At VIWELL, we strive to build trust, and respecting your privacy is an essential part of that commitment. This Privacy Statement explains what personal data we collect, how we collect it, how we use it, and how we protect it.
This Privacy Statement applies to all VIWELL products and services, including use by organizations and their employees (B2B) and use by individual consumers who create their own account, including through an Individual Plan or Family Plan (B2C). Where a Family Plan includes members added by a primary account holder, including minor family members, this Privacy Statement applies to those members as set out in "Children's Privacy and Family Plans" below.
We regularly review and update it to reflect changes in our products, services, and legal or regulatory requirements.
VIWELL is committed to safeguarding your privacy by promoting knowledge, professionalism, and ethical conduct among our employees and partners, and by implementing appropriate technical and organizational measures to protect your personal data.
At VIWELL, we envision a world where every individual has access to the knowledge, resources, and tools needed to achieve their best life every day, whether that access comes through their employer or through their own individual subscription.
We believe holistic wellbeing is a right for every individual, and we are dedicated to making it accessible, sustainable, and engaging. VIWELL is a personalized, proactive digital wellbeing platform designed to support wellbeing and performance, for employees of the organizations we work with and for individual consumers and their families who subscribe directly.
Our platform brings together multiple dimensions of wellbeing, including Nutritional, Social, Mental, Professional, Physical, and Financial wellbeing, into one unified solution. This enables organizations to foster sustainable wellbeing across their workforce, increase engagement, and build stronger workplace cultures, and enables individual users and their families to pursue their own wellbeing goals.
As a digital wellbeing solution, VIWELL supports organizations and individual users across multiple countries, including the United Arab Emirates, Saudi Arabia, Bahrain, Qatar, Kuwait, and Oman. Our approach is centered on holistic wellbeing because people are multidimensional, and our solutions should be too.
To provide our products and services, VIWELL may collect and process certain personal data. The types of data collected depend on the specific product, service, and way in which you interact with VIWELL, and on whether you use VIWELL through an organization (B2B) or as an individual consumer (B2C), including through an Individual Plan or Family Plan.
Depending on the circumstances, this may include:
Name and other identifying information. Contact information, such as email address and phone number. Business or organizational information, where applicable. Date of birth or age, including to verify eligibility and apply age-appropriate protections as described in "Children's Privacy and Family Plans" below. Account and profile information. Information required to provide and personalize our services.Information relating to your participation in challenges, events, or otherplatform activities. Subscription and billing status information relating to Individual Plan and Family Plan purchases. For B2C purchases made through the Apple App Store or Google Play Store, payment is processed directly by Apple or Google, and VIWELL does not directly collect or store your full payment card details. VIWELL may receive limited subscription and transaction status information from these platforms. Information about a Family Plan, including the relationship between a primary account holder and the family members added to that plan. Technical and usage information collected through our websites, applications, cookies, and analytics technologies. Health and wellbeing information, such as wellbeing assessment responses, wellbeing scores, goals, preferences, and information you choose to provide about your physical, mental, nutritional, or lifestyle wellbeing. Activity and lifestyle information, such as physical activity, sleep, habits, and related wellbeing information, where you choose to provide or connect such information. Information obtained through connected devices or health integrations, where you choose to enable those integrations and grant the relevant permissions.
Some of the personal data processed by VIWELL may constitute sensitive or special-category personal data under applicable law, including information relating to your physical or mental health, wellbeing, lifestyle, genetic or biometric information where applicable, and other information that may reveal information about your health or condition.
VIWELL processes such information only where permitted by applicable law and where an appropriate lawful basis and, where required, explicit consent or other legally required condition applies. The purposes for processing such information include providing and personalizing the Services, conducting wellbeing assessments, generating wellbeing insights and recommendations, supporting selected features and integrations, maintaining the security of the Services, and complying with legal obligations.
VIWELL does not use sensitive health-related personal data for direct marketing where prohibited by applicable law.
You may provide personal data directly to us, for example, when creating or using an account, subscribing to communications, requesting information or a quote, participating in an event or challenge, purchasing or being added to an Individual Plan or Family Plan, or using our products and services.
