Privacy Policy

Telegram bot and Mini App

When you open Well AI inside Telegram, our server validates Telegram-signed launch data. We store your Telegram ID, public name, username if supplied, language, selected region and favourites. The Telegram profile is separate from your ChatGPT account and WLP wallet; no accounts are automatically merged. Telegram sessions last up to seven days. The session token is held in app memory or an essential secure cookie; its server-side copy is stored as a hash.

The Mini App keeps its active conversation in page memory. In the bot chat, up to twelve recent conversation messages are stored encrypted to support follow-up questions. This context is no longer used after 24 hours without a new question, and expired context is cleared when the bot next processes messages. The /new command clears the bot context immediately. Questions and relevant context are sent to the same OpenAI service described above; Telegram ID and profile name are not added to the AI request.

An encrypted reply may be temporarily retained for delivery retries. Its delivery copy is removed after successful sending; undelivered copies expire after 24 hours and are cleaned up on later requests. Technical update identifiers and request-limit records prevent duplicates and abuse. Select Delete Telegram data in the Mini App profile or send /forget to the bot to remove your Well AI Telegram profile, favourites, settings, context and sessions. This does not remove messages stored by Telegram, provider logs or your separate ChatGPT/WLP account. Telegram processes your use of its service under its own privacy policy.

1. Who to contact

The WELL AI / Wellness Longevity team is responsible for the operation of this service and the data handling described here. Send privacy questions and requests to okeara369@gmail.com. Please identify the service as WELL AI so we can direct your request correctly.

This policy describes our service. OpenAI, the provider of ChatGPT sign-in and AI processing, and other external services also have their own privacy terms.

2. Information we process

• Community profiles: your authenticated email and name, and optional country, region, city, interests and contact links that you choose to save. These records are visible to you and the superadministrator, not in the public catalogue or public AI/MCP responses. Residence is self-reported; we do not infer it from nationality, workplace or private activity.
• Professional invitations: the private administration directory can contain names, public professional roles, professional activity locations and business contact channels published by public-facing professionals or their organisations. We retain the source and check date and distinguish organisational contacts from personal ones. Research entries are not registered accounts and do not create newsletter subscriptions. Contact us to correct or remove an entry.
• Invitation and subscription records: single-use invitation digests, expiry and acceptance status, account associations pending administrator review, and dated affirmative newsletter choices or withdrawals. Subscription is optional, initially off, and can be withdrawn in your profile. Messages require the current subscription to match the authenticated delivery email. The current release records preferences but does not automatically send email campaigns.
• Account information: when you sign in with ChatGPT, we receive an account identifier, email address and, where provided, your name. We use a derived identifier to link your WELL AI account, display your email and name, and store any display name you choose. We do not receive your ChatGPT password or your ChatGPT conversation history.
• Chat content: the messages you submit and recent conversation context are processed to answer your questions. They may include personal or health-related details if you choose to enter them. The current shared web interface keeps the active conversation in page memory; we do not write its transcript to our application database.
• Saved memory: memory is off by default. Notes you explicitly save and the memory setting are stored in our database. Account memory is linked to your signed-in identity; guest memory is linked to a browser cookie. Guest notes are not automatically added to an account.
• WLP information: account and wallet identifiers, the number displayed on your WLP card, account dates, and points entries and their descriptions. The current release does not process purchases, card payments, transfers or withdrawals.
• Device and connection information: IP address, browser or app information, request and error information, and authentication/session data needed to deliver the service and prevent abuse. The application uses IP addresses for short-lived request limits. Hosting providers may process operational and security logs.
• Approximate region: our hosting provider supplies the country and, when available, province or city associated with your connection. We use these to set catalogue filters and the default region for AI place searches. We do not request GPS location. A manual region choice is stored on your device and takes priority over automatic selection; choose Auto to reset it. VPNs and mobile networks can affect accuracy.
• Local data: your language, theme, saved catalogue items, cookies, app session credentials and cached public resources may remain on your device. They support sign-in, preferences and normal operation.
• Support correspondence: information you send when you email us, including your contact details, request and information needed to verify ownership of an account.

3. How we use information

We use this information to provide the catalogue and chat, generate and review AI responses, apply the preferences you have chosen to save, maintain your account and WLP wallet, keep sessions secure, prevent misuse, resolve technical problems and respond to your requests.

Where applicable law requires a legal basis, we rely on providing the service you request, your consent for optional processing where required, necessary and proportionate service-security interests, and compliance with legal obligations. Optional memory can be disabled or deleted. A privacy notice does not replace a separate consent where the law requires one.

We do not sell personal information. The current release does not include behavioural advertising or advertising-tracking SDKs. We do not use your chats to build advertising profiles.

4. AI processing and health-related information

In AI mode, recent messages, relevant public knowledge-base material and enabled saved preferences are sent through our server to the OpenAI API. A further AI request checks the draft response. You control what you include in a message and in saved notes. Catalogue-only responses, where available, are generated locally.

Our AI requests disable application-level response storage. This does not mean that all processing is without retention: OpenAI may retain abuse-monitoring information, including prompts and responses, generally for up to 30 days, with exceptions described in its API data policy. OpenAI states that API data is not used to train its models by default, unless the API customer opts in. See the provider links below for its current terms.

WELL AI provides general wellness information. It is not a medical record service, a diagnostic tool or an emergency service. You do not need to provide diagnoses, medical records or other sensitive identifying details to browse the catalogue. Avoid including unnecessary health details, passwords, identity documents or payment information in chats or memory.

The current Android release does not integrate with Health Connect or automatically collect readings from health devices. Health information is processed only if you choose to include it in text you submit.

5. Android voice input and sharing

The current Android app uses internet access and network-status access. It does not request direct permission to read your contacts, SMS, call history, precise location or health-device data, or to use your camera or microphone in its web interface.

