Privacy Policy

1. Who we are

Wellness. Simple. Sorted! is a private daily check-in: you record how you're doing across areas you choose (mood, symptoms, exercise, food, medication, sleep and notes), and the app keeps your history for you alone.

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), the data controller is J Cacchione, trading as Simple. Sorted!.

For privacy-related enquiries, contact us at:

Email: [email protected]
Post: Office 158, Unit 9, 71 Amiens Street, Dublin 1, D01 X6T8, Ireland

2. Information we collect

Wellness follows a data-minimisation approach. We do not seek to collect personal information unnecessarily. We collect information you provide to us, alongside limited technical information required to operate and secure the service.

Depending on how you use the service, this may include:

• Account information: your name, email address, securely hashed password, trial and payment status, and display preferences.
• Check-ins you make: the entries you choose to record in each tracking area, including ratings, dates, times and free-text notes.
• Contact messages: anything you send through the contact form.
• Technical and security information: limited server logs, timestamps, IP addresses (including in rate-limit counters that protect login and forms), browser or device information, and security events.

3. Your wellness data

Some of what you record, such as symptoms, medication or how you're feeling, can be health-related. Under GDPR this counts as special-category data, and we treat it accordingly: it is stored privately, visible only to you, and never shared, sold or used for advertising.

You choose what to record and how descriptive to be. You can stop tracking any area at any time, and your existing entries stay yours until you delete them or your account.

By creating an account and recording check-ins you consent to us storing this information so the service can work for you. You can withdraw that consent at any time by deleting entries or deleting your account; withdrawal does not affect processing already carried out.

4. How and why we use personal data

We use personal data only where we have an appropriate lawful basis and for purposes connected with operating Wellness. Simple. Sorted!. These purposes may include:

• Creating and managing user accounts.
• Authenticating users and maintaining account security.
• Storing and displaying your check-ins and history.
• Sending account email you request, such as verification links.
• Handling contact messages and deletion requests.
• Preventing misuse, abuse and unauthorised access.
• Meeting applicable legal obligations.

Depending on the activity, the lawful basis may be performance of a contract (providing the service you signed up for), compliance with a legal obligation, legitimate interests, or your explicit consent for special-category data. Where we rely on legitimate interests, these include operating a reliable service, maintaining security and preventing misuse, subject to the rights and interests of affected individuals.

Wellness. Simple. Sorted! does not sell users' personal data.

5. Hosting and sharing information

Hosting

Wellness. Simple. Sorted! is hosted by DreamHost using its Netherlands data centre. The Netherlands is within the European Economic Area (EEA).

DreamHost processes information as necessary to provide hosting and related technical services. Transactional email (account and contact messages) is delivered through our mail provider, which may involve processing on infrastructure outside the EEA. Where personal data is processed outside the EEA, we rely on appropriate safeguards where required by law.

Sharing information

We may share information with service providers where necessary to operate the service, such as hosting and email delivery providers, which process it on our behalf.

We may also disclose information where required by law, necessary to respond to lawful requests, or reasonably necessary to protect the rights, safety or security of users or the service.

We do not sell personal data or share it with unrelated third parties for their own marketing purposes.

6. Data retention and deletion

Account data

You can delete your account at any time. When you do, we keep a 30-day retention window in case you change your mind, after which your account data and check-ins are permanently erased from the live system.

Accounts that are never verified may be removed automatically 30 days after registration.

Contact records

Contact messages are kept while the matter is being handled and for up to 12 months afterwards for record-keeping, then deleted or anonymised.

Backups

Wellness. Simple. Sorted! uses DreamHost shared hosting. DreamHost states that its service retains an average of approximately two weeks of website file backups and approximately five days of database backups. These automated backups are not guaranteed to be available.

Following a deletion request, information removed from the live system may remain in temporary backups until those backups expire or are overwritten. These backups are maintained for recovery purposes rather than routine access to deleted information.

Technical and security logs

Application and security logs are retained for a maximum of 90 days and are rotated and deleted automatically. They are used only to maintain the service, investigate security issues and prevent misuse.

7. Your data protection rights

Subject to applicable law and any relevant exceptions, you may have the right to:

• Access: request confirmation of whether we process your personal data and obtain a copy.
• Rectification: request correction of inaccurate or incomplete information.
• Erasure: request deletion of personal data where the legal conditions for erasure are met.
• Restriction: request that certain processing be restricted in applicable circumstances.
• Object: object to processing based on legitimate interests where the relevant legal conditions apply.
• Data portability: receive certain personal data in a structured, commonly used and machine-readable format where the right applies.
• Withdraw consent: where processing is based on consent, withdraw it without affecting the lawfulness of processing before withdrawal.
• Complain: lodge a complaint with the relevant supervisory authority.

These rights are not absolute in every circumstance. Requests will be assessed in accordance with applicable law.

Most day-to-day corrections can be made directly in the app: profile details and your check-ins. A full copy of your data can be downloaded from your profile. For anything else, contact us through the contact page or at [email protected]. We may ask for information necessary to verify your identity before fulfilling a request.

In Ireland, you can contact the Data Protection Commission for information about your rights or to raise a complaint:

https://www.dataprotection.ie/

8. Cookies and local storage

Wellness. Simple. Sorted! uses cookies and browser storage to provide essential website functionality and remember certain settings.

• Cookies: the session cookie keeps you logged in between pages, the XSRF-TOKEN cookie protects forms against forged requests, and a remember-me cookie is set only if you choose "Remember me" when logging in.
• Local storage: remembers your light or dark theme preference.

Browser storage used for preferences remains on your device and is not transmitted to or stored in the Wellness database.

All cookies and browser storage we use are strictly necessary for the site to function or store preferences you set yourself, so no consent banner is required.

Wellness. Simple. Sorted! does not currently use analytics or advertising cookies to track browsing activity, track users across websites or build advertising profiles. If that changes, we will update this policy and obtain consent where required by law.

9. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or loss. These include secure password hashing, controlled administrative access, server-side session management, rate limiting on sensitive forms, and appropriate hosting and application security practices.

No website, online service or method of electronic transmission can be guaranteed to be completely secure. We will respond to security incidents in accordance with applicable legal requirements.

If you believe your account has been compromised, contact us promptly and change your password where possible.

10. Younger users

Wellness. Simple. Sorted! is designed for teenagers and young adults as well as adults. Your check-ins are private to your account; no one else, including parents or guardians, can see them through the service.

If you are under the age at which your country's law lets you consent to online services yourself, please check with a parent or guardian before signing up.

11. Changes to this policy

We may update this Privacy Policy when our service, data processing practices or legal obligations change. The latest version will be published on this site with its revision date. Where a change requires additional notice or action under applicable law, we will take appropriate steps to provide it.

12. Contact us

For questions about this Privacy Policy, personal data, access requests, corrections or deletion requests, contact:

Wellness. Simple. Sorted!
Email: [email protected]
Post: Office 158, Unit 9, 71 Amiens Street, Dublin 1, D01 X6T8, Ireland

Data controller: J Cacchione