Document

Privacy policy

What we collect, why, who can see it and how to take a permission back.

Updated 15 August 2026

Who processes your data

The operator — to be confirmed: legal name, registration number and address are added by the club owner before launch. Contact address: to be confirmed.

The service runs on a dedicated server. We do not sell your data and do not pass it to third parties for advertising.

What we collect

Only what the club needs to work. The full list:

• Account details: first and last name, profile photo, and your Telegram or Google identifier depending on how you signed in.
• Contacts: email address and phone number, if you provided them.
• City, country and interface language.
• Life assessment answers: sleep, energy, sport, stress and goals — five ratings out of five.
• Club progress: streak, experience, level, completed actions and badges.
• How you found us: referral source, campaign tags and who invited you.
• Activity log: sign-ins, assessment completion, marking daily actions done.
• Your permission decisions — separately per area, each with a date.

Why, and on what basis

Every area is granted separately, in «My permissions» inside the app. There is no single «allow everything» checkbox by design: health data, location and introductions are different things and must not share one tap.

• Health data — to tailor recommendations to your state. Without it the app still works, the advice is just generic.
• City and location — to show events and people near you.
• Club profile — so other members can see you in teams and at events.
• Introductions — to take part in matching. Contacts open only when both sides agree.
• AI navigator — so the assistant can read the areas you granted access to.
• News and offers — to send you emails about events. Turning it off breaks nothing.

Who can see your data

Inside the club: other members see only your name, photo and level, and only if you allowed the profile to be visible. Club staff see what they need to handle your request; every access to contact details is written to an audit log.

Third-party services involved:

• Telegram — if you sign in through Telegram or use the mini app. Telegram gives us your identifier, name and photo.
• Google — if you sign in through Google. Google gives us your identifier and email.

What we do not do

There are no visitor counters, advertising pixels or third-party analytics on this site. The only external scripts are the Telegram login widget and the mini app library. No ad network receives your data.

Cookies

We use one functional cookie — wlx_s. It holds a session identifier, is not readable by page scripts and travels only over a secure connection. It lives 30 days. There are no advertising or analytics cookies, which is why there is no consent banner for them.

How long we keep it

While you are a member and for one year after your last sign-in. Records of granted and withdrawn permissions are kept longer — they evidence the basis on which we processed data.

Your rights

At any time you can:

• Withdraw any permission — it stops applying immediately.
• Request a copy of your data.
• Ask us to delete your account and data.
• Correct anything wrong in your profile.
• Unsubscribe from emails without losing club access.

Health is not medicine

WELLEX.CLUB does not diagnose and does not replace a doctor. Recommendations in the app are hints about routine, not treatment. See a doctor about symptoms and chronic conditions.

Children

The club is for adults. If you are under 18, you may use the service only with the consent of a parent or guardian.

Changes

If we change the wording, the consent version is raised and we ask again — an old consent does not cover new use of your data.