If you choose voice input, Android opens the speech-recognition service installed on your device. That service processes your audio under its own settings and privacy terms and may use its servers. WELL AI receives the recognised text, places it in the message field, and sends it for an answer when you submit it. Our WELL AI server does not receive or store the audio recording.

If you choose to copy or share a conversation, its text is placed on your clipboard or passed to the app or recipient you select through the system sharing interface. That destination handles the copy under its own terms. Deleting information in WELL AI does not delete copies you have shared elsewhere.

6. Service providers and international processing

OpenAI provides AI processing and ChatGPT-based sign-in. Our service runs using OpenAI Sites and Cloudflare infrastructure, including application hosting and database storage. These providers process the information necessary to perform their respective functions. Our contact mailbox is hosted by Google, which processes correspondence sent to that address.

Only information needed to operate and support the service is made available to relevant providers and authorised operators. We may disclose information when required by applicable law or when necessary to protect users, prevent abuse or establish or defend legal claims.

Providers may process information in countries other than your own, including the United States. Data-protection rules may differ. We use available contractual and technical protections appropriate to the services and comply with applicable requirements for international transfers.

Links to venues, programmes and other websites lead to independent services with their own policies. Using the catalogue does not authorise us to send your conversation or account information to a venue. Deliberately sharing content or contacting a provider is your choice.

7. Cookies and security

We use cookies and local storage for sign-in, guest-memory ownership and preferences. These are distinct from advertising cookies. The guest-memory cookie can last up to one year; removing it does not, by itself, erase the associated notes in our database. Delete guest notes before clearing the cookie or changing devices.

Connections to our service use HTTPS. Access to account and memory data is checked against the relevant session or guest-memory identifier. Mobile session secrets are stored as hashes on the server, and the Android app disables normal Android backup of its app data. We restrict access to data needed for operation and support. No transmission or storage system can guarantee absolute security.

You can manage browser storage and cookies in your browser, and app storage through Android settings. Blocking or clearing essential storage may sign you out or prevent preferences and guest memory from being retrieved.

8. Retention

• Active conversation: the current shared interface holds it in page memory. Starting a new chat clears the current conversation in that interface. This does not erase saved memory, provider logs or copies you have shared.
• Saved memory: notes remain until you remove them or an applicable deletion request is completed. Switching memory off stops its use in new replies but does not delete the notes. Deleting all memory removes the saved note content and disables memory; a minimal empty settings record may remain until account or data deletion.
• Account and WLP data: retained while your account remains in use, until deletion is requested and completed, subject to a specific legal or security need to retain limited records.
• Mobile sign-in: an authorisation code is valid for two minutes and is single-use. Mobile sessions are valid for up to 30 days unless revoked sooner. Expired records are removed during subsequent authentication housekeeping; expiry and physical removal are separate events.
• Local preferences and cached files: remain until cleared by you, replaced by the app or browser, or removed with app data. Uninstalling the app does not delete your server-side account or saved memory.
• Operational records and correspondence: retained only for as long as needed to address the request, operate and secure the service, resolve a dispute or meet applicable legal obligations. Provider logs and backups follow the relevant provider’s retention and deletion procedures. If an exception affects a deletion request, we explain what is retained and why.

9. Delete your account or data

To request deletion of your WELL AI account and associated data, email okeara369@gmail.com with the subject “WELL AI — account deletion”. You can submit this request without installing or opening the app. Send it from the email shown in your WELL AI account when possible; if you cannot access that address, tell us so we can arrange another proportionate ownership check. You may include your WLP number, but never send passwords or sign-in codes.

You can also request deletion of specific information without deleting the whole account. Tell us what you want removed. Requests are reviewed by the WELL AI team; clicking the email link alone does not submit a request or instantly delete anything.

After verifying a request, we delete the WELL AI account record, its wallet and associated points entries, account-linked memory, and associated mobile sign-in records, unless limited retention is required by applicable law or a specific, necessary security purpose. We explain any such exception and its retention period. We handle requests within the time limits required by applicable law and confirm the result.

You can immediately remove saved notes in WELL AI: Profile → Settings → Memory → Delete all memory. You can edit or delete individual notes there as well. Guest memory is separate from account memory: delete it in the same browser while using the guest profile. Clearing cookies or uninstalling the app first may remove the identifier needed to locate guest notes.

Deleting a WELL AI account does not delete your separate ChatGPT account. To remove local data, use your browser’s site-data controls or Android Settings → Apps → WELL AI → Storage → Clear data. Copies held by recipients of content you shared and independently retained provider records must be handled through those recipients or providers.

10. Your choices and rights

You can use the public catalogue without signing in, choose what you submit to the assistant, keep optional memory off, change your display name, clear saved notes and request account deletion.

Depending on the law that applies to you, you may have rights to access or obtain a copy of your information, correct it, request erasure, restrict or object to certain processing, request portability, withdraw consent where processing relies on consent, and complain to a competent data-protection authority. Contact us using the address above. We may request only the information reasonably needed to verify and handle the request.

11. Children

WELL AI is a general wellness service and is not designed for children under 13. We do not knowingly collect information from children under 13. Where a higher minimum age or parental permission is required by applicable law or the sign-in provider, that requirement also applies. A parent or guardian who believes a child has supplied personal information can contact us to request its removal.

12. Changes to this policy

We update this page when our data practices change and revise the date above. Where a change requires a further notice or consent, we provide it before the relevant new processing. The policy remains available publicly and from the WELL AI interface.

Provider policies

• OpenAI Privacy Policy
• OpenAI API Data Controls
• Telegram Privacy Policy
• Cloudflare Privacy Policy
• Google Privacy Policy