Privacy Policy

Who we are

Wolfburgh is operated by Niall Roxburgh, trading as Wolfburgh. We are the data controller for the personal data described here.

This policy covers the wolfburgh.com website, the Wolfburgh app, the member and employer portals, and the Wolfburgh service (blood testing, care team sessions and challenges). It replaces our earlier policy (version 1.2, 15 August 2026). Questions or requests: info@wolfburgh.com.

What we collect on this website

• Contact form: your name, email, phone number if you add it, and your message. It is emailed to our team.
• Eligibility questions on the homepage: your name, email and your answers about your goal, what has held you back, how long you have been trying and how committed you are. We email your answers to our team and send you a confirmation.
• Checkout: your name, email and chosen plan go to Stripe, which takes your payment. We never see or store your card details.
• Employer calls: booked through Calendly, which receives the details you enter.
• Server logs: our host, Vercel, keeps standard logs (such as IP address and browser type) to run and protect the site.

The website sets no cookies of its own and runs no analytics or advertising. See our Cookie Policy.

What we collect in the app and through the service

• Account: name, email, phone number, password (stored hashed), profile photo if you add one, and timezone. You sign in with your password or a one-time code sent to your email.
• About you: your answers in onboarding and the Foundations Assessment, such as age, date of birth, gender, sleep, diet, stress, exercise preferences and goals. Some answers can include alcohol or nicotine use.
• Blood tests: your marker results (value, unit, reference range and whether a result is flagged) and any result files you or our team upload.
• Phone health data, only if you connect Apple Health or Google Health Connect: steps, active calories, heart rate, resting heart rate, heart rate variability, sleep, workouts, weight and distance. We store daily totals and individual workouts.
• Habits and logs: what you log in the app, such as water, protein, fasting, meditation, food choices, and journal and gratitude entries.
• Progress: your Wolfburgh Score, streaks, points, badges and challenge progress.
• Care team: bookings, intake forms (goals, health notes, injuries), messages with your care team, and notes your care team writes, some of which they share with you. Video sessions run through Agora and are not recorded.
• Device and usage: your push notification token, in-app usage events and crash reports.
• Wolfburgh 28 challenge: name, email, phone number and team.

We do not collect your location or contacts, we do not use advertising identifiers, and we do not track you across other apps or websites. The app uses your camera and microphone only for video sessions, and your photo library only to set a profile photo.

Why we use it, and our legal basis

For members in the UK and EEA, these are our legal bases under the UK GDPR and EU GDPR:

• Running your membership (account, bookings, sessions, messages, payments): contract, Article 6(1)(b).
• Health data (blood results, phone health data, assessment answers, health notes): your explicit consent, Article 9(2)(a), which you give in the app and can withdraw at any time.
• Sharing data with Wolfie, our AI assistant: a separate explicit consent that stays off until you turn it on.
• Sharing your health numbers with the community, and individual progress with your employer: your consent, off until you turn it on, and you can turn it off at any time.
• Showing your name, photo, badges, streaks and leaderboard position to other members: contract, as part of the community features of your membership.
• Keeping the app reliable and secure, and understanding how features are used: legitimate interests, Article 6(1)(f).
• Payment and tax records: legal obligation, Article 6(1)(c).
• Push notifications: your consent, which you control in your phone's settings.

We do not use your data for advertising and we never sell it.

Who can see your data

• Your care team (physician, nutritionist, personal trainer and behaviour specialist) sees your contact details, goals, and assessment and intake answers. They see your blood results once you have given health consent, and your phone health data only with a further, separate consent.
• Wolfburgh staff: a small number of authorised staff can access member accounts, including blood results, to run the service and support you.
• Our testing partner, a CLIA-certified US laboratory, receives the details it needs to process your sample and report your results. Its in-house physician reviews every panel.
• Other members see you by first name and profile photo, can find you by name, see your badges and streaks in the community feed, and see you on leaderboards. Your health numbers are shared only if you turn on "Share my activity with the community" (it is off until you do): then they also see your personal bests (for example steps or sleep hours) and your daily Wolfburgh Score when it is 60 or above.
• Your employer, only if your company runs a Wolfburgh programme: its administrators see the email address your invite was sent to and whether your seat is in use. With your separate consent, they can also see your name, team, weekly score trend, streaks, challenge participation, number of sessions and the last week you were active. Without it, you appear on company challenge leaderboards as an anonymous participant. Group figures are only shown when at least 5 people contribute. Employers never see your blood results, phone health data, assessment answers or anything you discuss with your care team.