We may also collect certain information automatically through cookies, analytics technologies, mobile applications, and similar tools.
VIWELL processes personal data only where permitted by applicable data protection law and where an appropriate lawful basis applies to the relevant processing activity. Depending on the circumstances and applicable law, this may include processing that is necessary to provide or perform our contractual relationship with you, compliance with a legal obligation, your consent, protection of vital interests, or another lawful basis permitted by applicable law.
Where processing involves sensitive or health-related personal data, VIWELL applies the additional requirements that apply to such data under the laws of the country concerned, including obtaining explicit consent where required.
The lawful basis for processing depends on the nature and purpose of the processing. For example, VIWELL may process account and subscription information as necessary to provide the Services; process information to comply with legal and regulatory obligations; process information with your consent where consent is required; and process certain information for security, fraud prevention and service improvement where permitted by applicable law.
Where a processing activity requires consent, VIWELL will request consent separately and will explain the relevant purpose before or when consent is requested. Where consent is withdrawn, VIWELL will stop the relevant processing where required by applicable law, although this may affect our ability to provide certain optional features or Services.
Your personal data may be used to:
Assess and onboard customers, suppliers, partners, and users.Provide, operate, and personalize our products and services, including Individual Plans and Family Plans. Verify eligibility and age, and apply age-appropriate content, features, and protections, as described in "Children's Privacy and Family Plans" below. Where required, obtain, record, and manage parental or guardian consent for a minor added to a Family Plan. Manage Family Plans, including the relationship between a primary account holder and the family members added to that plan. Process subscription purchases made through the Apple App Store or Google Play Store and manage the resulting subscription status within VIWELL. Develop, maintain, and improve our products and services. Manage agreements and business relationships. Communicate with you about our products, services, and activities. Send you marketing, promotional and advertising communications where permitted by applicable law and, where required, with your consent. Where consent is required, you may withdraw it at any time, and VIWELL will stop the relevant marketing communications in accordance with applicable law. VIWELL does not use sensitive health-related personal data for direct marketing where prohibited by applicable law. Manage business operations, reporting, analytics, and audits.Maintain the security, safety, and integrity of our systems and services. Detect and prevent fraud, misuse, and unauthorized activity. Comply with applicable legal and regulatory requirements.Protect the vital interests of individuals where necessary.
Where we rely on your consent as the legal basis for processing, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
VIWELL uses artificial intelligence and automated technologies, including the VI Agent, to provide features such as personalized assistance, recommendations, wellbeing insights and other functionality.
Depending on the feature you use, AI-enabled functionality may process information such as your questions and interactions with VIWELL, your preferences, goals, assessment responses, wellbeing information, activity information and other information associated with your account that is necessary to provide the relevant feature.
Where third-party AI or technology providers are used, those providers may process personal data on VIWELL's behalf in accordance with VIWELL's instructions, applicable law and contractual confidentiality, security and data protection requirements.
AI-generated information is intended to support your wellbeing experience and does not constitute medical, psychological, financial or other professional advice.
VIWELL uses cookies, mobile application technologies, analytics tools and similar technologies to operate, secure, measure and improve the Services. Depending on the technology and applicable law, these technologies may collect information about your device, browser, application usage, interactions and preferences.
Where required by applicable law, VIWELL will request your consent before using non-essential cookies or similar technologies and will provide appropriate controls for managing your preferences. Further information is available in our Cookie Policy.
VIWELL may process and store personal data through:
Our own infrastructure and data centers.Reputable service providers supporting the delivery of our services.Cloud infrastructure and selected third-party applications.
Where you make a B2C purchase through the Apple App Store or Google Play Store, your payment information is stored and processed by Apple or Google in accordance with their own privacy policies, not by VIWELL directly.
We apply appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction.
Where we engage third-party service providers, we select providers that meet appropriate security and data protection standards and require them to process personal data only in accordance with our instructions and applicable laws.
VIWELL may transfer or provide access to personal data to service providers and other recipients located outside the country in which you are located where necessary to provide and operate the Services.
