This is a translation provided for your convenience. The Korean version is the legally binding one.
Effective: June 13, 2026 · Last revised: September 13, 2026 · Operator: Lion and the Lab (the "Company")
The Company complies with South Korea's Personal Information Protection Act and other applicable laws, and processes the personal information of users of the Welly app (the "Service") as set out below.
| Category | Items | Method of collection |
|---|---|---|
| Account information | Email address, password (stored encrypted) | Entered by the user at sign-up |
| Health-related information (sensitive information) | Pain areas, intensity and journal entries; exercise performance records; sleep records; nutrition and hydration records; (optional) pregnancy week, due date and contraindications; (optional) injury and rehabilitation information (type of accident, whether surgery was performed, range of motion, etc.); occupational group | Entered by the user while using the Service |
| Watch and health app integration (optional) | Workout records such as running and cycling, step count. Clinical medical records and diagnoses are not requested. | Only where the user has permitted the connection, data is read on the device from Apple Health (HealthKit) or Android Health Connect, or workouts logged directly in Welly are written to those apps. Samsung Health and Galaxy Watch integrate solely through this route, and only when Health Connect sharing is enabled. |
| Location information (optional) | GPS coordinates, altitude and timestamps recorded while a run or ride is being tracked (the route) | Only while the user starts route tracking and has granted location permission. Recording stops when the user stops it. The route is kept on the device and is not transmitted to the Company's servers unless the user chooses to share or export it. |
| AI consultation content | Consultation messages entered by the user | When the AI consultation feature is used |
| Automatically collected | Device information (model, OS version), app usage records and error (crash) logs, advertising identifier (ADID/IDFA) | Collected automatically while the app is used |
| Payment information | Subscription product ID, purchase receipt token, subscription expiry date (payment-method details such as card numbers are processed by Apple/Google and are not collected by the Company) | At the time of in-app purchase |
Health-related information constitutes sensitive information under Article 23 of South Korea's Personal Information Protection Act, and is collected with separate, explicit consent obtained at sign-up and when the relevant features are used.
Welly accesses and collects health data. The table below is the complete list of the health data the Service accesses and collects.
| Health data | How it is accessed or collected | Why it is used |
|---|---|---|
| Pain areas, pain intensity (0–10), pain journal entries | Entered by the user in the app | Personalised exercise routines; pain-trend reports |
| Exercise performance records (which movements, how long, whether completed) | Recorded automatically while the in-app exercise player is used | Showing routine progress; adjusting the next routine |
| Sleep records; nutrition and hydration records | Entered by the user in the app | Daily-habit guidance |
| (Optional) Pregnancy week, due date, contraindications | Entered by the user. The Service can be used without providing this | Recommending only movements that are safe during pregnancy |
| (Optional) Injury and rehabilitation information (type of accident, whether surgery was performed, range of motion) | Entered by the user. The Service can be used without providing this | Recommending movements suited to the rehabilitation stage |
| (Optional) Workout records and step count | Only where the user has granted permission, this is read on the device from Apple Health (HealthKit) or Android Health Connect. This data is not transmitted to the Company's servers. | Reflecting completion of running and cycling routines; tailoring reminders |
| (Optional) Running and cycling route, distance, pace, elevation gain | Read from the device GPS only while the user has started route tracking. Stored on the device. Not transmitted to the Company's servers. | Showing the route, distance, pace and splits of the workout |
| AI consultation messages (which may describe symptoms) | Entered by the user in the consultation screen | Generating the consultation reply. Sent to the Google Gemini API for that purpose |
Health data is never used for advertising, never sold, and never shared with third parties other than the processors listed in the outsourcing and cross-border transfer section below (server operation and AI reply generation). No health data is passed to the advertising provider (AdMob).
Health-related information constitutes sensitive information under Article 23 of South Korea's Personal Information Protection Act and is collected with separate, explicit consent obtained at sign-up and when the relevant features are used.
| Processor | Outsourced work | Country of transfer |
|---|---|---|
| Google Cloud Platform | Server operation and data storage | United States |
| Google (Firebase Crashlytics/Analytics) | Error collection, usage statistics analysis | United States |
| Google (Gemini API) | Generating AI consultation responses (processing of consultation messages) | United States |
| Google (AdMob) | Serving advertisements (processing of advertising identifiers) | United States |
| Apple / Google Play | Processing of in-app payments | United States |
The Company does not provide or sell users' personal information to any third party other than through the outsourcing and overseas transfers set out above.
Users may access, correct or delete their personal information at any time. Account deletion may be requested via [Profile → Delete account] in the app or through the contact below, and tracking via the advertising identifier may be limited in the device settings.
Delete inside the app (fastest)
If you do not have the app installed, or cannot sign in
Follow the instructions on our deletion request page at wellyss.life/delete-account.html, or email lionandthelab@gmail.com from the address you signed up with, asking us to delete your account. After verifying your identity we complete the deletion within 30 days and reply to confirm.
What is deleted
What is kept
Payment and contract records that South Korea's Act on Consumer Protection in Electronic Commerce requires us to retain are kept for five years in separate storage and then destroyed. These records contain no health data. Nothing else is retained.
If you want us to delete only part of your data and keep your account, email the address above and tell us which items to remove.
The Service is not directed at children under 14 years of age, and the Company does not knowingly collect children's personal information.
Chief Privacy Officer: Lion and the Lab · lionandthelab@gmail.com
This policy applies from June 13, 2026. Any changes will be announced on this page.