At Gehirnwelle Labs ("we", "us", "our"), we build G Welle — a mental wellbeing companion. We understand that what you share here is deeply personal. This Privacy Policy explains, in plain language, what we collect, why we collect it, and the choices you have.
Your conversations are end-to-end encrypted, we never sell your data, and you can delete everything with one tap.
1. Information We Collect
a) Information you give us
- Conversation content — what you type or speak to G Welle. This is end-to-end encrypted; only your device can decrypt it.
- Mood check-ins — the mood tags and reflections you record.
- Account details — if you choose to create a login, we collect your email and a hashed password. You can use G Welle completely anonymously without any of this.
- Payment information — for paid plans, handled by our PCI-DSS compliant payment partners. We do not store your card details on our servers.
b) Information collected automatically
- Device & technical data — device model, OS version, app version, language and general region (city-level, not precise GPS).
- Crash & diagnostic data — anonymous error logs that help us fix bugs.
2. How We Use Your Information
- To provide and improve the G Welle experience.
- To generate personalised, AI-driven responses to your conversations.
- To show you mood insights and patterns over time.
- To detect, prevent and address technical or safety issues.
- To send you service-related notifications (you can turn these off).
- To comply with applicable law.
We never use your conversations to train public AI models. Your data is used only to serve you.
3. End-to-End Encryption
All conversations between you and G Welle are protected with industry-standard end-to-end encryption. In practice, this means:
- Messages are encrypted on your device before leaving it.
- Only your device holds the encryption keys.
- Our servers store unreadable (encrypted) blobs — even we cannot read them.
4. Anonymity
You can use G Welle without providing your real name, email, or phone number. If you choose to create an account later (for cross-device sync or paid plans), we will only ask for what's necessary.
5. Sharing of Information
We do not sell your personal data. We share data only in the following limited cases:
- Service providers — trusted vendors who help us run the app (hosting, payments, analytics). They are bound by strict confidentiality agreements and only process what's needed.
- Legal requirements — if required by law, court order, or to protect the safety of a user or the public. Where possible, we will notify you.
- With your explicit consent — for example, if you choose to share mood reports with a therapist through G Welle Care.
6. Crisis & Safety
If our systems detect language indicating an imminent risk to life, G Welle may surface verified crisis helplines and safety resources. We do not automatically alert third parties without your knowledge, except where required by law.
7. Data Retention
We keep your data only for as long as necessary to provide the service:
- Conversations & mood data — retained while your account is active. Deleted permanently when you delete your account.
- Account info — retained until you delete your account.
- Anonymised analytics — may be retained longer in aggregate, non-identifiable form.
8. Your Rights
Depending on where you live, you may have the following rights:
- Access, correct, or delete your personal data.
- Withdraw consent at any time.
- Export your data in a portable format.
- Lodge a complaint with your local data protection authority.
To exercise any of these, email us at privacy@gehirnwelle.com.
9. Children's Privacy
G Welle is not intended for children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
10. International Data Transfers
Your data may be processed on servers located outside your country. We ensure appropriate safeguards are in place (such as standard contractual clauses) to protect your information.
11. Compliance
We comply with applicable data protection laws, including India's Digital Personal Data Protection Act, 2023 (DPDP Act), and, where relevant, the GDPR for users in the European Economic Area.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before they take effect.
13. Contact
For privacy-related questions or requests:
Gehirnwelle Labs
Email: privacy@gehirnwelle.com