Privacy Policy

Last updated: March 16, 2026

Core Commitment: Health Data Stays Local
Your HealthKit data and camera frames used for heart-rate measurement are processed on your device. We do not upload your raw health records or camera frames to our servers.

This Privacy Policy describes how Enerkit Life ("Enerkit", "we", "us") processes information when you use the WellKeeper mobile application (the "App").

1. Summary (Key Points)

Health data first: Health metrics from Apple Health and camera-based measurement are processed locally for core health features.
No account required: You can use core app features without creating an account.
Operational data processing: We process limited operational, attribution, and subscription-validation metadata through trusted service providers.
You control permissions: You can manage Health, Camera, and Tracking permissions at any time in iOS Settings.
No sale of personal data: We do not sell your personal information.

2. Information We Process

The App processes the following categories of information:

Data Type	Storage Location	Purpose
Apple Health Data (Heart Rate, HRV, Sleep, Activity, etc.)	Local Device (HealthKit)	To generate health insights and trends. Read-only unless you grant specific write permission.
Camera Frames (Video frames)	RAM (Memory) Only	Real-time PPG heart-rate estimation. Frames are not saved as photos or videos.
Camera Measurement Results (Heart rate values)	Local Device (UserDefaults)	To store your measured BPM history for trends and charts.
App Preferences and Local History (Age, gender, baseline values, manual entries, trend caches)	Local Device (UserDefaults)	To personalize recommendations and maintain historical views.
Subscription and Transaction Metadata (Receipt data, transaction IDs, product IDs, entitlement status, limited device identifiers)	Secure Servers (Enerkit and payment/attribution providers)	To verify purchases, prevent fraud, restore entitlements, and keep subscription state accurate.
Operational Analytics and Diagnostics (Event metadata, app version, device/app identifiers, performance metrics)	Secure Servers (Service Providers)	To measure app performance, diagnose issues, and understand feature usage and campaign attribution.

3. What We Do NOT Do

We do not sell your personal information.
We do not upload raw camera frames or photos/videos from your heart-rate measurement flow.
We do not use HealthKit data for advertising profile building or data brokerage.
We do not require an account to use core health features.

4. Apple Health / HealthKit

The App integrates with Apple Health (HealthKit) to provide meaningful health insights.

Permission: We only access HealthKit data after your explicit authorization.
Control: Manage permissions in Settings > Privacy & Security > Health > WellKeeper.
Policy: We do not use HealthKit data for third-party advertising or data brokerage.

Health Data Types We Request (Only after authorization)

Read Permissions:

Heart Rate Variability (HRV)
Resting Heart Rate
Heart Rate
Respiratory Rate
VO2 Max (Cardiorespiratory Fitness)
Step Count
Active Energy Burned
Basal Energy Burned
Body Mass (Weight)
Waist Circumference
Sleep Analysis
Menstrual Flow

Write Permissions:

Menstrual Flow (only when you manually record and choose to sync)

5. Menstrual Cycle Tracking (Optional Feature)

If you use cycle tracking, the App may read menstrual data from Apple Health and optionally write your manual records back to Apple Health with your authorization.

Read: Existing cycle data in Apple Health (if available).
Write: Manual cycle records to Apple Health (if you choose to sync).
Local Storage: Cycle records and predictions stored locally for personalized guidance.

6. Camera Privacy

If you use camera-based heart-rate measurement, the App requires camera access.

Real-time processing: Frames are analyzed in memory.
No media storage: Photos/videos are not saved by this feature.
No frame upload: Raw camera frames are not uploaded.

7. Tracking Permission (ATT) and Attribution

We may request App Tracking Transparency (ATT) permission. If granted, the identifier may be used for install attribution and campaign effectiveness measurement.

Purpose: Attribution and campaign measurement.
Control: You can deny or revoke permission in iOS Settings at any time.
Core Features: Denying ATT does not block core health functionality.

8. Third-Party Services We Use

We use selected third-party services to operate the App, measure performance, and support attribution and subscription operations.

Firebase: App analytics and performance monitoring.
AppsFlyer: Install attribution and campaign measurement.
Facebook SDK: Campaign/deep-link/event support where applicable.
Custom Event Pipeline: Product event reporting for feature analytics.

These services may process event metadata and technical identifiers. We do not share raw HealthKit records or raw camera frames with these services.

9. Subscription and Receipt Validation

For in-app subscriptions, we process receipt and transaction metadata to validate purchases, prevent fraud, restore purchases, and maintain entitlement status.

Examples: Receipt payload, product ID, transaction ID, original transaction ID, and limited device/app metadata.
Billing: Subscription billing is handled by Apple via your Apple ID account.

10. Data Retention

Local Data: Health insights, local history, and preferences remain on your device until you clear them in-app or uninstall.
Apple Health Data: Data stored in Apple Health remains there until removed via the Health app.
Operational/Transaction Data: Server-side logs and subscription-validation metadata are retained for operational, security, legal, and accounting purposes as required.
Backups: Device backups (iCloud/computer) may include local app data under Apple's policies.

11. Security

We apply reasonable technical and organizational safeguards. For local data, the App relies on iOS security features such as sandboxing and system data protection.

12. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date when changes are posted.

14. Contact

If you have questions about this Privacy Policy, contact us:

healthtracker_ios@support.enerkit.life