Privacy Policy
Last updated: September 25, 2026
Wellendy LLC, Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, Wyoming, Canada (“we”) respects your privacy. This policy explains how we handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25), and, for visitors in the European Union and United Kingdom, the GDPR and UK GDPR.
1. Person responsible
The person in charge of the protection of personal information is Your Name, reachable at [email protected].
2. What we collect and why
| Purpose | Information | Basis | Retention |
|---|---|---|---|
| Processing your order, delivering downloads, customer support | Name, email, billing address, order content, download history, consent timestamps, IP address | Necessary to perform the contract | As long as needed to provide the service |
| Accounting and tax obligations (including CRA) | Order and billing information | Legal obligation | 6 years after the end of the tax year |
| Payment and fraud prevention | Payment information (handled by Stripe), device and IP data | Necessary to perform the contract; legitimate interest in preventing fraud | As required by Stripe and law |
| Your account, library, AI coach and progress tracking | Name, email, hashed password, focus and goals you enter, assessment answers and scores, plan progress, coach conversations, daily check-ins (mood, energy, sleep hours, water, short notes) | Necessary to provide the account features you request; your consent for the optional goals and check-ins | Until you delete your account (coach conversations can be cleared anytime) |
| Newsletter | Email address | Your express consent (CASL) | Until you unsubscribe |
| Contact form and reviews | Name, email, message or review | Consent / legitimate interest | 3 years after last contact |
| Audience measurement (optional) | Pseudonymous browsing data | Your consent (off by default) | 13 months maximum |
Check-ins and goals you choose to enter in your account are wellness information. We use them only to show your progress and personalise your coach, never for advertising, and we never sell them. The AI coach runs on our own servers: your conversations are not shared with third parties. Please do not include detailed medical information in your goals, check-ins, coach messages, contact messages or reviews.
3. Who we share it with
- Stripe — payment processing and fraud prevention (Stripe privacy policy);
- Our hosting provider — hosting of the website and database;
- our email delivery provider — sending order confirmations and, if you subscribed, the newsletter.
These providers only process your information on our instructions and must protect it. We never sell or rent your personal information.
4. Storage outside your province or country
Some of our providers (for example Stripe) store or process information in the United States or other countries. Your information may then be accessible to courts, law enforcement and national security authorities of those countries. We assess these transfers and use contractual safeguards (including, for EU/UK data, Standard Contractual Clauses or the Data Privacy Framework).
5. Newsletter and anti-spam (CASL)
We only send our newsletter to people who have expressly opted in, using an unticked checkbox. Every newsletter identifies us and includes a way to unsubscribe. You can also unsubscribe at any time on our unsubscribe page or by emailing [email protected]. Transactional emails about your orders are not marketing.
6. Your rights
You may ask to access, correct or delete your personal information, withdraw your consent, and, where applicable, request data portability or object to processing. Quebec residents may also request that information be de-indexed. Email [email protected]; we respond within 30 days. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or your local data protection authority.
7. Security and incidents
We use HTTPS encryption, a PCI-certified payment provider, restricted administrator access and private, expiring download links. If a confidentiality incident presents a risk of serious harm, we will notify you and the relevant authorities as required by law.
8. Cookies
See our Cookie Policy. Tracking technologies are off by default.
9. Children
The Site is not directed at children under 14, and we do not knowingly collect their information.