Last updated: September 2, 2026

Wellness AF Club LLC (“Wellness AF,” “we,” “us”) operates the Wellness AF app, wellnessafclub.com, the Wellness AF newsletter, and related support services. This policy explains what data stays on your phone, what leaves your phone when you use connected features, why we use it, and the choices you have.

You must be at least 18 years old to use Wellness AF.

The short version

Most of your private tracking data stays on your phone. This includes your food and weight logs, goals, lesson progress, recipes, reminders, Buddy progress, and most settings. Wellness AF does not keep an account-backed recovery copy of that history.

Connected features send limited data to Wellness AF or a service provider. These features include signing in, the Club, food search, barcode lookup, AI scans, Speak My Meal, purchases, push notifications, crash reports, the website, and the newsletter.

We do not sell personal data. The app does not show ads or use an advertising network. The website uses Google Analytics to measure visits and site use.

Data stored on your phone

The app stores these records locally on your phone:

  • Your age, height, weight, goal weight, activity level, calorie target, and macro targets.
  • Food logs, weight logs, recipes, goals, lesson progress, points, streaks, Buddy progress, reminders, and most preferences.
  • Raw Apple Health values the app reads, including body weight, steps, exercise minutes, and active calories.

We cannot see or restore this private history because Wellness AF does not keep its own cloud copy. Deleting the app, erasing the phone, or moving to another phone may remove it. An ordinary app update is designed to keep data on the same phone. Apple device backup or transfer may carry some app data, but Wellness AF does not provide its own cross-device recovery service.

Data sent off your phone

Sign in and account access

If you use Sign in with Apple, Supabase stores an account identifier and may store the name or email address Apple provides. Apple may provide a private relay email instead of your regular email.

The app uses the account identifier to connect Club records, founder access, paid access, AI scan limits, and other signed-in features to the right account. Supabase may also process IP addresses, request details, authentication records, and security logs when it hosts these services.

The Club community

If you join the Club, Supabase may store your display name, username, avatar, groups, posts, milestones, comments, cheers, blocks, reports, leaderboard points, and other Club activity.

Your Club profile and posts are visible to the audience shown in the app. An avatar photo is visible to other Club members. A safety report may include the reason you choose and a short copy of the reported content so we can review it.

Your raw weight, food diary, calorie total, body measurements, step count, exercise minutes, active calories, and Apple Health body-weight records are not posted to the Club. The app may sync a movement-goal achievement and aggregate Club points that were calculated partly from activity on your phone.

Food searches and barcode scans

Food searches and barcodes may be sent through Supabase to USDA FoodData Central, Open Food Facts, or the FatSecret Platform API. Those requests contain the search words or barcode needed to find the food. They do not include your private food diary or weight history.

Resolved USDA and Open Food Facts products may remain in a shared Supabase barcode cache so a later scan can find the same product. FatSecret results are not added to that shared cache.

When you choose a food, the diary entry and its nutrition details are stored in your private on-phone history. A provider may process request metadata under its own privacy terms.

Meal photos, nutrition labels, and Speak My Meal

If you choose meal-photo or nutrition-label scanning, the image is sent through an authenticated Supabase function to Anthropic so the app can return an editable nutrition estimate. The app uses your account identifier to check access and apply scan limits.

Wellness AF does not add scan images to permanent Club photo storage. Anthropic’s standard API terms state that inputs and outputs are deleted from its backend within 30 days, with limited exceptions such as legal requirements, safety enforcement, longer-retention features, or a different account agreement. We do not promise immediate deletion by a service provider.

If you choose Speak My Meal, iOS speech recognition turns your speech into text. Wellness AF sends the transcript text, not the raw microphone recording, through its meal-text service to create an editable food draft.

AI nutrition results are estimates. Review and edit them before saving.

Apple Health

With your permission, Wellness AF may read body weight, steps, exercise minutes, and active calories from Apple Health. Raw values stay on your phone.

