WallWell is made by Aaron Joshua Farahnik (“we”, “us”). This policy says what the app does with your information, in plain words. It covers the WallWell app for iPhone and this website. Effective October 13, 2026.
The short version
Jump to: Your health information · Deleting your data · Your rights · Contact
The app saves one record on your phone. It holds:
WallWell builds your plan on your phone from your answers, and the record itself is never uploaded. A few things from it are counted in anonymous usage events, described in section 2: nine set-up answers and how long your sessions run. Your name, age band, cycle stage, the areas you asked us to be gentle with, the moves you kept in your plan, whether a doctor has mentioned low bone density, what has stopped you before, how you feel most days (including achy joints and sleeping badly), your daily and weekly check-ins and the exact time of your reminder stay on your phone.
Backups. The app has no backup or export feature. On iPhone, the app’s saved record is left out of iCloud and computer backups. If you delete the app, get a new phone or use Delete all my data, the record is gone and we cannot get it back.
Permissions. The app asks to send you reminders, once, on the set-up screen that offers one (or in Settings, if you turn reminders on there). It does not use your location, contacts, camera or photo library.
Apple handles payment. We never see your card number. To know whether you have Premium, the app uses RevenueCat, which receives a random app user ID made on your phone and the purchase receipt from Apple, plus the details every request carries, such as your app version, iOS version, country and IP address. RevenueCat may also read your iPhone’s vendor ID, a random ID shared by apps from one developer. It is not the advertising ID. RevenueCat does not receive your answers, your progress or your name. RevenueCat sends subscription events (a free trial started, a renewal, a cancellation) to PostHog, our analytics service, under the same random app user ID, so we can see which parts of the app lead to a subscription. RevenueCat also holds the random analytics ID that PostHog’s tool makes on your phone (see Usage events and error messages below), so a purchase can be matched to the same anonymous usage. If you turn off Share anonymous usage in Settings, the app removes that ID from RevenueCat.
The iPhone app sends anonymous usage events to PostHog, our analytics service. This website does not. An event says that something happened in the app, for example the app was opened, a screen was shown, a set-up question was answered, a session was started, paused, resumed, skipped ahead, left in the background, finished or quit, the plan screen was shown, or a purchase was started, cancelled or completed. An event also says which button or option you tapped and on which screen, how long a screen stayed open, and when the app went to the background. On the questions whose answers stay on your phone, it says only that you tapped an answer, never which one, and the app never reads what you type. Some events carry a few details:
Every event comes with a random ID that PostHog’s tool makes on your phone, plus the app version and build, whether your subscription is a test one (TestFlight or App Review) once you have one, your iPhone model, your iOS version, your language, your time zone and your screen size. The ID is not tied to your name, email address, phone number or an account. When it starts, the app also asks PostHog for its current settings (feature flags). This version does not use them to change anything you see. We turn off PostHog’s location lookup from your IP address and we do not record your screen. PostHog receives your IP address with each request, as any server does, and we do not use it. Sharing is on by default and you can turn it off at any time: in the app, open Settings and turn off Share anonymous usage, and the app stops sending usage events and error messages.
If the app hits an error, it sends a short error message to PostHog, so we can find and fix the problem. The message is the error’s own text, cut to 300 characters, with whether it was fatal, where in the app it happened and the app version. We add nothing about you to it: no answers and no name. Apple may also share crash logs with us if you have opted in on your iPhone.
Reminders are scheduled on your phone as local notifications. Nothing is sent from a server to deliver them, and the app does not use push notifications. Each one says WallWell, which day is ready and how long it takes, for example “Day 3 is ready. 10 minutes at the wall.”, and can show on your lock screen. If you start a free trial and notifications are on, one more reminder arrives before it ends: two days before a 7 day trial, one day before a 3 day trial. You can turn reminders off in iPhone Settings, then Notifications, then WallWell.
When the app opens, it can check Expo’s update service for a newer version. Like any internet request, this shows Expo your IP address, and it includes the app version and platform. It does not include your record.