Where such transfers are subject to data protection requirements, VIWELL implements the safeguards and transfer mechanisms required by applicable law. These may include contractual safeguards, adequacy mechanisms, regulatory approvals or other legally recognized safeguards, depending on the jurisdiction concerned.
When you delete your account, VIWELL will process your personal data in accordance with its applicable account deletion and retention procedures. Certain information may be retained for a limited period where necessary to comply with legal, regulatory, accounting or reporting obligations, resolve disputes, prevent fraud or misuse, maintain security, or establish, exercise or defend legal claims. Backup copies may remain for a limited period before being securely deleted or overwritten.
VIWELL does not sell or share your personal data with third parties for their own independent purposes.
To operate our products and services, we may share personal data with selected service providers, partners, and other third parties acting on our behalf. These parties may provide services such as hosting, analytics, communications, security, technical support, payment processing (for example, the Apple App Store or Google Play Store for B2C subscriptions), or other services necessary to operate our platform.
We may also disclose personal data where required by law, regulation, legal process, or where necessary to protect the rights, safety, security, or vital interests of individuals or VIWELL.
Sensitive personal data is shared only where permitted or required by applicable law and where appropriate safeguards are in place.
All third parties processing personal data on behalf of VIWELL are required to maintain appropriate confidentiality, security, and data protection standards.
Access to personal data is strictly limited to individuals who need access to perform their responsibilities and who are appropriately authorized to do so. This principle applies to VIWELL employees, contractors, service providers, and external partners.
Within a Family Plan, a primary account holder has access to information necessary to manage the plan, such as membership and billing status. The primary account holder does not have access to another family member's individual wellbeing data, assessment answers, health information, activity information, AI interactions, or other personal information, except where access is expressly permitted by applicable law and the relevant Service design.
If you access VIWELL through your employer or another organization, the organization may receive information about programme participation, engagement or other information expressly agreed with that organization. Individual health, wellbeing assessment responses and other sensitive personal data will not be shared with your employer except where permitted by applicable law and where the relevant disclosure has been appropriately communicated to you.
We expect all parties handling personal data on our behalf to maintain appropriate confidentiality, security, and access controls.
Depending on your location and the applicable data protection laws, you may have certain rights regarding your personal data. This may include rights under the General Data Protection Regulation (GDPR), as well as similar rights under applicable data protection laws in the United Arab Emirates, Saudi Arabia, Bahrain, Qatar, Kuwait, Oman, or other countries where VIWELL operates. These rights may include:
The right to be informed about how your personal data is processed.The right to access your personal data.The right to correct inaccurate or incomplete personal data.The right to request deletion of your personal data, where applicable.The right to restrict processing, where applicable.The right to object to certain processing activities.The right to data portability.The right not to be subject to certain decisions based solely on automated processing, including profiling, where applicableYou may also have the right to withdraw consent where processing is based on consent.
If you believe your data protection rights have been violated, you may lodge a complaint with the relevant Data Protection Authority in your jurisdiction.
VIWELL takes extra care to protect the privacy and safety of children and minors who use our Services.
Eligibility. To create a VIWELL account on your own, you must be at least 18 years old. Individuals under 18 ("minors") may access VIWELL only through a Family Plan created and managed by a parent or legal guardian or another person who has the legal authority to provide consent on the minor's behalf, unless a particular Service expressly provides otherwise.
Age verification. VIWELL may ask for date of birth or other information necessary to determine age and eligibility and to apply appropriate safeguards. Where required by applicable law, VIWELL will use reasonable and appropriate mechanisms to verify age. If required information is not provided, access may be limited or restricted.
Parental or guardian consent. Where parental or guardian consent is required by applicable law, VIWELL will obtain and record consent through an appropriate mechanism before processing the minor's personal data for the relevant purpose. VIWELL may take reasonable steps to verify that the person providing consent has the required parental or legal authority. Consent will be specific to the relevant processing purpose where required by law, and a parent or legal guardian may withdraw consent by contacting us at care@viwell.com. Withdrawal may limit or end the minor's access to Services that depend on the relevant processing.
