Privacy Notice

Who we are

Wellnessivity, LLC (“Wellnessivity,” “we,” “us,” or “our”) provides an employer-sponsored educational wellness service. Our mailing address is 1363 E 100 S 196, Payson, UT 84651. Privacy questions and requests may be sent to privacy@wellnessivity.com.

The employee experience is anonymous

Employees do not create Wellnessivity profiles, passwords, seats, health records, reading histories, search histories, or Pathway progress records. Employees enter through an employer- and campaign-specific link, QR code, or workplace code and receive an anonymous browser session. Wellnessivity does not provide employers, brokerages, or referral partners with individual employee activity.

We maintain only privacy-bounded operational information needed to validate the current employer campaign and entitlement. Global content and invitation counters are aggregated without an employee, employer, email, account, IP address, device, or persistent session identifier attached to the activity.

Information we collect

Organization and business contacts

For employer, brokerage, referral-partner, and Wellnessivity staff accounts, we may collect names, work email addresses, organization and role information, authentication records, invitations, support communications, and audited administrative actions.

Special Access

Specifically authorized Special Access users have personal passwordless accounts, separate from employer-sponsored employees. We retain their name, email, access status, and limited authentication information. Administrators can review successful sign-ins and estimated device/session counts using keyed identifiers and coarse browser/device labels for a rolling 90-day window. These records contain no reading, search, Pathway, or wellness history and no raw IP addresses.

Enrollment and billing

We collect employer and benefits-contact information needed to create and administer a subscription. Direct enrollment also records the original acquisition-source response and completion date as immutable origination evidence; it does not automatically assign broker or referral attribution. Stripe collects and processes payment-method, billing, transaction, fraud-prevention, and related information through Stripe-hosted services. Wellnessivity does not receive or store full payment-card or bank-account credentials.

Technical and security information

We and our service providers may process limited request, device, browser, IP-address, cookie, authentication, and error information needed to operate, secure, diagnose, and prevent abuse of the service. Workplace-code attempts use short-lived rate-limiting records. We do not use advertising pixels or cross-site behavioral advertising technologies.

Information you choose to send

We receive information included in support, privacy, security, or other communications. Do not send employee rosters, diagnoses, treatment information, medical records, or other protected health information.

How we use information

• Provide, authenticate, secure, and support organization accounts and anonymous employee access.
• Process enrollment, billing, subscription entitlement, invoices, and commission records.
• Deliver account, security, billing, support, and service-operation communications.
• Prepare anonymous aggregate service metrics and improve reliability and content presentation.
• Detect abuse, investigate incidents, enforce agreements, and comply with law.

If Wellnessivity later introduces promotional email, those messages will use the notices and unsubscribe controls required by applicable law.

External research searches

When an employee chooses a search link for MD Anderson, Johns Hopkins Medicine, Mayo Clinic, the National Library of Medicine (NLM/NIH), and Cedars-Sinai in the Wellness Library, the selected site receives the employee’s search terms. Wellnessivity does not add employer, campaign, employee-session, or local-result information to that link. The external site handles the visit under its own privacy practices.

When we disclose information

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information as reasonably necessary to:

• Service providers that currently include Supabase for authentication, database, and storage services; Vercel for application hosting; Stripe for billing and payment services; and Resend for transactional email delivery.
• Financial institutions, payment networks, fraud-prevention providers, and tax or compliance participants involved in a Stripe transaction.
• Authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce our agreements.
• A successor or prospective successor in a merger, financing, reorganization, acquisition, or sale, subject to appropriate confidentiality and notice requirements.

Providers may change as the service evolves. We will update this notice when a material change affects our privacy practices.

Cookies and similar technology

We use essential technologies for organization authentication, anonymous employee access, security, preferences necessary to operate a requested experience, and Stripe-hosted payment functions. We do not use advertising cookies or third-party marketing analytics at launch.

If you choose Remember my place on this browser in a Pathway, one last Pathway and chapter bookmark is saved in that browser’s local storage. The bookmark is not sent to Wellnessivity, your employer, or analytics and does not follow you to another browser or device. It expires 30 days after the last saved chapter selection and is removed when next checked. Use Forget my place, leave the browser session, or clear site data to remove it sooner. Other people using the same browser profile may see your saved place. Search history is not saved.

Retention

We retain organization, billing, security, support, and audit information only as long as reasonably necessary to provide the service, meet legal and accounting obligations, resolve disputes, enforce agreements, and prevent fraud. Retention varies with the record’s purpose and sensitivity. Anonymous session and rate-limit records are designed to be time-limited.

Your choices and requests

Any person may contact privacy@wellnessivity.com with a privacy question. U.S. organization account holders may reasonably request access to, correction of, or deletion of their personal information, subject to identity verification and applicable billing, security, audit, fraud-prevention, and legal-retention exceptions.

Because Wellnessivity generally does not maintain identifiable employee activity, we ordinarily cannot retrieve or delete an anonymous employee’s reading, search, or wellness history. An employee may still contact us about information voluntarily provided in a support or privacy message.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we process. No internet service can guarantee perfect security. We will provide notifications of a qualifying data breach when required by applicable law. Security concerns may be reported to security@wellnessivity.com.

Children

Wellnessivity is designed for employees and workplace benefit users. It is not directed to children under 13, and Wellnessivity does not knowingly collect personal information from children under 13. The employee experience does not impose an age restriction on working minors aged 13 through 17.

United States service

Wellnessivity is currently offered to users and subscribing organizations in the United States.

Changes and contact

We normally provide 30 days’ advance notice of material changes to this notice. We may make immediate changes when reasonably required for security, fraud prevention, or law. Questions may be sent to privacy@wellnessivity.com or mailed to Wellnessivity, LLC, 1363 E 100 S 196, Payson, UT 84651.