Privacy Policy

Who We Are

Welli ("Welli", "we", "us", or "our") is an online nutrition service operated by Ana Khavtasi, a sole proprietor (individual entrepreneur) registered in the Republic of Georgia. Ana Khavtasi is the data controller responsible for your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use welli.ai ("the Service"). By using the Service you consent to the practices described here. If you do not agree, please do not use the Service.

1. Information We Collect

Personal Information

Information you provide directly to us:

• Name and email address
• Account credentials (password, or Google account identifier if you sign in with Google)
• Profile information (age, gender, height, weight)
• Dietary preferences and restrictions
• Health and fitness goals
• Billing information (processed by our payment provider — see below)

Health and Dietary Information

To generate personalized meal plans we collect:

• Dietary preferences (vegan, vegetarian, keto, omnivore, etc.)
• Food allergies and intolerances
• Nutrition goals (weight loss, muscle gain, maintenance)
• Activity level and exercise habits
• Meal history and preferences

We do not collect medical records, diagnoses, or prescription data. The information above is used only to generate meal suggestions and is not medical advice.

Usage Information

We automatically collect certain information about your device and interactions:

• Log data (IP address, browser type, pages visited)
• Device information (device type, operating system)
• Usage patterns inside the Service
• Cookies and similar tracking technologies
• Marketing attribution parameters (utm_source, utm_medium, utm_campaign, gclid, fbclid, ttclid) when you arrive from an advertising link — used to measure campaign performance

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate personalized meal plans and recommendations
• Provide our AI nutrition assistant service
• Process payments for the plans you purchase
• Send transactional emails (account confirmation, payment receipts, plan status)
• Respond to your questions and support requests
• Improve and optimize our Service
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Send marketing communications where you have given consent

3. AI and Data Processing

We use artificial intelligence to generate personalized meal plans and nutrition advice. In that process your data may be:

• Sent to third-party AI model providers strictly to generate recommendations for you
• Used to improve our algorithms and service quality
• Anonymized and aggregated for research and development

We never send your identifying contact information (name, email) to AI model providers — only the profile attributes required to generate a meal plan.

4. Information Sharing and Disclosure

We do not sell your personal information. We share information only in the following circumstances:

Service Providers

Third-party processors that help us operate the Service:

• Keepz — payment processing (card details are handled entirely by Keepz; we never see or store your full card number)
• Cloud hosting providers (application servers and databases)
• Email service providers (transactional email delivery)
• Google Analytics and Google Tag Manager (traffic analytics)
• Google Ads (advertising attribution, with hashed email for Enhanced Conversions)
• AI and machine learning platforms (meal plan generation)

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Legal process or government requests
• Enforcement of our Terms and Conditions
• Protection of our rights, privacy, safety, or property
• Prevention of fraud or illegal activities

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred.

5. Data Security

We implement technical and organizational security measures to protect your information:

• Encryption of data in transit (HTTPS) and at rest
• Secure authentication and access controls
• Regular security updates
• Incident response procedures

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations (including tax and accounting obligations under Georgian law)
• Resolve disputes and enforce agreements

When you delete your account we delete or anonymize your personal information, except information we are required to retain by law (for example, transaction records required for tax reporting).

7. Your Privacy Rights

Depending on your location you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications at any time
• Restriction: Request restriction of processing
• Objection: Object to certain processing activities

To exercise any of these rights, email us at support@welli.ai. We will respond within a reasonable timeframe as required by applicable law.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your account
• Analyze usage patterns and improve the Service
• Measure the effectiveness of our marketing campaigns

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features.

9. Third-Party Services

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We use the following third-party services:

• Google OAuth (account sign-in with Google)
• Keepz (payment processing)
• Google Analytics, Google Tag Manager, Google Ads (analytics and advertising)
• Cloud hosting and database providers
• Email delivery services

10. Children's Privacy

The Service is not intended for persons under 18. We do not knowingly collect personal information from minors. Under Georgian law, contractual transactions generally require the user to be of legal age.

If you believe we have collected information from a minor, please contact us immediately at support@welli.ai and we will delete it promptly.

11. International Data Transfers

Welli is operated from the Republic of Georgia. If you access the Service from outside Georgia, your information will be transferred to and processed in Georgia and in the countries where our service providers operate. These countries may have different data protection laws than your own.

By using the Service you consent to this transfer. We ensure appropriate contractual safeguards are in place with our service providers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date above
• Sending email notification for significant changes

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: