Skip to content
Weekwell
EN

Weekwell

Privacy Policy

What the Weekwell app and this website process, why, where, for how long, and how you can export or delete it.

Last updated: October 23, 2026

Who we are

Weekwell is an iPhone and Android app made by ODBS LLC (“we”, “us”). This policy covers the Weekwell app, its server and this website. ODBS LLC is the data controller responsible for the processing described here. You can reach us at info@odbs.tech.

What Weekwell is

Weekwell helps adults on a prescribed GLP-1 medication keep a record of their treatment: the weekly dose and injection site, weight, protein and water, side effects and progress photos, with reminders and a report for their doctor. It records what you enter; it does not give medical or dosing advice and it is not a medical device.

Your account

When you first open Weekwell, the app creates a guest account on our server so your records are kept safely. A guest account has no name or email address; we store an account identifier, the app installations it is used on (platform and app version) and, if your phone supports it, a recovery key that lets the same guest come back after a reinstall.

If you connect Sign in with Apple or Google, we also store the provider’s account identifier, the email address the provider shares (with Apple this can be a private relay address) and the name it sends. With Apple we keep a token so we can revoke Weekwell’s access when you delete your account. We store your app language and time zone to show your records on the right day.

You confirm your month and year of birth once, because Weekwell is for adults (18 or older). We store the month, the year and your device’s region, never the day.

Your health records

The records you enter are health data: your medication and brand, the dose you were prescribed, your injection day and time, each dose you log (day, dose, injection site, skipped or not, note), your weight, protein and water, your goals, side effects with their intensity and notes, and progress photos. We store them on our server so they are kept safe, so you can see them on a new phone and so the app can build your doctor report. They are shared with no one except the service providers listed below, are never used for advertising and are never sold.

Meal photos and AI estimates

If you choose to estimate the protein of a meal from a photo, and only after you have given your separate consent for AI processing, the app resizes the photo and sends it once to our server, which sends it, with a fixed instruction and the name of your app language, to Anthropic or, if Anthropic is unavailable, to Google’s Gemini API. The photo is processed in memory and is not stored by us. We keep the estimate you saw (the foods, portions and protein) for 24 hours to deliver it reliably, and a technical record of the request (time, status and cost, without the photo) for up to 400 days. The protein you confirm is saved with your nutrition records. The AI processing consent explains this in full and can be withdrawn in Settings → Privacy & data.

Progress photos

Progress photos are a Weekwell Pro feature. When you add one, the app uploads it to private storage on our servers; we remove location and other embedded metadata and create a small preview. Photos are only shown to you, through links that expire after a short time, and stay until you delete them or your account.

Apple Health and Health Connect

With Weekwell Pro you can connect Apple Health (iPhone) or Health Connect (Android). Weekwell then reads only your daily step count and body weight, with the permission you grant in the system settings, and never writes to Apple Health or Health Connect. The data read is stored with your other records to draw your chart and fill your report, is never used for advertising or marketing and is never shared with third parties other than our hosting provider. You can disconnect at any time; days already read stay in your records until you delete them or your account.

Reminders

Dose reminders are scheduled on your phone; no reminder is sent from our servers. The reminder text never shows your dose.

Purchases

Weekwell Pro is sold through the App Store and Google Play. Apple or Google processes your payment; we never see your payment details. RevenueCat receives a pseudonymous app user identifier and the purchase records from the store so we know whether Pro is active.

Analytics, crash reports and security

Usage analytics is off unless you turn it on in the app. If you do, Mixpanel (EU data residency) receives a pseudonymous identifier and the names of the screens and actions you use, never your health values, notes or photos. You can turn it off again at any time.

If the app or the server fails, Sentry (EU region) receives a crash report: device model, operating system, app version, the error and a pseudonymous account identifier, without your health records. To protect the service, the app may ask Apple App Attest or Google Play Integrity to confirm it is a genuine copy, and our servers keep technical logs (request time, path and account identifier) to keep the service secure and to fix errors.

If you send us feedback in the app, we keep your message and, if you give one, your email address for up to 365 days to reply.

Service providers and where data is processed

Your account, your records and your progress photos are stored on Amazon Web Services servers in Frankfurt, Germany (eu-central-1), encrypted in transit and at rest. We use these processors under data processing agreements:

Some of these providers may process limited data, such as your account identifier, technical request data or a meal photo you chose to analyse, in the United States or other countries. Such transfers rely on the EU Standard Contractual Clauses or an adequacy decision; for users in Türkiye, transfers abroad (including storage in Germany) are carried out under KVKK Article 9.

How long we keep data

We keep your account and records for as long as you use Weekwell. A guest account that is not used for 180 days (400 days if it has a recovery key) is deleted automatically. When you delete your account, your records and photos are deleted immediately. Database backups are kept for 7 days and are never kept longer than 30 days. Data export files are deleted 7 days after they are created. We keep a record of the consents you gave and withdrew, without your device or network details, as proof of consent, and purchase records the law requires us to keep.

Your choices and rights

In the app you can download a copy of everything your account holds (Settings → Privacy & data → Export my data: a ZIP file with your records and photos), withdraw your AI processing or analytics consent, and delete your account (see https://weekwell.odbs.tech/en/delete-account).

Depending on where you live (for example under the GDPR, the UK GDPR, Türkiye’s KVKK or US state laws), you may also have the right to access, correct, delete or port your data, to restrict or object to processing and to withdraw consent at any time. Write to info@odbs.tech; we reply within 30 days. You may also complain to your data protection authority (in Türkiye, the Personal Data Protection Authority, KVKK).

Legal bases

Where the GDPR, KVKK or similar laws apply, we process your health records with your explicit consent (GDPR Article 9(2)(a); KVKK Article 6), which you give by accepting this policy when you start using Weekwell and can withdraw by deleting your account. We send meal photos to an AI provider only with your separate consent (GDPR Article 6(1)(a) and 9(2)(a)), and analytics only runs with your consent. We process account and subscription data to provide the app you asked for (contract), data needed to keep the service secure and to fix errors on the basis of our legitimate interests, and data we must keep by law to meet legal obligations. We make no automated decisions with legal or similar effects about you.

Children

Weekwell is for adults aged 18 or older. If you tell us you are younger, the app cannot be used. We do not knowingly collect data from children; if you believe a child has used Weekwell, write to info@odbs.tech and we will delete the account.

This website

This website has no accounts and no forms. It sets one cookie, NEXT_LOCALE, to remember your language, and loads no analytics or advertising scripts. Cloudflare delivers the site and processes technical request data, such as your IP address, to deliver and protect it. Contact links open your email app; nothing is sent until you send it.

Changes

We will publish changes on this page and change the date above. If a change materially affects how we use your data, we will tell you in the app and, where the law requires it, ask for your consent again.

Contact

info@odbs.tech