Privacy Policy
Effective: October 15, 2026 (previous version effective October 14, 2026)
Lion and the Lab ("Company") complies with Korea's Personal Information Protection Act and other applicable laws, and processes the personal information of users of the Welly app ("Service") as set out below. Welly is a wellness coach app. It is not a medical diagnosis or treatment and does not replace a doctor.
1. Information We Collect
Account information
- Guest mode: when you start without signing in, our server creates a random guest identifier to link your usage records.
- Email sign-in: email address and password (stored with one-way encryption)
- Google · Kakao sign-in: the email address, name (nickname), profile photo URL and member identifier confirmed by the sign-in provider
Health information (sensitive information, separate consent)
- Pain logs: pain area, answers to area-specific questions, pain level (0–10), pain quality, frequency and duration, aggravating and relieving factors, impact on daily life, notes and time recorded
- Exercise logs: exercises completed, duration and sets, pain before and after exercise (only with separate consent), level and badges
- Daily-routine logs: the condition routines you join (e.g. atopic dermatitis, allergic rhinitis, migraine, acid reflux, trouble sleeping), symptom score, flare-ups, hours slept, triggers, notes and checklist completions
- Nutrition and water (optional): height, weight, activity level, dietary restrictions, health goals, water-intake goal and logs, diet routines
- AI chat: messages you send to the AI coach (pain and nutrition chats) and the conversation history, which may describe symptoms
The current app does not ask for pregnancy or injury-recovery information. If such information entered in an earlier version remains on our server, it is destroyed when you delete your account.
Information kept only on your device (never sent to our servers)
- Location (optional): GPS coordinates, altitude and time while you record a run or ride. Read only after you start recording and allow location access, and not sent to our servers unless you share or export it.
- Apple Health · Android Health Connect (optional): only if you allow the connection, workouts and step counts are read on the device, or workouts done in Welly are written to that app. Not sent to our servers.
- Other settings: language and region, notification settings, and pain logs held briefly while offline (saved to the server once connected and only with separate consent)
Automatically collected information
- Usage records: server access records (IP address, request time) and app usage events (Firebase Analytics — no health information such as pain level, area or notes is sent)
- Error information: device model, OS version and crash logs (Firebase Crashlytics)
- Advertising information: device information such as advertising identifiers (processed by Google AdMob, which serves in-app ads)
Payments and consent records
- Subscription (Welly Pro): product ID, purchase receipt token, subscription status and expiry. Card numbers and other payment details are handled by Apple and Google; we do not collect them.
- Consent records: whether you agreed to, declined or withdrew health-information consent, the consent version and the time
2. Separate Consent for Health Information
Health information is sensitive information under Article 23 of Korea's Personal Information Protection Act. We save it on our servers or send it to the AI chat only after telling you the following and receiving your separate consent, apart from any other consent.
| Item | Details |
|---|---|
| What we collect | Pain area, level and pain log; daily-routine logs (symptoms, triggers, notes); food and water logs and body details such as height and weight; what you type in the AI chat (which may describe symptoms) |
| Why | To suggest routines and daily-care steps that fit you, show how your records change, and generate AI chat replies (sent to the Google Gemini API only to create the reply) |
| How long | Until you delete your account, then destroyed without delay. If you withdraw consent, we stop collecting from then on; records already saved are removed when you delete your account. |
| Your right to refuse | You may decline. If you do, this information is not saved on our servers, and saving pain logs, syncing daily-routine logs and the AI chat are unavailable. Stretch routines, run tracking, regional health guides and the rest of the app still work. |
- From the October 2026 update, the app shows the consent screen right before health information is first saved to our servers, and you can withdraw or give consent again at any time under Profile → Health information consent.
- Users of earlier versions can ask us at contact@lionandthelab.com to stop processing or delete their health information.
- Health information is never used for ads, sold, or provided to third parties for marketing.
