WellthieWellthieBack to sign in

Working Draft — v1.0 (in active review)

We are finalizing this Privacy Policy with counsel, including state-specific addenda for California (CCPA/CPRA), Virginia, Colorado, and other jurisdictions. This version describes our current data practices; we will email users 30 days before any material change takes effect.

Privacy Policy

Effective date: May 14, 2026

Last updated: May 14, 2026

Version: 1.0

This Privacy Policy describes how Wellthie, Inc. ("Wellthie", "we", "us") collects, uses, shares, and protects information when you use our marketplace platform at app.wellthie.me, our admin and partner portals, and any related services (the "Service"). It applies to Customers, Merchants, and Partners.

If you do not agree with this Policy, do not use the Service.

1. Information we collect

1.1 Information you give us

When you create an account or use the Service, you may provide:

  • Identity and contact information: name, business name, email address, phone number, mailing address.
  • Account credentials: password (stored hashed, never in plain text).
  • Business information (Merchants): business locations, listing content, photos, terms of service, hours of operation.
  • Payment information (Merchants): card details, which are submitted directly to our payment processor (Stripe) and are not stored on Wellthie servers. We retain only a token reference and the last 4 digits.
  • Communication content: anything you write to support, in feedback forms, or in messages within the Service.

1.2 Information collected automatically

When you use the Service we automatically collect:

  • Device and connection data: IP address, browser type, operating system, device identifiers.
  • Usage data: pages viewed, features used, links clicked, search queries, time spent, referring URL.
  • Cookies and similar technologies: see section 6.
  • Location data: approximate location based on IP. We do not collect precise GPS location unless you explicitly grant a browser-level permission.

1.3 Information from third parties

  • Partners: When a Partner credits you with WellPoints, the Partner provides us with information necessary to apply that credit, such as a user identifier and the points amount.
  • Payment processor: Stripe shares limited transaction data (success or failure, last 4 of card, country) with us so we can manage your subscription.
  • Identity and fraud prevention services if applicable.

2. How we use information

We use information to:

  • Operate, maintain, and improve the Service
  • Create and manage your account
  • Process payments and manage subscriptions
  • Generate, deliver, and validate redemption coupons
  • Communicate with you about your account, security, transactions, and product updates
  • Provide customer support
  • Detect and prevent fraud, abuse, and security incidents
  • Enforce our Terms of Service
  • Comply with legal obligations

We may use aggregated or de-identified data — data that does not identify you — for analytics, research, and business reporting.

3. How we share information

We do not sell your personal information.

We share information only as described below.

3.1 With Merchants and Partners (limited)

  • When a Customer redeems a Listing, we share the coupon code, redemption time, and the WellPoints used with the relevant Merchant so they can validate and honor the coupon. We do not share the Customer's full identity unless required for the Merchant to honor the offer.
  • Partners receive aggregate data about WellPoint redemptions associated with their users.

3.2 With service providers

We share information with third-party service providers who help us run the Service, such as:

  • Stripe — payment processing
  • SendGrid — transactional email
  • Amazon Web Services — hosting and storage

These providers are contractually limited to using data only as we direct and to protect it consistent with this Policy.

3.3 For legal reasons

We may share information when we believe in good faith that doing so is required to:

  • Comply with a law, regulation, subpoena, court order, or other legal process
  • Investigate or address fraud, security, or technical issues
  • Protect the rights, property, or safety of Wellthie, our users, or the public
  • Enforce our Terms of Service

3.4 Business transfers

If we merge, are acquired, or sell all or part of our assets, your information may be transferred as part of that transaction. We will notify you (e.g., by email or notice on the Service) of any such change.

4. How long we keep information

We keep your information for as long as your account is active and as long as needed to provide the Service. After account closure we may retain certain information to:

  • Comply with legal, accounting, or tax obligations
  • Resolve disputes
  • Enforce our agreements
  • Prevent fraud and abuse

We delete or anonymize information when those purposes are met.

5. Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your information (subject to legal retention requirements)
  • Object to or restrict certain processing
  • Receive a portable copy of your information
  • Opt out of "sale" or "sharing" as those terms are defined under California law
  • Withdraw consent where we rely on consent

To exercise any of these rights, email us at support@wellthie.me. We may need to verify your identity before responding. We do not discriminate against you for exercising your rights.

You may also:

  • Update most account information directly in your account settings
  • Unsubscribe from marketing emails using the link at the bottom of those emails (you cannot opt out of essential transactional emails such as billing receipts and security alerts while you have an account)

6. Cookies and tracking

We use cookies and similar technologies to:

  • Keep you logged in
  • Remember your preferences
  • Measure how the Service is used
  • Detect fraud

You can control cookies through your browser settings, but disabling cookies may break parts of the Service.

We honor the Global Privacy Control (GPC) signal where required by law.

7. Security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit (HTTPS/TLS), encryption at rest for sensitive fields, role-based access controls, and ongoing security reviews. No system is perfectly secure, however, and we cannot guarantee absolute security.

If we discover a security incident affecting your information, we will notify you and the appropriate authorities as required by law.

8. Children

The Service is not directed to children under 13 (or 16 where applicable). We do not knowingly collect information from children. If you believe a child has provided us information, contact support@wellthie.me and we will delete it.

9. International users

Wellthie is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. or other countries with different data protection laws than your country.

10. State-specific disclosures

We are finalizing state-specific privacy disclosures with counsel, including detailed CCPA/CPRA notices for California residents and similar notices for Virginia, Colorado, Connecticut, and other jurisdictions as their privacy laws evolve. California, Virginia, Colorado, and Connecticut residents may exercise their applicable rights by emailing support@wellthie.me.

11. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top will reflect the most recent change. If we make material changes, we will notify you by email or in-product notice at least 30 days before they take effect.

12. Contact

Wellthie, Inc.
Miami, FL
Email: support@wellthie.me