If you turn on nutrition writing, the app can write calories, protein, carbohydrates, and fat from foods you log to Apple Health. You control Health permissions in iOS Settings and can review or delete Health records in Apple’s Health app.

If you connect a Club account, the app may sync a movement-goal achievement and aggregate points. It does not send raw Apple Health values to the Club.

Purchases and membership

Apple processes subscription payments. Wellness AF does not receive your card number.

RevenueCat receives an app user identifier, purchase history, receipt details, entitlement status, subscription status, and related transaction information. A RevenueCat identifier may be linked to your signed-in Wellness AF account. We use this information to provide paid access, restore purchases, prevent purchase fraud, and understand subscription performance.

Canceling a Wellness AF account does not cancel an Apple subscription. Manage or cancel subscriptions through your Apple account.

Push notifications

If you choose Club notifications, Wellness AF stores an Expo push token with your account identifier. A notification may contain a display name and a short comment or activity excerpt. Expo and Apple process the token and message to deliver the notification.

Expo states that it keeps notification contents only as long as needed for delivery and holds them in memory or message queues rather than a database. The push token and the Club record behind a notification may remain in Wellness AF systems until they are removed through the account or feature process.

Crash reports, safety reports, and support

The app may send a crash message, stack trace, source, app build, iOS version, and related diagnostics to Supabase. Club reports may include a report reason and a content excerpt.

Crash and moderation alerts may be emailed through Resend to the developer’s mailbox. If you contact support, we receive your email address, message, attachments, and any app or device details you choose to send. We keep support and alert records as long as reasonably needed to respond, investigate safety or reliability problems, meet legal duties, and protect the service.

Website, analytics, and newsletter

Our WordPress website and hosting providers may process IP addresses, browser and device details, requested pages, dates and times, referral information, and security logs.

The website uses Google Analytics. Google Analytics uses first-party cookies and processes device, browser, IP, page-view, referral, and on-site activity data to produce site-use reports. You can block or delete cookies in your browser settings, although some site functions may not work as expected.

If you subscribe to the newsletter, we collect your email address, signup source, confirmation status, delivery status, and unsubscribe status. Our WordPress signup service and email delivery provider process that information to confirm your subscription, send the newsletter, prevent abuse, and honor unsubscribe requests. We keep the email address while you are subscribed and may retain a limited suppression record after you unsubscribe so we do not add you again by mistake.

Emails may include ordinary delivery and engagement information, such as whether a message was delivered, opened, or clicked, when the configured email service provides those records. Every marketing email includes an unsubscribe link.

Links, videos, podcast players, social networks, and other content from outside services may send information to those services when you open or use them. Their privacy policies govern their handling of that information.

How we use data

We use data to:

  • Run the feature you requested.
  • Authenticate accounts and keep account access tied to the correct member.
  • Provide Club, founder, and paid features.
  • Search for food and return nutrition information.
  • Process purchases and restore entitlements.
  • Deliver notifications and newsletters.
  • Enforce scan limits, prevent abuse, and protect the community.
  • Investigate crashes, support requests, and safety reports.
  • Measure website and subscription performance.
  • Meet legal obligations and enforce our Terms.

We may create aggregated or de-identified reports that cannot reasonably be linked back to you.

Legal bases where required

Privacy law in some locations requires us to name a legal basis for each use of personal data. Depending on the feature and the law that applies, we rely on:

  • Performance of a contract when we provide the app, account, subscription access, or support you requested.
  • Consent when you choose optional device permissions or sign up for the newsletter. Where local law requires consent for nonessential website cookies, consent is also the legal basis.
  • Legitimate interests in protecting accounts, preventing fraud and abuse, moderating the Club, investigating crashes, responding to support, and measuring how the service and website work where the law allows it. We consider the effect on your privacy before relying on this basis.
  • Legal obligations when we must keep or disclose a record to comply with law.

