Privacy Policy

Last Updated: November 2025

Your Privacy Matters: We are committed to protecting your personal health information. This policy explains how we collect, use, and safeguard your data.

⚠️ Blockchain Privacy Notice: If you participate in our HWT token program, your Solana wallet address and token transactions will be recorded on the public Solana blockchain. Blockchain data is permanent and publicly accessible. See Section 1.4 for details.

1. Information We Collect

1.1 Personal Information

Name and email address
Phone number (if you choose SMS authentication)
Profile information and preferences
Account credentials and authentication data

1.2 Health & Wellness Data

Activity logs (meals, fitness, mindfulness sessions)
Body stats and measurements
Wellness goals and preferences
AI-generated recommendations history
Progress tracking and achievements

1.3 Usage Data

App interactions and feature usage
Device information and analytics
Token rewards and engagement metrics
Session data and login history

1.4 Blockchain & Wallet Data (HWT Token Program)

If you participate in our HWT token rewards program, we collect:

Solana Wallet Address: Your public Solana wallet address for token distribution
Token Earnings: Records of HWT tokens earned through platform engagement
Distribution History: Records of token distributions to your wallet
Transaction Data: Blockchain transaction signatures and timestamps

Important: Blockchain transactions are permanently recorded on the public Solana blockchain. While your wallet address is pseudonymous (not directly linked to your identity by us), all transactions are publicly visible and cannot be deleted. We do not control the blockchain or third-party blockchain explorers.

2. How We Use Your Information

We use your data to:

Provide Services: Deliver personalized wellness recommendations and track your progress
AI Recommendations: Power our AI models to generate relevant health insights
Token Distribution: Calculate, track, and distribute HWT token rewards to your Solana wallet
Improve Experience: Analyze usage patterns to enhance features and functionality
Communication: Send important updates, notifications, wellness tips, and token distribution confirmations
Security: Protect your account and prevent unauthorized access
Compliance: Meet legal and regulatory requirements

3. Data Storage & Security

We take security seriously:

Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
Cloud Infrastructure: We use industry-leading secure cloud platforms (Firebase, Supabase)
Access Controls: Strict authentication and authorization protocols with role-based access
Regular Audits: Ongoing security assessments and updates
Wallet Security: We never store your wallet private keys - you maintain full custody
Data Isolation: Your health data is kept separate from publicly accessible blockchain data

4. Data Sharing

We DO NOT sell your personal health data. We may share information only in these limited cases:

4.1 Service Providers

Authentication Providers: Third-party sign-in services (Google, Apple, Facebook, GitHub, Twitter)
Cloud Infrastructure: Database and backend services (Firebase, Supabase)
AI Services: Google Gemini AI for generating wellness recommendations
Communication Services: SMS and email verification services

4.2 Blockchain Network

Solana Network: Token distribution transactions are broadcast to the public Solana blockchain
Public Visibility: Your wallet address and token transactions are permanently visible on blockchain explorers
No Personal Identity: We do not include your name, email, or health data in blockchain transactions

4.3 Legal Requirements

When required by law, court order, or government request
To protect our rights, property, or safety, or that of our users
To enforce our Terms of Service

4.4 Anonymized Data

Aggregated, non-identifiable data for research, analytics, and service improvement
Statistical analysis that cannot be traced back to individual users

5. Your Data Rights

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information through your account settings
Deletion: Request deletion of your account and data (see limitations below)
Export: Request a download of your wellness data in a portable format (contact support@holisticwellness.ai if not available in app)
Object: Object to certain data processing activities
Withdraw Consent: Stop participating in the token program by disconnecting your wallet

To exercise any of these rights, contact us at support@holisticwellness.ai or use the available features in your account settings.

Blockchain Data Limitations: We can disconnect your wallet and delete your account data from our systems, but we cannot delete blockchain transactions that have already been recorded on the Solana network. Those records are permanent and outside our control.

6. Third-Party Services

We integrate with:

6.1 Authentication & Infrastructure

Authentication Providers: Google, Apple, Facebook, GitHub, Twitter for secure sign-in
Verification Services: SMS and email verification code providers
Cloud Services: Firebase, Supabase for database and backend infrastructure

6.2 AI & Analytics

AI Services: Google Gemini AI for wellness recommendations and insights
Analytics: Usage analytics and performance monitoring

6.3 Blockchain Services

Solana Network: Public blockchain for HWT token distributions
Wallet Providers: Third-party wallets like Phantom, Solflare, etc. (if you connect them)
RPC Providers: Solana RPC services for blockchain interactions

These services have their own privacy policies. We recommend reviewing them, especially for wallet providers.

7. Cookies & Analytics

We use minimal cookies and analytics to:

Maintain your login session
Remember your preferences and settings
Understand how users interact with our app
Improve user experience and performance

You can control cookie preferences through your browser settings. Disabling cookies may affect functionality.

8. Children's Privacy

HolisticWellness.ai is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided information, please contact us immediately and we will delete it.

9. International Users

Your data may be processed in the United States or other countries where our service providers operate. By using our service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

10. Data Retention

10.1 Account Data

We retain your data as long as your account is active or as needed to provide services. When you delete your account, we remove your personal data within 30 days, except where required by law.

10.2 Blockchain Data

Token distribution records on the Solana blockchain are permanent and cannot be deleted. However, we will remove the association between your account and your wallet address in our systems.

10.3 Legal & Security

We may retain certain data for longer periods if required by law or for legitimate business purposes such as fraud prevention.

11. Your Wallet Privacy

11.1 Wallet Connection

When you connect a Solana wallet to receive HWT tokens:

We store only your public wallet address (not private keys)
You maintain full custody and control of your wallet
We cannot access your wallet funds or execute transactions without your approval
You can disconnect your wallet at any time

11.2 Third-Party Wallets

If you use third-party wallet providers (Phantom, Solflare, etc.):

Those providers have their own privacy policies and security practices
We are not responsible for the security or privacy of third-party wallets
We recommend using reputable, well-established wallet providers

11.3 Blockchain Transparency

The Solana blockchain is public. Anyone can:

View your wallet address and token balances
See all token transactions (amounts, timestamps, recipients)
Access this data through blockchain explorers (Solscan, Solana Explorer, etc.)

We do not control this public information or blockchain explorers.

12. Changes to Privacy Policy

We may update this policy from time to time. We'll notify you of significant changes via:

Email notification to your registered email address
In-app notification
Notice on our website

Continued use after changes means you accept the updated policy. We encourage you to review this policy periodically.

13. Contact Us

Questions or concerns about your privacy? Reach out to us:

Email: support@holisticwellness.ai
Website: holisticwellness.ai

14. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information (we don't sell your data)
Right to deletion of personal information
Right to non-discrimination for exercising your rights

To exercise these rights, contact us at support@holisticwellness.ai

15. European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

Our legal basis for processing includes consent, contract performance, and legitimate interests. Contact us at support@holisticwellness.ai for any privacy-related requests.

Your Control: You own your health data. You can access, export, modify, or delete it at any time through your account settings or by contacting support@holisticwellness.ai. For blockchain-related data, see Section 10.2.

← Back to Home