We may also disclose data where the law requires it, or to protect someone's safety.

The services that process data for us

These companies process personal data on our behalf, under data processing terms:

• MongoDB Atlas: our main database.
• Amazon Web Services: file storage. Blood test files are kept encrypted in a separate, restricted store.
• Render: runs our servers.
• Vercel: hosts this website and our web portals.
• Agora: video sessions. Sessions are not recorded.
• Resend: email, including sign-in codes, confirmations and website form messages.
• Firebase Cloud Messaging (Google): push notifications. A notification can show the sender's name and the start of a message.
• Sentry: crash and error reports, linked to your user ID.
• PostHog (EU): in-app usage events, such as which habits and challenges you log and amounts like water or protein, linked to a user ID. It does not receive blood results or care team messages.
• Stripe: payments.
• Calendly: employer call bookings.
• Anthropic: Wolfie, our AI assistant, only if you turn it on (see below).

Wolfie, our AI assistant

Wolfie is built on Anthropic's Claude models and is off until you turn it on in the app. When it is on, we send Anthropic your goals and session credits; phone health data from the last 7 days and a 30-day score that uses heart rate and heart rate variability; your daily scores and habits; your blood marker results with their ranges and flags; your streaks, points and challenge progress; upcoming and recent session times; your timezone; and your recent messages with Wolfie. We do not send your name, email or phone number. When Wolfie is on, the same data is also used for weekly insight notifications.

Under Anthropic's commercial terms, this data is not used to train its models and is deleted within 30 days. You can turn Wolfie off at any time in the app (Profile, Settings, Share data with AI assistant). We stop sending data straight away and permanently delete your Wolfie conversation history.

Where your data is stored

Our providers store and process data in the UK, the EU and the United States. Uploaded blood test files are stored in Europe. When data moves outside the UK or EEA, we rely on the safeguards in our providers' data processing terms, such as the UK International Data Transfer Addendum, Standard Contractual Clauses or the UK-US Data Bridge.

How long we keep it

• Account, profile, health and activity data: while your account is open. When you use Delete account in the app (Profile), we permanently delete your account and data straight away, including blood test files, messages and Wolfie conversations. We keep booking and payment records, without your health details, for tax and accounting. If you still have an active membership, email us to end it first. You can also email us to delete your account, and we will do it within one month.
• Uploaded blood test files: 8 years from upload, then permanently deleted, or straight away when you delete your account.
• Messages with your care team: deleted automatically after 12 months.
• In-app notifications: deleted after 90 days.
• Wolfie conversations: deleted as soon as you turn Wolfie off. Anthropic deletes its copy within 30 days.
• Payment and invoice records: 6 years, for tax and accounting purposes.
• Website form messages: as long as we need to answer you.
• Crash reports and usage events: kept under each provider's retention settings, then deleted.

Your rights

UK and EEA: you can ask to see your data, correct it, delete it, restrict or object to how we use it, receive a copy in a machine-readable format, and withdraw consent at any time (withdrawing does not affect what we did before). Email info@wolfburgh.com and we will reply within one month. The app does not have a download button yet, so we send your copy by email. You can also complain to the Information Commissioner's Office at ico.org.uk.

United States: wherever you live, you can ask to see, correct or delete your data and withdraw your consent at any time, using the same email. We do not sell personal information or health data, and we do not share it for targeted advertising.

Automated scores: your Wolfburgh Score and Wolfie's suggestions are calculated automatically to guide your plan. They do not make decisions with legal or similarly significant effects about you.

How we protect it

Data is encrypted in transit. Uploaded blood test files are encrypted at rest in a separate store with restricted access. Passwords are stored hashed. Access is limited by role, and your care team cannot see your health data until you consent. No system is perfectly secure; if a breach affects your data, we will tell you and the regulator where the law requires it.

Children

Wolfburgh is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a minor has signed up, email info@wolfburgh.com and we will delete the data.

Changes to this policy

When we make important changes, we will update this page and tell members by email or in the app before the changes take effect. The version and date at the top always show the current version.

Contact

Email info@wolfburgh.com with any question about your data or this policy.