1. Who we are
Andningsappen Varberg AB (trading as "WeHale", "we", "us", "our") is the controller of the personal data described in this policy.
Andningsappen Varberg AB
Organisation number: 559496-1491
Boråsgatan 12 B, 432 45 Varberg, Sweden
Email: support@wehale.io
We have not appointed a data protection officer, because we are not required to. For anything in this policy, write to support@wehale.io.
This policy covers the WeHale app for iPhone and Android, our servers, and the emails and notifications we send. Section 11 covers our website.
2. What we collect and why
We collect what the app needs to work. Here it is in plain words, with the reason and the legal basis under the EU General Data Protection Regulation (GDPR) for each.
Your account
Your email address and your name (you type them, or Apple or Google give them to us when you use Sign in with Apple or Sign in with Google). With email sign-up we also store a hashed password. We never see your Apple or Google password. We use this to run your account and sign you in. Legal basis: performing our contract with you (Art. 6(1)(b)).
Your practice
Which sessions you start and finish, how long you listen, the ratings you give, sessions you like, your weekly goal, your reminders (time and days), and your progress and milestones. We use this to show your progress and to unlock what you have access to. Legal basis: contract (Art. 6(1)(b)).
Your answers when you start
The goals and needs you choose, your experience level, how you heard about us, and your reminder time. We use them to suggest sessions. Legal basis: contract (Art. 6(1)(b)).
Check-ins
A rating from 1 to 5 before and after a session, and the mood you pick on Home (for example "Stressed" or "Tired"). These are your own subjective ratings. We use them to show how you feel over time and to recommend sessions, including with the AI service described in section 4. We do not use them to diagnose or treat anything, and WeHale is not a medical product. Legal basis: contract (Art. 6(1)(b)).
Your subscription
Whether you have a membership, which plan, when it started, renews or ends, and the purchase receipt reference. Apple and Google take the payment; we never see your card. RevenueCat, our subscription service, receives this to confirm what you may use. Legal basis: contract (Art. 6(1)(b)), and for accounting records a legal obligation (Art. 6(1)(c)).
Support and feedback
When you write to us in the app (Messages), send feedback, give a score, or attach a screenshot, we store what you send, with your account. We use it to help you and to improve the app. Legal basis: contract for support requests (Art. 6(1)(b)), and our legitimate interest in improving the app for feedback and scores (Art. 6(1)(f)).
Your device and the app's health
Device type, operating system, app version, and crash and performance reports. We use them to find and fix faults and to keep the service secure. Legal basis: legitimate interest (Art. 6(1)(f)).
Your connection
Like every server, ours receives your IP address when the app contacts it. We use it to protect the service against abuse, and our providers may derive an approximate country from it. Legal basis: legitimate interest (Art. 6(1)(f)).
Notifications
If you allow notifications, we store a push token for your device and your reminder settings, and we send the reminders you ask for and, from time to time, other messages about your practice or your offer (for example a reminder before an offer ends). Legal basis: consent, which you give in the system prompt and can withdraw in your device settings or in Profile & Settings (Art. 6(1)(a)).
Partner and campaign links
If you arrive through a partner link or QR code, or type a code, we store the code, the link's channel and reference, and what it gave you, so that the right offer is shown and we can tell a partner how many people joined (a count, not your name). Legal basis: contract for the offer itself (Art. 6(1)(b)) and legitimate interest for the counting (Art. 6(1)(f)).
We do not collect your location, contacts, camera or microphone. The photo library is opened only if you choose to attach a screenshot to feedback.
3. Usage analytics and install attribution
Our own usage analytics
The app records events such as screens viewed, sessions started and finished, and purchase steps, tied to your account, and sends them to our server. We use them to see what works and to fix problems. You can turn this off at any time in Profile & Settings under "Usage analytics". Turning it off stops the app sending these events and deletes the ones still waiting on your device. It is switched on by default. Legal basis: legitimate interest (Art. 6(1)(f)).
Install attribution (AppsFlyer)
The app includes AppsFlyer's measurement software. When you first open the app it tells AppsFlyer that the app was installed and opened, and which link or ad campaign led to it, so we can see which channels bring people to WeHale. After you sign in, it connects those events to your WeHale user ID. A selection of in-app events (sign-up, onboarding finished, sessions started and finished, session titles and categories, checkout steps and the price shown, trial and subscription events) is forwarded to AppsFlyer so a campaign can be measured against what people do. Forwarding of in-app events follows your "Usage analytics" switch; the install and launch report does not, so it is sent even if you turn analytics off. We do not use this to advertise to you ourselves.
