Get Well Soon Privacy Policy

Effective: 5 September 2026 · Last updated: 9 September 2026

This Privacy Policy explains how GOBIAS LTD (“GOBIAS”, “we”, “us” or “our”) handles personal information when you use Get Well Soon: AI Health Coach (“Get Well Soon” or the “App”), or contact us about it. The App’s bundle ID is com.gobiasltd.getwellsoon. GOBIAS LTD is the controller of personal information that we receive through the App and support enquiries.

1. Information stored on your device

The App stores the following information locally on your device:

• meals, ingredients, symptoms, flare-ups and contextual factors you record;
• the App’s cautious observations about possible associations between meals and symptoms;
• your AI Coach conversations;
• App settings and preferences; and
• optional Coach Memory you choose to create, such as a preferred name, coaching goals, response preferences and general preferences.

These tracker records and conversations are not intentionally uploaded as a complete diary or chat archive to GOBIAS LTD. AI conversations stored by the App are excluded from device and iCloud backups. Other locally stored App information may be subject to your device and operating-system backup settings.

2. Information processed when you use the AI Health Coach

The AI Health Coach is optional. When you send it a message, the App transmits the information needed to answer you through a backend controlled by GOBIAS LTD and hosted by Hetzner. This may include:

• the message you submit and a limited number of recent messages for conversational continuity;
• condition information you choose to provide, together with relevant material retrieved from our health-information database;
• optional Coach Memory, if you have enabled it; and
• optional, privacy-minimised aggregated tracker observations, if you have enabled sharing tracker insights.

Sharing tracker insights is off by default. When enabled, the App sends aggregated possible patterns rather than raw diary notes, exact timestamps, dish names, event IDs or complete meal histories. Coach Memory is also off by default and can be reviewed, edited or deleted by you.

Google Gemini currently generates the AI response. GOBIAS LTD’s backend may temporarily retain a bounded amount of conversational context to maintain continuity. That context is ordinarily cleared after approximately 30 minutes of inactivity. We do not intentionally persist complete chat transcripts on our server.

Please choose carefully what you include in a Coach message. Do not provide information about another person unless you are entitled to do so. The Coach provides general health information, emotional support and practical coaching; it is not a medical or emergency service.

3. Account and subscription information

Sign in with Apple

Sign in with Apple authenticates access to AI features. We do not request your Apple name or email. Our server receives Apple authentication credentials and derives a pseudonymous app account identifier to protect your account, apply message allowances and recognise subscription access. We store an Apple refresh token encrypted so we can revoke the app’s Apple authorization when you delete your account. This does not delete your Apple account or email address.

Subscriptions

Apple processes App Store purchases and payment information. GOBIAS LTD does not receive your full payment-card details. RevenueCat manages subscription status and purchase entitlements and may process a pseudonymous App user identifier, product and transaction identifiers, purchase dates, subscription status and related technical information. This lets the App unlock subscriber features, restore purchases and apply the appropriate daily AI message allowance.

4. Minimal operational information

Our backend and service providers may process limited technical and operational data needed to deliver, secure and troubleshoot the AI service, such as request time, service response status, app version, device or network information and pseudonymous identifiers. The App may also use minimal operational and subscription analytics. We do not use this information for advertising, and we do not sell personal health information.

5. Why we process information

We process information only as reasonably needed to:

• provide and maintain the features you request;
• authenticate AI access and administer free or subscriber allowances;
• generate and contextualise AI Coach responses;
• manage subscriptions and restore purchases;
• keep the service secure, prevent misuse and diagnose faults;
• respond to support, privacy or legal requests; and
• comply with legal obligations and establish or defend legal claims.

6. Legal bases for UK and EEA users

Where UK GDPR or EU GDPR applies, our legal basis depends on the context. We rely on performance of our contract with you to provide requested App, account and subscription functionality; our legitimate interests in securing, maintaining and improving a proportionate service; compliance with legal obligations; and consent where the law requires it. Where information you choose to send reveals health information, we rely on your explicit consent where required. Optional Coach Memory and tracker-insight sharing can be turned off, and consent can be withdrawn for future processing through the App’s controls. Withdrawal does not affect earlier lawful processing.

7. Service providers and disclosures

We disclose information only as needed to the following categories of recipients:

• Hetzner, which hosts the GOBIAS LTD-controlled backend used for AI requests;
• Google Gemini, which currently processes prompts and relevant context to generate AI responses;
• RevenueCat, which manages subscription status and entitlements;
• Apple, which provides Sign in with Apple, distributes the App and processes App Store payments; and
• professional advisers, regulators, courts or authorities where reasonably necessary to comply with law or protect legal rights.

