Privacy Policy

Applicable to the WaddleFit app, website, platform, and services

Last updated: October 4, 2026

Introduction

This Privacy Policy explains how WaddleFit Health Tech Private Limited and its affiliates (collectively, “WaddleFit,” “we,” “our,” or “us”) access, collect, use, store, share, protect, retain, and delete information when you use the WaddleFit mobile application, website, platform, and related services (collectively, the “Services”).

Our website is available at https://www.waddlefit.si/. WaddleFit Health Tech Private Limited is the entity responsible for the personal data described in this policy.

By using the Services, you acknowledge the practices described in this Privacy Policy. Where consent is required, including for access to health and fitness data, we ask for it separately. You may decline or revoke optional permissions, although the features that depend on those permissions may no longer work.

Information We Collect

Depending on how you use the Services, we may collect:

Account and profile information: such as your name, email address, telephone number, date of birth, gender, height, weight, profile image, city, login credentials or authentication tokens, and other information you choose to add to your profile.
Health and fitness information: as explained in detail in the Health and Fitness Data section below.
Activity and service information: such as workouts, challenges, game progress, rewards, friends or social interactions, preferences, transactions, and your use of WaddleFit features.
Device and technical information: such as device and operating-system information, app version, IP address, diagnostic information, crash data, notification tokens, and security or usage logs.
Communications: information you provide when you contact support, report a problem, or otherwise communicate with us.

If payment is offered through a third-party app store or payment provider, that provider processes your payment details under its own privacy policy. WaddleFit does not need to receive your full card number or payment-account password from that provider.

Health and Fitness Data

WaddleFit is a health and fitness application. If you choose to connect a supported health service or grant a device permission, WaddleFit accesses and collects health and fitness data with your permission. On Android, this may include data from Health Connect, Samsung Health, and the device's activity-recognition or step sensors. On Apple devices, this may include data from Apple Health and workout data created through WaddleFit or a connected Apple Watch.

Health data we access and collect

Depending on your device, connected provider, permissions, and the features you use, WaddleFit may read, collect, and process:

step count and activity data;
distance walked or run and movement speed;
active, basal, or total energy burned;
heart-rate measurements;
workout and exercise-session information, including workout type, start and end time, duration, distance, energy burned, and steps associated with the workout; and
related record metadata, such as timestamps, measurement units, recording method, and the source app or device.

WaddleFit may also write activity or workout records generated by WaddleFit to Health Connect or Apple Health when you grant write permission. We do not access a health-data category unless the relevant permission is granted.

How we collect and use health data

We access health data through the applicable device APIs and services after you grant permission. Selected health and workout records are transmitted over an encrypted connection to WaddleFit's servers and linked to your WaddleFit account so that we can:

display your activity, workout history, and health trends;
calculate fitness progress, challenge results, step-based game progress, eligibility, rewards, and related statistics;
synchronize your data and experience across sessions and supported devices;
provide heart-rate feedback and workout or performance features you request;
verify activity records, prevent manipulation or fraud, and maintain the security and integrity of the Services; and
troubleshoot, support, maintain, and improve health and fitness features.

WaddleFit does not sell health data, use health data for advertising, or share health data with data brokers. We do not use health data to determine creditworthiness or for lending. Health data is used only to provide and support the user-facing health, fitness, workout, challenge, and activity features described in this policy.

Your health-data controls

You can review or revoke WaddleFit's permissions at any time in Health Connect, Apple Health, Samsung Health, or your device settings, as applicable. Revoking permission stops future access to the affected data but does not automatically delete information already stored in your WaddleFit account. To delete data already collected by WaddleFit, follow the process in the Account and Data Deletion section below.

WaddleFit is intended for general fitness and wellness purposes and is not a medical device. It does not provide medical advice, diagnosis, or treatment.

