The Wylde App — Privacy Notice

Wylde Wellbeing Ltd is the data controller for The Wylde App, and is registered with the Information Commissioner's Office. You can reach us at info@wyldewellbeing.uk, or by post at Highcroft, Factory Road, Cowbridge, Vale of Glamorgan, CF71 7JD.

This notice covers the members' app at app.wyldewellbeing.uk — your account, what you write in it, and the energy economy. It sits alongside the Wylde Wellbeing Privacy Notice, which covers the coaching practice: sessions, session recording, referrals and the rest. Where the two overlap they say the same thing; where the app does something the practice does not, it is set out here.

The practice notice in force is v3.1, effective 27 August 2026, and you can read it at https://wyldewellbeing.uk.

This notice is issued under the UK General Data Protection Regulation, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

When you join The Wylde App we process data relating to your membership, and to the reflective content you create inside it.

We collect this directly from you — the account you create, and the content you choose to save. Nothing in the app is populated from anywhere else, and nothing is carried across from your coaching records.

The app includes an optional set of tools called the Wylde Energy Economy, for tracking, pacing and planning your energy when you are living with fatigue, illness or symptoms. Everything in it is optional. You can use the rest of the app without it, and you can stop using it at any time.

Because this is health information about you, we set out exactly what it holds rather than covering it by implication.

This is Special Category Data — health data, and, where you log a cycle phase, data concerning your sex life or reproductive health — under Article 9 of the UK GDPR. We rely on your explicit consent under Article 9(2)(a), given through a clear, separate opt-in when you join. You can withdraw it at any time, and withdrawing it does not remove your access to the rest of the app.

Your energy economy data is confidential to you and held securely within the app. In practice that means it is stored in the EU, on servers in Frankfurt, Germany, encrypted in transit and at rest; and it is protected by database-level access rules so that only your own account can read or write your rows. It is not visible to other members, and there is no sharing, export-to-community or social feature anywhere in the app. It is never sold, never shared with third parties for commercial or marketing purposes, and never used to train AI tools. It is deleted when you delete it, or when you close your account.

A note on what this is for. The energy economy is a self-tracking and coaching tool. It is not a medical device, it does not diagnose anything, and nothing in it is medical advice. It does not replace your GP or any clinician, and no clinical decision should be made on the strength of it.

Where we rely on consent, you can withdraw it at any time. That does not affect the lawfulness of anything we did before you withdrew it.

A data processor is an organisation that processes personal data on our behalf and under our instruction. We only use processors that can demonstrate UK GDPR compliance, and we have written contracts with each.

Your member data is stored in the EU. For UK members that is a UK-to-EEA transfer, covered by the UK's adequacy finding for the EEA, so no separate transfer agreement is needed for that leg. Where data does reach the USA — Stripe for payments, Vercel for hosting — we rely on UK International Data Transfer Agreements, or the ICO's UK Addendum to the EEA Standard Contractual Clauses.

The app is AI-free. It stores what you write and shows it back to you. Nothing inside it generates, infers, predicts or recommends anything about you, and no AI system reads your journal or your energy economy.

We do not make any solely automated decision about you that has legal or similarly significant effects. Where Wylde Wellbeing uses AI elsewhere in the practice — session transcription with your consent, and the coach's own preparation — that is set out in the Wylde Wellbeing Privacy Notice and the AI Policy, both available at wyldewellbeing.uk.

If that ever changes, this notice changes first, and you will be told before any such feature reaches you.

Note the distinction: what you write in the app is deletable on request and on account closure. It is not held for the seven-year coaching-records period, which applies to formal 1:1 coaching engagements and not to app membership.

You can delete individual entries yourself at any time, from within the app. You can also close your account entirely from your account page. Closing your account deletes your profile, your journal, your saved resources, your lens progress, and every row of your energy economy data.

Deletion is irreversible. There is no archive, no recycle bin, and no way for us to restore it afterwards — which is the point.

We keep your consent records, with your identity removed from them, so there is a defensible record that consent was captured without holding data that still points to you. Billing records are kept for six years because HMRC requires it.

To exercise any of these, email info@wyldewellbeing.uk. We respond within one month, and we may need to verify who you are first.

If you are unhappy with how we handle your data, please tell us first: info@wyldewellbeing.uk. We acknowledge complaints within five working days and respond substantively within 30 days, as the Data (Use and Access) Act 2025 requires.

If you are still unhappy, you have the right to complain to the Information Commissioner's Office: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113, or ico.org.uk/make-a-complaint. You also have the right to seek a legal remedy.

Complaints about the coaching itself, rather than about your data, are handled under the Wylde Wellbeing Complaints Procedure, available at wyldewellbeing.uk.