These providers process information under their applicable terms and privacy arrangements. We do not permit them to use information received from us for our own advertising purposes.

Google retains prompts, shared context and replies for 55 days for abuse monitoring, separately from our server records. Flagged content may be reviewed by authorized Google personnel. Deleting your Get Well Soon account does not immediately erase these separate safety records. See Google’s abuse-monitoring policy.

8. International processing

Some providers or their systems may process information outside the United Kingdom or the country where you live. Where data-protection law requires it, we use an appropriate transfer safeguard, such as an adequacy regulation or approved contractual clauses, and any additional protections appropriate to the transfer.

9. Retention

• Tracker records and conversations: remain locally on your device until you delete them or remove the App, subject to any device backups described above.
• Temporary server context: bounded AI conversational context is ordinarily cleared after approximately 30 minutes of inactivity.
• Coach Memory: remains on your device until you edit or delete it. Disabling sharing stops future sharing but does not erase the saved memory.
• Account records: support authentication and daily allowances while your account is active. Deletion removes access and starts required cleanup. Pending deletion records remain until cleanup is resolved; completed deletion job details are removed after 30 days.
• Deletion protection: we keep a minimal pseudonymous marker containing the app account identifier, account generation, deletion state and relevant timestamps. It prevents old devices or tokens from restoring deleted account data and contains no chat content or Coach Memory. We review the need for these markers annually.
• Operational logs: the dedicated Get Well Soon app log namespace is configured for 14-day retention. Older shared logs and provider snapshots have not been proven erased, so this is not a promise that every physical copy is deleted within 14 days.
• Encrypted recovery backups: the backup job runs while the dedicated Mac is available. If it is offline, scheduled expiry can be delayed. Restored data must be reconciled with account deletions before access is enabled.
• Support messages: are retained for as long as needed to respond and maintain an appropriate record of the request.

Deletion may not immediately remove information from provider backups or records that must be retained by law, but such information remains protected and is removed or anonymised when the applicable retention period ends. The 30-day deletion-job period above applies to completed job details and is not a universal physical-deletion deadline for logs, backups or provider records.

10. Security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse or alteration. No device, transmission or storage system is completely secure, so we cannot guarantee absolute security. Keep your device, Apple account and App access protected.

11. Your controls and deletion choices

• Delete tracker entries and records using the App’s tracker controls.
• Delete AI conversations using the App’s conversation controls.
• Review, edit or delete Coach Memory, or leave it disabled.
• Keep aggregated tracker sharing disabled, or turn it off to stop future sharing.
• Manage or cancel subscriptions through your Apple App Store account and restore eligible purchases in the App.
• Delete locally stored App information by using available deletion controls or deleting the App, subject to device backups.
• Contact us about personal information held by GOBIAS LTD or our processors.

To delete your AI account, open Home → Settings → Delete Account and confirm with the same Apple account. Account access is removed, and account-associated chats, Coach Memory and consent are cleared on this installation. Backend and provider cleanup may take longer. The app shows when cleanup is pending and provides a status check and a support link. Other installations reconcile account state when they reconnect and must not reuse data from the deleted account generation.

Local tracker records remain after account deletion. Erase them separately using the Tracker controls. Deleting your account does not cancel your Apple subscription. Use Manage Subscription to cancel with Apple. You can delete your account immediately without cancelling first. If you later create an account and restore an eligible active subscription, access may return, but deleted personal data does not.

12. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete or restrict personal information; object to certain processing; receive portable information; and withdraw consent. You may also complain to your local data-protection authority. In the UK, this is the Information Commissioner’s Office. These rights may be subject to legal limits and may not apply to information held only on your device, which GOBIAS LTD cannot access.

To exercise a right, email us using the contact details below. We may need to verify your identity and clarify your request. You can also contact Apple or RevenueCat directly about information for which they act as an independent controller.

13. Adults only

The App’s initial release is intended for adults aged 18 and over. It is not directed at children, and we do not knowingly invite children to use the AI Health Coach or provide health information. If you believe a child has provided information to us, please contact us.

14. Changes to this policy

We may update this policy to reflect changes to the App, providers, law or our practices. We will publish the updated version at this URL with a revised date and provide additional notice where required by law.

15. Contact