WeightwellPrivacy Policy
This policy explains what the Weightwell app and clinic console ("Weightwell") collect, why, and the choices you have. Weightwell is operated by MedPath ("we", "us") in Singapore and is designed to comply with Singapore's Personal Data Protection Act 2012 (PDPA).
Two ways to use the app
On your own (no clinic). You don't create an account and we don't ask for your name, phone number or email. Your doses, weights, symptoms and reminder settings are stored only on your phone. They are not sent to us unless you later connect to a clinic and choose to share them. In that case they are sent to your clinic and then removed from the phone. Deleting the app or tapping “Delete all records on this phone” removes them.
With your clinic. Your clinic enrols you and gives you an activation code. From then on, what you record in the app is shared with your clinic so your care team can follow up. Your clinic decides why and how your information is used for your care. We process it on the clinic's behalf to run the service.
What we collect when you use Weightwell with a clinic
| Type | Examples | Why |
|---|---|---|
| Enrolment details (entered by your clinic) | Name, mobile number, birth year, height, starting weight, pre-treatment safety checklist | To identify you to your care team and set up your plan |
| Treatment plan | The schedule your doctor signed and its earlier versions | To show you what to do and when |
| What you record | Doses taken or skipped, injection site, weight, symptoms and notes, appointment requests | So your care team can see how you're doing and follow up |
| Device and app | An app-generated device ID, push notification token, app version, time zone, notification permission | To know which phone is linked and whether its reminders are up to date, and to keep the service secure. Reminders are scheduled on your phone. The server does not currently send push notifications; the token is kept so your clinic can notify you if this is turned on later. |
| Security records | Sign-in and access logs, including who in the clinic viewed or changed your record | To protect your information and investigate misuse |
We do not use advertising or analytics SDKs, we do not sell personal data, and we do not use your information for marketing.
Who can see it
- Authorised staff at your clinic, according to their role (for example, doctors and nurses). Every access is logged.
- Our service providers, only as needed to run Weightwell: Cloudflare (hosting and database), and Apple if server notifications are turned on in future. Notifications never contain your health details.
- Others only where required by law.
Where it is stored and how it is protected
Clinic-mode data is stored in Cloudflare's infrastructure in the Asia-Pacific region, encrypted in transit and at rest. Clinic staff sign in with two-factor authentication. Records of access cannot be altered. Your data may be processed outside Singapore by our service providers; where it is, we require protection comparable to the PDPA.
How long we keep it
Your records are kept for as long as your clinic needs them for your care and to meet its medical-record obligations. Sign-in sessions and notification tokens that are no longer used are deleted automatically.
Your choices
- Access and correction: you can see your records in the app and correct entries. For anything else, ask your clinic.
- Stop using the app with your clinic: tap Me → Disconnect from doctor. Your clinic keeps the records already shared, as part of your medical record.
- Delete your account: in the app, go to Me → Delete account & data. We sign you out on all devices and send the request to your clinic. Your clinic then handles it in line with its medical-record obligations.
- Notifications: turn them off anytime in iPhone Settings.
Children
Weightwell is intended for adults under the care of a clinic and is not directed at children under 18.
Contact
Questions or requests about your personal data: support@medpath.com. For questions about your treatment, please contact your clinic.
We will post changes to this policy here and update the effective date.
隐私政策
本政策说明 Weightwell App 与诊所后台（统称「Weightwell」）收集哪些信息、为什么收集，以及你有哪些选择。Weightwell 由新加坡的 MedPath（「我们」）运营，按新加坡《个人资料保护法》（PDPA）设计。
两种用法
自己用（不绑定诊所）。不用注册，我们不会要你的姓名、手机号或邮箱。你记录的用药、体重、身体感受和提醒设置只存在你的手机上，不会发给我们；只有当你以后绑定诊所、并选择把之前的记录交给诊所时，才会发送给诊所，随后从手机上删除。删除 App 或点「删除这台手机上的所有记录」即可清除。
绑定诊所。诊所为你建档并给你激活码。绑定后，你在 App 里的记录会同步给诊所，方便医护团队跟进。你的信息用于什么、怎么用，由诊所决定；我们代诊所处理这些信息，以提供这项服务。
绑定诊所后我们收集的信息
| 类型 | 例子 | 用途 |
|---|---|---|
| 建档信息（诊所录入） | 姓名、手机号、出生年份、身高、起始体重、用药前安全核对清单 | 让医护团队认出你、为你建立计划 |
| 治疗计划 | 医生签发的时间表及历史版本 | 告诉你什么时候该做什么 |
| 你记录的内容 | 是否按时用药、注射部位、体重、身体不适和备注、复诊申请 | 让医护团队了解你的情况并及时跟进 |
| 设备与 App | App 生成的设备 ID、推送 token、App 版本、时区、通知权限 | 了解绑定的是哪台手机、提醒是否已按最新计划排好，保障服务安全。提醒由手机本地安排；服务器目前不发送推送，保留 token 是为了以后开启时诊所能通知你 |
| 安全记录 | 登录与访问日志，包括诊所里谁查看或修改过你的记录 | 保护你的信息、调查不当使用 |
我们不使用广告或分析 SDK，不出售个人资料，也不会把你的信息用于营销。
谁能看到
- 你所在诊所的授权职员，按角色（如医生、护士）限定范围；每次查看都有记录。
- 为运行 Weightwell 所必需的服务商：Cloudflare（托管与数据库）；以后如开启服务器推送，还有 Apple。通知内容不含你的健康信息。
- 法律要求时的相关方。
存放在哪里、如何保护
绑定诊所后的数据存放在 Cloudflare 亚太区的基础设施中，传输和存储均加密。诊所职员登录需要两步验证，访问记录不可篡改。我们的服务商可能在新加坡以外处理数据；如有这种情况，我们要求其提供与 PDPA 相当的保护。
保留多久
你的记录在诊所为你提供照护、履行医疗记录义务所需的期间内保留。不再使用的登录会话和推送 token 会自动删除。
你的选择
- 查看与更正：可以在 App 里查看并更正记录；其他需求请联系诊所。
- 不再和诊所一起用：在「我的 → 解除绑定医生」里操作。已经同步给诊所的记录会作为病历由诊所保留。
- 注销账号：在 App「我的 → 注销账号与删除数据」提交。我们会让你在所有设备上退出，并把请求交给诊所，由诊所按医疗记录规定处理。
- 通知：随时可以在 iPhone「设置」里关闭。
未成年人
Weightwell 面向在诊所接受治疗的成年人，不面向 18 岁以下人士。
联系我们
关于个人资料的问题或请求：support@medpath.com。治疗相关问题请联系你的诊所。
本政策如有变更，会在此页更新并修改生效日期。