We do not collect your name or email address, your contacts, your precise location, or any photos. We do not use advertising identifiers.
Some of what you tell WallWell is health information: your cycle stage (for example perimenopause or menopause), how you feel most days (for example tired, achy joints or sleeping badly), whether a doctor has mentioned low bone density, your daily and weekly check-ins (how you felt, and what pinched), the areas you asked us to be gentle with (for example knees, low back or pelvic floor), and the moves you chose to keep in your plan after your answers left them out. Some states, such as Washington, Nevada and Connecticut, give this kind of data extra protection. We apply the same practice to everyone: we do not collect it. It is saved on your phone only. WallWell uses it on your phone to leave out moves that strain what you flag, to put a left-out move back if you choose to keep it (never one that a bone density answer swaps out), to swap some deep forward bends and rolls for gentler moves if you say a doctor has mentioned low bone density or you are not sure, to make a day shorter and easier when you say you are tired or sore, to adjust the next week after a weekly check-in, and to build your 28 days. It is never sent to us, to PostHog, to RevenueCat or to anyone else, and we never use it for advertising or to decide anything about you. Your activity level, your other set-up answers listed in section 2 and how long your sessions run are ordinary usage data: they go to PostHog as described in section 2, under a random ID and not under your name.
WallWell is a fitness program, not medical care, and it does not diagnose or treat anything. See the Terms of Use for the safety notes.
In the app, open Settings and tap Delete all my data. This erases everything the app saved on your phone (your answers, your name, your plan and the moves you kept, your progress, your check-ins and your settings) and returns the app to a fresh start. It does not cancel your subscription: manage or cancel that in your iPhone settings. It also makes the app forget its random analytics ID, so events sent afterwards cannot be joined to events sent before, and the app gives RevenueCat the new ID. It does not delete the purchase records held by Apple and RevenueCat, or anonymous usage events already sent to PostHog. If a reminder is still scheduled after you delete your data, turn it off in iPhone Settings, then Notifications, then WallWell. Deleting the app also erases the record. There is no account to close.
They process information for us and under their own terms. We do not sell your data, we do not share it for advertising, and we do not use advertising identifiers. If the law or a court requires it, we may have to hand over what we hold. What we hold about you is close to nothing: your answers and progress are not on any server of ours.
Requests between the app and the services above use HTTPS. Your record sits on your phone, protected the way iPhone protects app data, and is not on any server of ours. The few things that do leave your phone are described in section 2. No system is perfectly secure, and we cannot promise it.
Whether or not your state’s law requires it, you can ask us to:
Because your record lives on your phone, you can see and delete all of it yourself in the app. What sits with others is tied to a random ID, not to your name, so we cannot tell which one is yours. Email us and we will do what we can: we will look for your ID with RevenueCat and PostHog and ask them to delete what they hold under it. Apple’s purchase records are Apple’s, and you can ask Apple about those. We answer within 45 days. If we need longer where the law allows, we will tell you why.
If we turn down your request, you can appeal by replying to our email and asking us to review it. If you are still not satisfied, you can contact your state attorney general. Depending on where you live, laws such as Washington’s My Health My Data Act, Nevada’s consumer health data law, Connecticut’s data privacy law and California’s privacy law may give you these rights and more. We do not sell personal data or share it for advertising, so there is nothing to opt out of.
WallWell is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If you think a child has used the app, email us and we will help you delete what we can find.
We and our service providers may process information in the United States and in other countries where they operate.
This page loads its fonts from Google Fonts, so your browser contacts Google when you open it. We do not add analytics or cookies to this page.
If we change this policy, we will change the date at the top and post the new version at this address. If a change means information now leaves your phone that did not before, we will tell you in the app first.
Aaron Joshua Farahnik
support.tyhlabs@gmail.com
Write to us for any question about this policy or to use any right in section 8.
WallWell is a fitness program, not medical advice.