How We Use Personal Data

We use personal data to:

create, authenticate, administer, and secure your account;
provide, personalize, and maintain the Services;
operate fitness tracking, workouts, history, challenges, games, social features, rewards, and customer support;
send service, security, transaction, and support communications;
detect, investigate, and prevent errors, abuse, fraud, or illegal activity;
analyze and improve the reliability, safety, and performance of the Services; and
comply with applicable law and enforce our terms.

If we send optional marketing communications, you can opt out at any time by using the unsubscribe method provided in the message or contacting us.

How We Share Personal Data

We may share information only as reasonably necessary:

with service providers that host infrastructure, deliver notifications, process authentication or payments, provide diagnostics, prevent fraud, or support other operations on our behalf;
with other users when you intentionally use a social, friend, leaderboard, or group feature, limited to the information that feature is designed to display;
when you direct us to share information or connect a third-party service;
with government authorities, courts, law enforcement, or other parties when required by law or reasonably necessary to protect rights, safety, and the integrity of the Services; or
in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards and notice where required by law.

Service providers may process data only to perform services for us and are expected to protect it. We do not sell personal data or health data.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal and health data against unauthorized access, alteration, disclosure, loss, or misuse. Data transmitted between the app and WaddleFit's servers is protected using encrypted HTTPS connections, and access to stored information is limited according to operational need.

No method of transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for promptly notifying us if you believe your account or data has been compromised.

Account and Data Deletion

You can request permanent deletion of your WaddleFit account and the personal and health data associated with it using either of the following methods:

In the app: open WaddleFit, go to Profile, open the menu in the top-right corner, select Delete account, and confirm by selecting DELETE.
By email: email info@waddlefit.si with the subject “WaddleFit account deletion request.” Send the request from the email address linked to your account and include your registered email address or telephone number so we can locate and verify the account. Do not send passwords, payment PINs, or one-time passwords.

After a valid in-app request or a verified email request, we will permanently delete or de-identify the account and data associated with it from our active systems, including profile information, stored health and activity records, workout history, and related progress data, unless retention is required by applicable law or is necessary for security, fraud prevention, dispute resolution, or enforcing legal rights. Any information retained for one of those limited reasons will be restricted to that purpose and kept only for as long as necessary. Residual copies may remain in protected backups until those backups are overwritten through our normal retention cycle.

Account deletion is irreversible and will remove your access to the account. Deleting the app from your device, signing out, or revoking a health permission does not by itself delete your WaddleFit account or data already stored by WaddleFit.

Data that WaddleFit previously wrote to Health Connect, Apple Health, or another connected health service may remain under that service's control. You can review and delete those records in the applicable health service or device settings.

Data Retention

We retain personal and health data only for as long as necessary to provide the Services, maintain your account, fulfill the purposes described in this policy, and meet legitimate legal, security, fraud-prevention, and dispute-resolution requirements. Retention periods vary according to the type of information and why it is processed. When information is no longer required, we delete or de-identify it, subject to the limited backup and legal retention described above.

Your Choices and Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, or withdraw consent where processing is based on consent. You may update certain profile information directly in WaddleFit and control app permissions and notifications through the app, connected health service, or device settings.

To exercise a privacy right or withdraw consent, contact us at info@waddlefit.si. Please describe your request and provide enough information for us to verify your identity. Withdrawal of consent does not affect processing already completed lawfully, and some features may no longer be available if the necessary permission or processing is withdrawn.

Children's Privacy

The Services are not directed to children who are below the minimum age required to consent to data processing in their jurisdiction. We do not knowingly collect personal or health data from a child without the authorization required by applicable law. If you believe a child has provided information improperly, contact us so we can investigate and take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our Services, data practices, or legal obligations. We will post the updated policy at this URL, revise the “Last updated” date, and provide additional notice when required by applicable law. Please review this policy periodically.

Contact Us

For privacy questions, health-data questions, rights requests, or account and data deletion requests, contact:

WaddleFit Health Tech Private Limited
Email: info@waddlefit.si

Security advisory: WaddleFit will not ask you by email or phone for a debit or credit card PIN, banking password, account password, or one-time password. Do not provide those credentials to anyone claiming to represent WaddleFit.