Privacy policy

Wholeday™ · Last updated 2 November 2026 · Version 2026-11

The short version. Your data is yours. We only collect what the app needs to work, we never sell it, we don't show ads, and we don't use your data to train AI. You can download or delete everything at any time.

1. Who we are

Wholeday ("we", "us") is run by Benjamin Mitford, a sole trader trading as Wholeday, United Kingdom. Correspondence address: c/o Virtually There, Collingwood Street, Newcastle upon Tyne. Email: hello@wholeday.co.uk. We are the controller of your personal data for the purposes of the UK GDPR and the Data Protection Act 2018.

2. What we collect

What	Examples	Why
Account details	Email address, password (stored hashed by our database provider), display name	To create your account, sign you in and send account emails such as verification and password resets
Things you add	Calendar events, to-dos, meals, recipes, shopping, money and budgets, savings goals, trips, books, goals, pets, journal	To provide the app
Health and wellbeing data	Food and calories, weight, workouts, steps and energy from Apple Health (if you connect it), sleep, habits, menstrual cycle (if you turn it on)	To provide the wellness features you choose to use
Settings	Look and feel, the sections you switch on, diet and allergies, your answers to the welcome questions	To tailor the app to you
Shared spaces	Your display name and the items you choose to share with a household, trainer, partner or trip group	So the people you choose can see them
AI requests (optional)	The meal photo, sentence or summary of entries needed for that one request, plus a count of how many AI requests you make	To provide AI features and enforce fair-use limits
Waiting list	Your email address and how you found us (e.g. TikTok)	To email you when Wholeday launches. We delete the list once launch emails are sent, or sooner if you ask. You can unsubscribe at any time.
Technical	Basic logs kept by our hosting providers (e.g. IP address, time of request)	Security and keeping the service running

We don't use advertising trackers or analytics cookies. The app stores a small amount of information on your device (for example your login session and, in demo mode, your data) so it can work.

3. Our lawful bases

Contract – to provide the app you've signed up for.
Explicit consent – for health, wellbeing and cycle data (special category data). You give this by choosing to enter it, and you can withdraw it at any time by deleting it or turning the feature off.
Consent – for optional AI features and for connecting Apple Health. You'll be asked before your first use and can withdraw it in Settings.
Legitimate interests – to keep the service secure, prevent abuse (such as AI over-use) and fix problems.
Legal obligation – where the law requires us to keep or share information.

4. Who can see your data

Only you, unless you share it. Sharing is always your choice:

Shared home: items you mark as shared are visible to members of your home. Your journal is never shared.
Trainer: if you join a trainer, they can see your workouts, food diary, weigh-ins and steps – nothing else. You can leave at any time.
Partner cycle: if you share your cycle code, the people who join see your period start dates and the phase and tips worked out from them – not your symptoms or notes.
Trip groups: everyone in the group can see and edit that trip, including who has paid what.

5. Service providers we use

We use trusted providers (processors) who act only on our instructions:

Provider	What for
Supabase	Database, sign-in and server functions that store and run the app
Resend	Sending account emails (verification, password reset) from wholeday.co.uk
Anthropic (Claude)	Optional AI features. Only the data needed for each request is sent. Under Anthropic's commercial terms it is not used to train their models.
Apple	App distribution, and Apple Health/Shortcuts if you connect them
Codemagic	Building the iPhone app (no user data)

When you search for foods, books or weather, your device contacts Open Food Facts, Google Books, Open Library or Open-Meteo directly with just your search words or town. When subscriptions launch we'll use Apple's in-app purchase system (and may use RevenueCat to manage it); we never see your card details.

6. International transfers

Some providers (for example Anthropic and Resend) process data in the United States. Where data leaves the UK we rely on safeguards approved under UK law, such as the UK International Data Transfer Addendum or the UK–US data bridge.

7. How long we keep it

We keep your data while you have an account. If you delete your account, we delete your data within 30 days (backups roll off within a further 30 days). AI usage counts are kept for up to 12 months to enforce limits and manage costs. If you don't use your account for 2 years we may email you and then delete it.

8. Your rights

You can: access your data, correct it, delete it, download it (Settings → Backup), object to or restrict how we use it, and withdraw consent at any time. To use any of these rights, or to delete your account, email hello@wholeday.co.uk. We'll reply within one month. If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.

9. Age

Wholeday is for people aged 16 and over.

10. Security

Data is sent over encrypted connections and protected by row-level security, so each account can only read its own data and what's been shared with it. Your journal can be locked with a PIN. No system is perfect – if something goes wrong we'll tell you and the ICO where the law requires.

11. Changes

If we make important changes we'll tell you in the app and ask you to agree again.