Wellness OS Privacy Policy

Effective date: 13 October 2026

Wellness OS keeps your family’s health records in one place, and we only use that information to run the app for you. We do not sell it, and we do not use it for advertising.

This policy explains what information the Wellness OS mobile app and its services collect, how we use it, who we share it with, and the choices you have. Wellness OS is built and operated by SprintX Private Limited (“SprintX”, “we”, “us”), based in Lahore, Pakistan. By using Wellness OS you agree to this policy.

1. Information we collect

We collect the information you give us, plus a small amount of technical data we need to keep your account secure.

CategoryWhat it includesWhere it comes from
Account detailsName, email address, phone number (if you use one to sign in), password (stored only as a one-way hash), and when you accepted our termsYou, when you sign up
Sign-in with Apple or GoogleA unique account identifier and the email address the provider shares with usApple or Google, when you choose that sign-in option
Family profilesName, relationship, date or year of birth, profile photo, and notes for you and each family member you addYou
Health profileGender, blood group, allergies, conditions and current medicinesYou
Health recordsDocuments, prescriptions, lab reports, lab values, medicines and dose schedules, conditions and doctors’ detailsYou, or the AI reading of a record you add (see section 2)
Files and voice notesPhotos and scans of records, PDFs and images you upload, and voice notes you recordYou, using your camera, files or microphone
Family sharingWho you invite (their email), their role, and which profiles they can seeYou and the people you invite
Security dataSign-in sessions, one-time codes, and failed sign-in attemptsCreated automatically when you use the app

What we do not collect. The app has no advertising, analytics or tracking tools. We do not collect your location, contacts or browsing activity.

On your device. The app keeps a copy of your records on your phone so it works offline. Sign-in tokens are stored in your phone’s secure keychain. Medicine reminders are scheduled on your device.

2. How we use your information

We use your information only to provide Wellness OS to you and the family members you share with:

  • Create and secure your account, and sign you in.
  • Store your records and keep them in sync across your devices and your family’s devices.
  • Send you sign-in codes, password-reset codes and family invitations by email or text message.
  • Read the records you add with AI, if you turn that on (below).
  • Keep the service safe, for example by locking sign-in after repeated wrong passwords.
  • Meet our legal obligations.

We do not sell your information. We do not use it for advertising or marketing profiles. We do not use your health records to train AI models.

AI reading of your records

AI reading is off by default. You can turn it on or off at any time in Settings.

When it is on, and you scan or upload a record or record a voice note, we send that page image or audio to an AI provider. The provider returns the text and details it finds, such as medicines, doses, lab values and dates. We save those details to your record so you can review and edit them.

When it is off, nothing is sent to an AI provider. Your files are still stored and synced, and you can enter details yourself.

AI can make mistakes. Always check what it reads, and do not use Wellness OS in place of advice from a doctor.

3. Sharing with your family

Only the people you invite can see your family’s records. The account that creates a family is its owner and decides who joins.

  • Invitations. When you invite someone, we email them an invitation. They must accept it and sign in before they see anything.
  • What they can see. You choose which profiles each person can see, and whether they can only view records, add new ones, or manage them.
  • Their own records. A family member who signs in as one of the profiles can see the records on that profile.
  • Removing access. The owner can remove a person or change what they can see at any time.

Be careful who you invite. People you share with can see sensitive health information, and can take screenshots or share files outside the app.

4. Service providers we use

We share information only with providers that help us run Wellness OS, and only what each one needs. They process it on our behalf and may not use it for their own purposes.

ProviderWhat they doWhat they receive
Cloudflare (R2 storage)Stores your photos, documents and voice notesYour uploaded files
Database hosting providerStores your account and recordsYour account details and records
Google (Gemini API)Reads records with AI, only if AI reading is onPage images and voice notes you add
OpenAITranscribes voice notes, only if AI reading is onVoice notes you record
Email delivery providerSends sign-in codes, password resets and invitationsYour email address and the message
TwilioSends sign-in codes by text messageYour phone number and the code
Apple and Google sign-inConfirms your identity if you choose that optionA sign-in request from the app

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of SprintX. If that happens, this policy will continue to apply to your information.

5. Security and how long we keep information

We keep your records for as long as you have an account, and delete them when you delete it.

How we protect it

  • Information is encrypted in transit between the app and our servers.
  • Passwords, sign-in tokens and one-time codes are stored only as one-way hashes.
  • Uploaded files are kept in private storage. The app reaches them through short-lived links.
  • Sign-in is locked for a period after repeated wrong passwords.
  • Deleting your account requires you to confirm your identity again.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you as the law requires.

How long we keep it

InformationHow long we keep it
Account, profiles, records and filesUntil you delete them or your account
Expired or signed-out sessions30 days
Password-reset codes1 day after they expire or are used
Family invitations that were not accepted30 days after they expire or are cancelled

6. Your choices and rights

You control your information, and most of these choices are in the app.

  • See and correct. View and edit your profiles and records at any time.
  • Export. Create a PDF of a record or a health summary and share it, for example with a doctor.
  • AI reading. Turn it on or off in Settings.
  • Family access. Invite, remove or change the access of family members.
  • Delete records. Delete any record, file or profile you have permission to manage.
  • Delete your account. Go to Settings and delete your account. We delete your account and your stored files. If other people use your family’s records, you must first remove them, or choose to delete the records for everyone. Records you added to a family someone else owns stay with that family.

Depending on where you live, you may also have the right to request a copy of your information, object to or restrict how we use it, or complain to your data protection authority. To make a request, contact us (section 7). We may need to confirm your identity first.

If you are in Pakistan, you can exercise any rights available to you under applicable Pakistani data protection law by contacting us using the details in section 7.

7. Other things to know

Children. Parents and guardians can keep records for their children in Wellness OS. Children should not create their own account. If you believe a child has created an account without a parent’s permission, contact us and we will delete it.

International transfers. Our service providers may store and process information in countries other than yours, including the United States. Where the law requires it, we use appropriate safeguards for these transfers.

Changes to this policy. We may update this policy. We will post the new version on this page and change the effective date. If a change is significant, we will also tell you in the app or by email.

Contact us. For questions or requests about your privacy, contact SprintX at [email protected], or by post at SprintX Private Limited, 51 L, Phase 2 Johar Town, Lahore, 54000, Pakistan.

Effective Date: 13 October 2026
This policy applies to the Wellness OS mobile application and its services, operated by SprintX.