The tracking question on iPhone, and the advertising ID
On iPhone the app asks for permission under Apple's App Tracking Transparency. If you say yes, AppsFlyer can use your device's advertising identifier to match an install to an ad. If you say no, no advertising identifier is read, and AppsFlyer still receives the install and in-app events described above using its own identifiers. On Android the app declares the Google advertising ID permission, used for the same purpose; you can reset or delete your advertising ID in Android settings.
Legal basis for install attribution: legitimate interest (Art. 6(1)(f)), and on iPhone your answer to the tracking question.
We do not sell your data, and we do not show advertising inside the app.
4. How we use AI
WeHale uses an AI service from Anthropic, a company in the United States, in two places.
Session recommendations
When you open Home, and when you tap a mood, the app asks our server for session suggestions. The server sends the AI service: the mood you picked; the time of day; your experience level, goals and needs from your answers; the number of sessions in the last two weeks; up to ten recent sessions (title, category, date, your rating); up to ten check-in ratings from the last 14 days (before or after, the rating, the date); and our list of sessions. We do not send your name, your email address or your user ID. The service returns a short list of sessions and a one-line reason.
Home asks for suggestions for all nine moods in advance, a few seconds after Home opens, so a tap is instant. That means your recent check-in ratings are sent without you tapping anything. If the AI service does not answer, the server picks sessions by simple rules instead, and nothing is sent. The suggestions are only suggestions: you can open any session you have access to. They do not have legal or similarly significant effects on you.
Support replies
When you send us a support message, our server sends the AI service your name, your email address, the date you joined, how many sessions you have finished, your membership status, the ticket category, your app version, your device type, and the conversation, so it can write a draft answer. A person on our team reads, edits and sends every reply. The AI never answers you by itself.
The AI provider processes this data for us as our service provider. Legal basis: contract for the features you use (Art. 6(1)(b)).
5. Who receives your data
These companies process data for us, under contracts that limit them to our instructions.
- Supabase: our database and file storage (feedback screenshots). Everything we store about your account. Hosted in Stockholm, Sweden.
- Railway: hosts our server. Everything that passes through the server while you use the app.
- Anthropic: AI recommendations and support drafts. What section 4 lists.
- AppsFlyer: install attribution and campaign measurement. Install and open events, device identifiers (including the advertising ID if you allow it on iPhone, and on Android), your user ID, the in-app events in section 3, and your IP address.
- RevenueCat: subscriptions. Your user ID and your subscription and purchase information.
- Loops: email, such as newsletters and one-off emails you ask for. Your email address, first name, user ID, number of sessions finished, goal, experience level, and whether you agreed to marketing email.
- Resend: account emails, for example the password reset code. Your email address and the message.
- Sentry: crash and performance reports. Crash details, device model, operating system and app version, and your user ID on the server side. The app does not send your name or email. Reports from the app go to Sentry's endpoint in Germany.
- Expo, Apple (APNs) and Google (FCM): delivering push notifications. Your push token and the notification text.
- Apple and Google: Sign in with Apple and Sign in with Google, and your purchases through the stores. What they collect under their own policies.
- Slack: our internal alerts. A support message's sender name, subject and the start of the text.
- Google BigQuery: our internal reports. A pseudonymised copy of usage data, with no email, no name and no free text, and a code instead of your user ID. Hosted in the EU.
We do not sell personal data and we do not share it with others for their own marketing.
We may also disclose data where the law requires, to protect our legal rights, to professional advisers under confidentiality, and in a sale of the company, in which case we will tell you before your data is covered by a different policy.
6. Transfers outside the EU/EEA
Some of the companies above are in the United States or elsewhere outside the EU/EEA. Where they are, we rely on an adequacy decision (including the EU-US Data Privacy Framework where the company is certified) or on the EU Commission's Standard Contractual Clauses, together with technical measures such as encryption in transit. You can ask us for information about the safeguards at support@wehale.io.