3. Purpose of Use
- Providing the Service, identifying users and sign-in
- Stretching routines and daily-care guidance matched to your pain area and symptoms (AI wellness guidance)
- Generating AI coach replies
- Exercise, pain and symptom logs, trends and reports
- Checking Welly Pro subscription status and customer support
- Showing in-app ads to free users
- Service stability (error analysis) and quality improvement (usage statistics)
4. Processors and International Transfers
We engage the following providers to process personal information for the Service. Information is transferred over the network to the countries below whenever you use the Service, and processed until the purpose is fulfilled or you delete your account. If you do not want a transfer, you can avoid the relevant feature (such as the AI chat) or decline or withdraw health-information consent.
| Processor (country) | Information | Purpose |
|---|---|---|
| Google Cloud Platform (USA) | Account and health information in Section 1, usage records | Server operation and data storage |
| Google Gemini API (USA) | Messages to the AI coach and prior conversation, plus what the reply needs: pain area and level, routine progress, BMI calculated from height and weight | Generating AI chat replies |
| Google Firebase Analytics · Crashlytics (USA) | App usage events (no health information), device information, crash logs | Usage statistics and error analysis |
| Google AdMob (USA, etc.) | Advertising identifiers, device information, IP address, etc. | Serving and measuring in-app ads, managing ad consent |
| Apple · Google Play (USA) | Subscription product ID, receipts | In-app payments and subscription checks |
| YouTube (USA) | None provided by us (YouTube processes viewing information when a video plays) | Exercise guide video playback |
When you sign in with Google or Kakao, we ask that provider to confirm your sign-in token to verify your identity.
5. Advertising
- Free users may see Google AdMob ads; Welly Pro subscribers see no ads. Health information is never passed to ads.
- From the October 2026 update, users in the EEA, the UK and Switzerland see Google's consent screen before any ad is requested and can change their choice at any time under Profile → Ad privacy choices.
- On iOS the app does not request App Tracking Transparency permission, so the advertising identifier (IDFA) is not used. On Android you can reset or delete your advertising ID in the device settings.
6. Retention and Deletion
- Retention period: until you delete your account. Guest-mode records are also stored on our server, and deleting the app alone does not delete them.
- How to delete: use Profile → Delete account in the app, or email contact@lionandthelab.com. Deleting in the app permanently and immediately removes your account and the health and AI chat records on our server; this cannot be undone. For email requests we verify your identity and complete the deletion without delay (within 30 days) and reply to confirm. Guest accounts can be deleted the same way; if deletion in the app does not complete, please email us.
- Records on your device: run routes and other records stored on your device are removed when you delete the app.
- Subscriptions: cancel separately in your Google Play or App Store account settings.
- Exception: information the law requires us to keep is stored separately for the required period and then destroyed.
7. Health Records Are Not Medical Records
- Pain, exercise and daily-routine records in the Service are self-care records, not clinical records from a medical institution.
- Welly's AI wellness guidance is not a medical diagnosis or treatment and does not replace a doctor. If symptoms are severe or persistent, please consult a medical professional.
8. Your Rights
You may exercise the following rights at any time:
- Access, correct or delete your personal information
- Ask us to suspend processing
- Withdraw health-information consent (in the app under Profile, or by email)
- Change your ad privacy choices (EEA, UK and Switzerland, in the app under Profile)
Send requests to contact@lionandthelab.com and we will act on them without delay.
9. Security Measures
- HTTPS encryption in transit, passwords stored with one-way encryption (bcrypt)
- Token-based access control and least-privilege access
10. Children
The Service is not directed at children under 14, and we do not knowingly collect children's personal information.
11. Privacy Officer
- Contact: Lion and the Lab privacy team
- Email: contact@lionandthelab.com
12. Revision History
- October 15, 2026: Updated to the current app — sign-in methods (Google, Kakao), daily-routine logs, information kept only on the device (location, Apple Health, Health Connect), Firebase and payment information; added separate consent for health information and how to withdraw it, ad consent (EEA etc.) and in-app account deletion; removed pregnancy and injury-recovery items the current app does not collect
- October 14, 2026: Described the Service as wellness guidance and corrected the collected items, processors and deletion procedure (applied until October 14, 2026)
- March 7, 2026: Initial version (applied until October 13, 2026)
This policy applies from October 15, 2026. The previous version (effective October 14, 2026) applied until October 14, 2026. Changes will be announced on this page and in the app.