Where we rely on consent, you can withdraw it. Withdrawal does not change processing that was lawful before you withdrew consent.

Service providers

We use these service providers for the purposes described above:

  • Apple for Sign in with Apple, Apple Health, App Store billing, speech recognition, push delivery, and device services.
  • Supabase for authentication, cloud records, file storage, shared food-cache records, and server functions.
  • Anthropic for meal-photo, nutrition-label, and meal-transcript processing.
  • USDA FoodData Central, Open Food Facts, and FatSecret Platform API for food and nutrition information.
  • RevenueCat for purchase receipt and entitlement processing.
  • Expo/EAS for app updates, push tokens, and push delivery routing.
  • Resend and our mailbox provider for crash, moderation, and support email delivery.
  • WordPress, our website host, Google Analytics, and related site providers for the website.
  • Our newsletter email provider for confirmations, delivery, unsubscribe records, and newsletter operations.

Providers process data under their own terms, privacy policies, account settings, and legal duties. Some providers process data in the United States or other countries.

Retention

Retention depends on the record and why we need it:

  • Local app records stay on your phone until you delete them, reset app data, erase the phone, or delete the app.
  • Account and Club records generally remain while your account is active. An in-app deletion request asks our cloud service to delete the signed-in account and data tied to it.
  • Some comments, reports, blocks, security records, or de-identified records may remain when needed for safety, moderation, fraud prevention, legal obligations, or dispute handling.
  • Shared barcode-cache records may remain because they describe a food product rather than a member’s diary.
  • Purchase and entitlement records may remain with Apple and RevenueCat under their legal and operational retention rules.
  • AI inputs and outputs follow the provider rules described above.
  • Push content is kept by Expo only for delivery, while tokens and the underlying Club records follow the applicable account process.
  • Website analytics, server logs, support messages, and email alerts remain for the configured provider period or as long as reasonably needed for security, support, legal obligations, and service reliability.
  • Newsletter data remains while you are subscribed, with a limited unsubscribe record retained afterward.

Backups and provider logs may take time to age out after a deletion request.

Account deletion and your choices

You can request deletion of a signed-in Wellness AF cloud account from Settings in the app. The request asks our cloud service to delete the account and data tied to it, then the app disconnects account access on the device. Some limited records may remain for the reasons listed in the Retention section.

Deleting the cloud account does not delete private food, weight, lesson, and progress records stored only on your phone. Deleting the app or its local data removes those local records. Deleting the account also does not cancel an Apple subscription.

You choose whether to:

  • Sign in or join the Club.
  • Submit a meal photo, nutrition-label image, or spoken-meal transcript.
  • Give Apple Health, camera, microphone, photo, or notification permission.
  • Buy a subscription.
  • Subscribe to the newsletter.

You can change device permissions in iOS Settings. You can edit or delete local logs in the app, manage Apple Health records in the Health app, manage subscriptions through Apple, and unsubscribe from the newsletter using the link in any marketing email.

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal data we control, and to appeal a denied request. You may also have the right to object to some processing, restrict it, withdraw consent, or complain to your local privacy regulator. We may need to verify your identity before acting. We will not discriminate against you for exercising a privacy right.

Send privacy requests to support@wellnessafclub.com. If another provider controls the record, such as Apple payment information or Apple Health data, you may also need to use that provider’s tools.

Security

We use access controls, encrypted connections, signed-in authorization, and provider security controls designed to protect cloud data. No storage or transmission system is completely secure.

If a data incident requires notice under applicable law, we will provide that notice as required.

International processing

Our providers may process information in the United States and other countries. Privacy protections may differ from those where you live. Providers use their own legal transfer measures where required.

Changes to this policy

We may update this policy when the app, website, providers, or legal requirements change. We will change the date at the top and provide any additional notice required by law.

Contact

Email: support@wellnessafclub.com

Wellness AF Club LLC
114 N Cedar Avenue, Suite M
Cookeville, TN 38501
United States

Scroll to Top