforces which rows each account may read rather than relying on the app to check. Data is encrypted at rest as a property of the hosting platform rather than something LifeWell configures on a disk of its own, and it is stated on that basis. What LifeWell will not claim is that any system is impossible to breach.
Who else can see my health information?
Nobody, for their own purposes. Google handles sign-in and sees your name, email and an account identifier, never what you record. An error tracker and a usage counter each receive an opaque account identifier and never a reading, a note or a name. Session replay is switched on and is the one to know about: it records the screens you use, so a recording shows whatever was on the screen at the time, including a reading. Web analytics counts page views and carries no reading.
Does LifeWell track my location?
No. No part of the app asks the device or the browser where you are, and no location permission is declared in the Android manifest.
What happens if I contact you without an account?
The get-involved form stores the name, email address, optional link and message you typed. It is the only thing LifeWell keeps about someone who has not signed up, nobody who submits it can read submissions, and asking from the address you used gets it deleted.
Can I get a copy of everything you hold?
Yes, exported from inside the app at any time, in a format you can open without LifeWell. There is no charge, no limit on how often, and no requirement to explain why.
Tips
- Export before any big change. It costs one tap and it is the difference between a record and a hope.
- The date at the top of the policy is the date the words changed, not the date the page was rebuilt.
- If a sentence made you re-read it, that is a fault in the writing — reporting it gets it rewritten.
By Ahsan Mahmood · updated 2026-08-04
Open LifeWell privacy policy on LifeWell