Legal

Privacy Policy

Last updated: 13 July 2026 · Effective: 13 July 2026

This Privacy Policy explains what personal data we collect through the Wick mobile application and the wick.health website (together, the “Service”), how we use it, who we share it with, and the choices and rights you have. Please read it alongside our Terms of Service.

1. Who we are

Wick is owned and operated by NerdyDuck Labs Pvt Ltd (“NerdyDuck Labs”, “Wick”, “we”, “us”, “our”), a company incorporated in India and based in Bengaluru, Karnataka. For the purposes of applicable data-protection law, NerdyDuck Labs is the data controller (or, under India's Digital Personal Data Protection Act, 2023, the “Data Fiduciary”) responsible for your personal data.

Registered office: Nerdyduck Labs, Bengaluru, India. CIN: U62099KA2026OPC219036.

2. The data we collect

Information you give us

• Account details — such as your name, email address and authentication identifiers when you create an account or sign in.
• Profile and preferences — optional details such as your fasting goal, schedule, time zone, units and reminder settings.
• Fasting activity — the fasts you start, pause, edit and end, along with notes you choose to add.
• Support messages — anything you send us when you contact support or give feedback.

Health and fitness data

To show you your stage, streaks and Wellbeing score, Wick may process health-related information including fasting times, sleep, physical activity and movement, and — where you choose to enter it — measurements such as weight. We treat all of this as sensitive personal data and protect it accordingly.

Information collected automatically

• Device and app information — device model, operating-system version, app version, language and similar technical details.
• Usage and diagnostics — how the app is used and crash or error reports, so we can keep Wick stable and improve it. Where required, we ask for your consent before collecting analytics.

3. Apple Health & Google Health Connect

If you connect Apple Health (HealthKit) or Google Health Connect, or pair a wearable, Wick reads only the data categories you explicitly authorise — for example sleep, steps and activity — and reads them on your device to power features like your stage, streaks and Wellbeing score.

• The raw samples stay on your device. Detailed readings such as heart-rate variability, resting heart rate and per-stage sleep are processed locally and are never uploaded to our servers.
• Only a coarse daily summary is synced. To keep your Wellbeing score and coach working across sessions and devices, Wick sends a small per-day summary — sleep minutes, steps, active energy and exercise minutes — and any weigh-ins you log. Nothing more granular leaves your phone.
• We never use health data obtained through Apple Health or Google Health Connect for advertising or marketing, and we never sell it or share it with data brokers.
• We do not use this data for any purpose other than the health, fitness and wellbeing features you've asked for, except where you give separate, explicit consent.
• You can revoke Wick's access at any time in your device's Health or Health Connect settings, and you can disconnect a wearable from within the app.

4. How we use your data

• To provide the core Service — running your timer, naming your stage, building your history, streaks and Wellbeing score.
• To personalise insights and reminders from your own data.
• To operate, maintain, secure and improve the app, and to fix bugs.
• To provide customer support.
• To send you service messages (and, only with your consent, optional product updates you can unsubscribe from at any time).
• To comply with our legal obligations and to detect, prevent and address fraud or misuse.

5. Our legal grounds

Where India's Digital Personal Data Protection Act, 2023 applies, we process your personal data on the basis of your consent or, where permitted, for “certain legitimate uses” recognised by the Act. Where the EU/UK GDPR applies, we rely on: your consent (for analytics and optional communications and, for special-category health data, your explicit consent); performance of a contract (to deliver the Service you sign up for); our legitimate interests (to secure and improve the Service, balanced against your rights); and compliance with legal obligations. You may withdraw consent at any time without affecting processing already carried out.

6. How we share data

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

We share data only with:

• Service providers (processors) who help us run Wick under contract — for example cloud hosting and storage, crash reporting and analytics, and email delivery. They may process data only on our instructions. We use providers such as Amazon Web Services (cloud hosting and storage) and PostHog (product analytics).
• Authorities or third parties where we are legally required to, or to protect the rights, safety and security of our users, the public or Wick.
• A successor entity in connection with a merger, acquisition or sale of assets, in which case we will notify you and this policy will continue to apply to your data.

7. Where your data is processed

Wick is operated from India, and our service providers may process and store data in India and other countries. Where we transfer personal data across borders — including out of the EEA/UK — we put appropriate safeguards in place, such as standard contractual clauses, and we transfer data only in line with applicable law.

8. How long we keep it

We keep your personal data for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain information to meet legal, accounting, security or dispute-resolution obligations.

9. Security

We use technical and organisational measures designed to protect your data, including encryption in transit, access controls and the principle of least privilege. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we work to protect your information and to notify you and the relevant authorities of a breach where the law requires.

10. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and obtain a copy.
• Correct inaccurate or incomplete data.
• Delete your data (“right to erasure”), which you can also do by deleting your account in-app.
• Withdraw consent at any time, and object to or restrict certain processing.
• Port your data — export it in a usable format.
• Nominate another person to exercise your rights in the event of death or incapacity (under India's DPDP Act).
• Not be discriminated against for exercising your rights, and, for California residents, to opt out of any “sale” or “sharing” — which Wick does not do.

To exercise any right, email us at privacy@wick.health. We may need to verify your identity. You also have the right to complain to your data-protection authority — in India, the Data Protection Board, once operational.

11. Children

Wick is not directed to children. You must be at least 18 years old to create an account, and intermittent fasting is not appropriate for children or adolescents. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it. Where the DPDP Act's provisions on children apply, we will process a child's data only with verifiable parental consent and in line with the Act.

12. Third-party links

The Service may link to third-party sites or services (such as the app stores). We are not responsible for their privacy practices, and we encourage you to read their policies.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

Questions, requests or complaints about privacy can be sent to:

NerdyDuck Labs Pvt Ltd
Bengaluru, Karnataka, India
Email: privacy@wick.health