Privacy Policy
How WE-IN handles your health data. Last updated 18 September 2026.
The short version. WE-IN reads heart rate, heart-rate variability, sleep and movement from Apple Health to work out how long your body takes to settle after meals. The calculation runs on your Apple Watch. A copy of the readings is stored on our servers only if you agree, so a lost or replaced watch does not take your history with it. We do not sell your data, we do not use it for advertising, and you can delete all of it from inside the app at any time.
Who we are
WE-IN is published by Neha Rastogi. For any privacy question, or to exercise any right described below, write to support@we-in.co.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Heart rate, heart-rate variability, blood oxygen, steps, sleep | Apple Health, with your permission | To compute your Response curve and how long meals take to settle |
| Photographs of meals | Only ones you choose to take or select | To identify the food and estimate its nutritional content |
| A profile photograph, name, handle and description | Only if you apply to become a WE-IN Creator | To show your creator page, which is public |
| Email address | Only if you sign in with email | To identify your account so your history survives a new device |
| Time zone | Your device | So your day starts at your midnight, not ours |
WE-IN does not collect your name, address, phone number or payment details. Subscriptions are handled entirely by Apple; we never see your card.
Our website
When you visit we-in.co we count visits so we know which pages and campaigns work. We record the page, which button was tapped, the campaign in the link (if any), the site that linked to us, and your approximate location (country, region and city, worked out by Google's network from your connection). We keep a random identifier in your browser's storage so a return visit is not counted as a new visitor. We do not store your IP address, use cookies for this, build a profile of you, or share any of it with advertisers. You can clear it by clearing your browser's site data.
Where it is processed
The Response calculation runs on your Apple Watch. Your readings are not sent anywhere in order to produce it.
If you agree to backup, a copy of your readings is stored on Google Cloud
Platform in the United States (us-central1). Meal photographs are
stored in Google Cloud Storage in the same region.
Meal photographs are analysed by OpenAI
When you photograph a meal, that image is sent to OpenAI to identify the food and estimate its nutritional content. This is the only circumstance in which any of your data is sent to a third party, and it only happens for photographs you deliberately take or select. Your heart rate, heart-rate variability, sleep and movement are never sent to OpenAI or to any other third party.
What other people can see
By default, nothing. Your readings and your meals are yours alone, and no other user of WE-IN can see any part of them.
Live sharing inside a challenge
If you take part in a private or small-group challenge, you may choose to share your Response live with the other people in it. This is off unless you turn it on, separately for each challenge, and you can turn it off again at any time.
While it is on, the others in that challenge see:
- the display name you use in that challenge;
- the shape of your Response over the last six hours, rescaled so only its form is visible — never a heart rate, a heart-rate-variability figure, or any other measurement;
- a single word for your current state, and whether it is recent.
They never see your history, your meals, your photographs, your email address, or anything from before those six hours. If nothing has been recorded in the last forty-five minutes, they see only that you are not live.
Sharing is limited to challenges that are not public and have ten people or fewer, and it stops on its own when the challenge ends or when you leave it.
Creator pages are public
If you apply to become a WE-IN Creator and we approve you, the name, handle, description, links and photograph you give us appear on a public page that anyone can see, along with counts of how many people have taken part in your challenges. A code identifying you is included in the links you share, so that arrivals can be attributed to you.
Your own readings, meals and Response are not part of this and are never shown on your creator page. Being a creator does not share your health data with anyone.
Legal basis, and your consent
Health data is a special category of personal data under Article 9 of the UK and EU GDPR. We process it on the basis of your explicit consent, which the app asks for separately and records together with the exact wording you were shown. Until you give it, nothing is uploaded — the app still works, because the watch computes everything itself.
Consent to store your readings is separate from any decision to share them. Turning live sharing on inside a challenge is a further, specific choice, made one challenge at a time, and turning it off stops that sharing immediately.
You can withdraw consent at any time by deleting your data, as below.
How long we keep it
Until you delete it. We do not expire or archive your history, because its value is that it is long. Sign-in codes are deleted automatically after ten minutes.
Deleting everything
In the app: You → Privacy → Delete everything. This removes your account, your readings and your meal photographs from our servers, and clears the copies held on your iPhone and Apple Watch. It cannot be undone.
Data that Apple Health holds is not affected — WE-IN only ever read it, and deleting from WE-IN does not touch your Health app.
You may also email support@we-in.co and we will delete your data within 30 days.
Your rights
- Access a copy of what we hold
- Correct anything inaccurate
- Delete everything, at any time, from inside the app
- Withdraw consent, which stops all further upload
- Object to processing, or ask us to restrict it
- Complain to your data protection authority
Children
WE-IN is not intended for anyone under 16 and we do not knowingly collect data from children.
WE-IN is not a medical device
It does not diagnose, treat, cure or prevent any condition, it does not monitor any condition, and it does not measure anything in your blood. Nothing it shows you is medical advice. If something concerns you about your health, speak to a doctor.
Changes
If we change what we collect or who processes it, we will update this page and, where the change is significant, ask for your consent again.