Age-specific safeguards. VIWELL applies age-appropriate safeguards and complies with the child protection and data protection requirements applicable in the country in which the minor is located. Additional restrictions may apply to users under 13 and to other minors depending on the applicable law. These safeguards may include restrictions on content, profiling, tracking, advertising, social features, challenges, events, rewards and other functionality.
Children's data and marketing. VIWELL does not use children's personal data for targeted advertising or other commercial purposes prohibited by applicable law, and applies additional restrictions to tracking, profiling, recommendations and other processing involving children's accounts where required by applicable law.
Family Plans generally. A primary account holder may purchase a Family Plan (up to 5 or up to 8 members, including the primary account holder) and add other individuals as family members. The primary account holder is responsible for managing the Family Plan, including adding and removing members and the plan's billing. The primary account holder's access is limited to plan and billing management; it does not extend to another family member's individual wellbeing data, assessment answers, or activity, except where access is expressly permitted by applicable law and the relevant Service design.
If we become aware that a minor has created or attempted to create an independent VIWELL account outside of a Family Plan, we will take steps to restrict or remove that access.
When you participate in VIWELL events, we may capture photographs or videos in which you may appear.
Where VIWELL provides coins, rewards, benefits, offers, or similar incentives in connection with challenges, activities, or other platform features, we may process information relating to your eligibility, coin or reward balance, earning and redemption history, and limited fulfilment or transaction-related information.
We may retain certain reward-related operational records where necessary to prevent fraud or misuse, fulfil rewards, manage disputes, or comply with applicable legal, regulatory, or accounting requirements.
Where a reward, benefit, or offer is provided by a third-party partner, VIWELL may share limited personal data with that partner where necessary to provide, validate, or fulfil the relevant reward.
When you participate in challenges or other activities on the VIWELL platform, certain profile and participation-related information may be visible to other participants. Depending on the activity, this may include information such as your name, profile photo, step count, ranking, achievements, or similar participation data.
Where required by applicable law, and with your consent where appropriate, VIWELL may use event-related media and limited participation data for promotional and marketing purposes. This may include publication on our website, social media platforms, marketing materials, and other communication channels.
We will only use identifiable images or personal data for these purposes where we have an appropriate legal basis. Where consent is the applicable legal basis, you may withdraw your consent at any time by contacting us at care@viwell.com.
Following withdrawal of consent, VIWELL will stop future use of the relevant data for the applicable purpose, where reasonably practicable. Withdrawal does not affect processing that took place before consent was withdrawn.
VIWELL does not use sensitive health data, such as detailed medical information, for marketing purposes without obtaining the appropriate separate and explicit consent where required by law.
This VIWELL Privacy Statement was originally created in December 2022 and was last updated, effective 20 August 2026, to reflect the introduction of individual (B2C) subscriptions, Family Plans, and related protections for minor users.
We may periodically update this Privacy Statement to reflect changes in our products, services, practices, or applicable laws and regulations. Where required, significant changes will be communicated through our website or directly to you.
If there is any conflict between this Privacy Statement and the terms of an agreement between VIWELL and a customer, the terms of that agreement will prevail to the extent permitted by applicable law.
In certain circumstances, a specific privacy notice may apply to a particular product, service, processing activity, or interaction. Where applicable, that notice will be provided to you at the appropriate time.
If you have any questions, concerns, or requests regarding our privacy practices or your personal data, please contact our Corporate Information Security & Privacy Office:
Email: care@viwell.com
To exercise your privacy rights or make a privacy request, you may contact us using the details above. We may need to verify your identity before completing a request. The rights available to you, and any applicable limitations or exemptions, depend on the law applicable to your personal data. VIWELL will respond to requests within the timeframe required by applicable law.
Where consent is required by applicable law, VIWELL will request and record your consent through an appropriate consent mechanism before carrying out the relevant processing. Consent will be specific to the relevant processing purpose where required by law.
You may withdraw consent at any time where applicable, although withdrawal may affect our ability to provide certain features or Services that depend on that processing. Continued use of the Services will not, by itself, be treated as consent to processing where applicable law requires a specific consent mechanism.