Back to Prajas Labs
WellCycle — Legal

Privacy Policy

WellCycle is built on a single promise: your health data belongs to you, lives on your device, and never leaves without your explicit consent.

Effective Date 2 July 2026
Data Controller Prajas Labs Private Limited
Applies To WellCycle — Android App
Contact contact@prajaslabs.com / dineshlazer999@gmail.com
⚕️
NOT A MEDICAL DEVICE

WellCycle is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It is an informational health screening tool only. Results and alerts generated by WellCycle are for awareness purposes and do not constitute a medical diagnosis or clinical recommendation. Always consult a qualified healthcare professional (GP, consultant, or specialist) before making any health decisions. If you are experiencing a medical emergency, call your local emergency services immediately.

Medical Disclaimer

WellCycle is not a medical device and is not regulated as a medical device under the UK Medical Devices Regulations 2002, EU MDR 2017/745, or the US FDA 21 CFR Part 880.

WellCycle does not diagnose, treat, cure, or prevent any medical condition. All screening results, risk scores, alerts, and health insights generated by WellCycle are for informational and awareness purposes only. They do not constitute a medical diagnosis, clinical recommendation, or substitute for professional medical advice.

You should always consult a qualified healthcare professional — such as your GP, consultant, obstetrician, or specialist — before making any decisions about your health, starting or stopping any medication, or acting on any information provided by this app.

If you are experiencing a medical emergency, call your local emergency services immediately (999 in the UK, 112 in Europe, 911 in the US).

Prajas Labs Private Limited accepts no liability for any health decisions made based on information provided by WellCycle.

Core Principle: WellCycle stores all personal health data exclusively on your device, encrypted with AES-256. Your health information is never transmitted to our servers for storage or analysis.

1. Who We Are

WellCycle is a product of Prajas Labs Private Limited, a technology company incorporated in India (CIN: U62099AP2026PTC126173, PAN: AARCP1301P), with registered address at 72/272-1-2-15, Dandu Harijanawada, Ravindra Nagar, Cuddapah, Andhra Pradesh — 516003, India.

For privacy matters, contact us at: contact@prajaslabs.com / dineshlazer999@gmail.com

Prajas Labs acts as the Data Controller under the General Data Protection Regulation (GDPR) for users in the European Economic Area and United Kingdom, and under applicable Indian data protection law for users in India.

2. Data We Collect

WellCycle collects only the data you actively provide during use of the app. We do not collect data in the background, track your location, or use advertising SDKs.

Data Category Examples Where Stored
Health Symptoms Symptom responses, cycle dates, flow intensity, mood logs, discharge logs, sleep quality, pain scores On-device only (encrypted)
Personal Profile Age, height, weight, country, ethnicity (used for clinical calibration only) On-device only (encrypted)
Medical History Diagnosis flags, family history answers, medication fields On-device only (encrypted)
AI Chat Messages Free-text questions you send to the WellCycle chat assistant Sent to Railway/Gemini API to generate replies; not stored by us
Account Credentials Username and password hash (for optional backup/sync only) Encrypted on-device; JWT token stored in Android Keystore

3. Where Your Data Lives

All personal health data in WellCycle is stored exclusively in a local SQLite database on your Android device. This database is:

  • Encrypted with AES-256 via SQLCipher — industry-standard full-database encryption
  • Keyed by a secret stored in the Android Keystore — a hardware-backed secure enclave on your device
  • Never automatically backed up to Google Drive, cloud services, or our servers
  • Fully deleted when you uninstall the app or use the "Delete All My Data" option in Settings

On-Device AI Screening: All 20 health screening models (PMOS, Heart Health, GDM, Thyroid, Bone Health, Mental Health, Anaemia, PPD, PMDD, Endometriosis, Breast Cancer, Ovarian Cancer, Menopause, Uterine Cancer, Fibroids, Vaginal Infection, Menstrual Irregularity, Maternal Health, and others) run entirely on your device using ONNX Runtime. Your health data is never sent to a server for AI analysis.