7. How long we keep data, and deleting your account
While your account is open we keep what is described in section 2.
Delete your account yourself: More → Profile & Settings → Danger zone → Delete account. You can also email support@wehale.io from the address on your account. The steps are on our delete account page.
What happens when an account is deleted. Your account, practice history, check-ins, answers, reminders, goals, likes, milestones, subscription record on our side, push tokens, support tickets and messages, feedback and scores, and any welcome period are erased from our live database in one step. Your name and email are removed from the usage events that remain, and those events are no longer linked to you. Your feedback screenshots are removed from storage, and your contact is removed from Loops.
What we keep after deletion, and why:
- A record that the deletion happened: a one-way hash of your email address, which sign-in method you used, the date, and counts of what was removed. It lets us show that we honoured your request, and it cannot be turned back into your email address. We keep it for as long as we need to be able to show that, and we review it from time to time. Legal basis: legal obligation and our legitimate interest in being able to show compliance (Art. 6(1)(c) and (f)).
- Purchase records at RevenueCat and in the store receipts, because they are financial records, for as long as accounting law requires. Deleting your account does not cancel a subscription: cancel it first in your Apple or Google subscription settings.
- If you hold lifetime access from before: the email address and the fact of that access, so the access is not lost or duplicated.
- Usage events from which your name, email and ID were removed. They no longer point to a person.
- Copies in our database provider's backups, until they expire in the provider's normal backup cycle. Nothing from a backup is used for anything other than restoring the service.
- Copies held by our service providers under their own retention rules (for example AppsFlyer, Sentry, the AI provider, Resend and Slack). We do not currently send them a deletion request when an account is deleted. You can ask us to contact a provider for you.
Other data we keep for as long as needed for the purpose, and no longer: crash reports and diagnostics for the period set by our crash-reporting provider; support messages while your account exists; and usage events while your account exists, and in de-identified form afterwards.
8. Email
We send account emails (for example a password reset) because you need them to use the service.
We send newsletters and updates only if you agreed. On the email sign-up form the box is empty until you tick it. If you signed up with Apple or Google, we ask once after you sign up, and "Not now" means no. You can change your mind at any time in Profile & Settings (Newsletter & tips) or with the unsubscribe link in every email. Legal basis: your consent (Art. 6(1)(a)).
We also send one email before your offer ends if you ask for it ("Email me instead"). That does not subscribe you to the newsletter.
9. Your rights
Under the GDPR you have the right to: know what we hold and get a copy (access); have mistakes corrected; have your data erased; restrict how we use it; receive the data you gave us in a structured, machine-readable format (portability); object to processing based on our legitimate interest; withdraw consent at any time; and not be subject to a decision based only on automated processing with legal or similarly significant effect.
To use a right, email support@wehale.io from your account address. We reply within one month, as the law requires, and normally sooner. There is no export button in the app: for a copy of your data, email us.
You can always delete your account in the app (section 7), switch off usage analytics and notifications in Profile & Settings, and withdraw marketing consent there.
If you think we handle your data wrongly, you can complain to the Swedish supervisory authority:
Integritetsskyddsmyndigheten (IMY)
Website: www.imy.se
Email: imy@imy.se
You may also complain to the authority in your own EU/EEA country. We would be glad to hear from you first, at support@wehale.io.
10. Children
WeHale is intended for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe a younger person has given us data, write to support@wehale.io and we will delete it.
11. Our website and cookies
On wehale.io we use strictly necessary cookies. Only if you accept them in the cookie banner, we also use Google Analytics (which pages are used) and Meta and TikTok measurement (which ads bring people to the site, and whether a session starts). You can change your choice at any time with "Privacy choices" at the bottom of every page. Legal basis: consent (Art. 6(1)(a) and the ePrivacy rules).
12. Security
Data is encrypted in transit (TLS) and passwords are stored hashed. Only the people who need access to run the service have it. No system is perfectly secure, and we will tell you and the authority if a breach affects you, as the law requires.
13. Changes
We will update this page and its date when something changes. If a change is important (new kinds of data, new purposes, new recipients) we will tell you in the app or by email before it applies.
14. Contact
Andningsappen Varberg AB (WeHale)
Boråsgatan 12 B, 432 45 Varberg, Sweden
Organisation number: 559496-1491
Email: support@wehale.io