4. What Goes to the Server

Only the following data is transmitted from the app to external servers:

  • AI Chat only: When you use the WellCycle chat assistant, your typed message is sent to a Google Gemini AI endpoint (via our Railway API relay) to generate a response. Chat messages are processed in transit and not stored by Prajas Labs.
  • Authentication tokens: A JWT (JSON Web Token) is issued on login and used to authenticate API requests. No health data is included in authentication calls.
  • Force-update config: The app periodically checks a minimum version number from our API to enforce critical security updates. No personal data is sent in this request.
  • PDF generation (optional): If you choose to export a health summary PDF, a report is generated on-device. No data is uploaded to generate the PDF.

We never send health screening results, symptom inputs, cycle data, mood logs, or personal medical history to any server.

5. Security & Encryption

WellCycle implements multiple layers of security to protect your data:

Layer Technology What It Protects
Database encryption SQLCipher AES-256-CBC All health records, cycles, mood, symptoms
Key storage Android Keystore (hardware-backed) DB encryption key, JWT tokens
AI model protection AES-256-GCM + gzip (FEGZ format) All 20 ONNX model files embedded in the app
Network security TLS 1.3 + certificate pinning (ISRG Root X1/X2, E1) All API communications
Code protection R8 obfuscation + resource shrinking Clinical logic, screening algorithms
Biometric gate Android BiometricPrompt App access (fingerprint / face / PIN)

6. Third-Party Services

WellCycle uses the following third-party services in limited scope:

  • Google Gemini API (via Railway relay) — processes AI chat messages only. Google's privacy policy applies to messages in transit. We do not send health data to this service.
  • Railway.app — hosts our backend API for authentication and AI chat relay. No health data is stored on Railway servers.
  • Google Play Services — standard Android services for app distribution, crash reporting (if enabled by the OS), and Health Connect integration (if you grant permission).
  • Android Health Connect (optional) — if you grant permission, WellCycle reads steps, heart rate, sleep, and SpO₂ from Health Connect. This data is processed on-device and never transmitted to our servers.

We do not use advertising SDKs, analytics platforms, social login, or any third-party tracking. There are no ads in WellCycle.

7. Your Rights

If you are a user in the European Economic Area (EEA), United Kingdom, or another jurisdiction with comprehensive data protection laws, you have the following rights:

Access Correction Erasure Portability Restriction Objection

Because almost all data is stored locally on your device, you can exercise most of these rights directly within the app:

  • Access & Export: Use the PDF export feature to access all your health data in a readable format.
  • Erasure ("Right to be Forgotten"): Go to Settings → Delete Account & Data to permanently delete all local data. Uninstalling the app also removes all data.
  • Portability: Export your data as a PDF from within the app at any time.
  • Correction: Edit any symptom entry, cycle record, or profile field directly in the app.

To exercise rights related to server-side account data (login credentials, JWT tokens), email us at contact@prajaslabs.com / dineshlazer999@gmail.com. We will respond within 30 days.

You have the right to lodge a complaint with a supervisory authority. In the UK: Information Commissioner's Office (ico.org.uk). In the EU: your national data protection authority.

8. Children's Privacy

WellCycle is designed for adult women (18 years and older). We do not knowingly collect personal data from individuals under 18. If you believe a child has provided health information through the app, please contact us at contact@prajaslabs.com / dineshlazer999@gmail.com and we will take appropriate steps to remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app, legal requirements, or our practices. When we make significant changes:

  • The "Effective Date" at the top of this page will be updated
  • A notice will be shown within the WellCycle app
  • For material changes affecting your rights, we will request fresh consent

Continued use of WellCycle after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

For any privacy questions, data requests, or concerns about WellCycle:

Prajas Labs Private Limited
72/272-1-2-15, Dandu Harijanawada, Ravindra Nagar,
Cuddapah, Andhra Pradesh — 516003, India

Email: contact@prajaslabs.com / dineshlazer999@gmail.com
CIN: U62099AP2026PTC126173  ·  PAN: AARCP1301P

We aim to respond to all privacy enquiries within 30 calendar days.