WellEarn Privacy Policy
Last Updated: October 30, 2026
This Privacy Policy explains how Onelabel AI Ltd (“OneLabel”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you use WellEarn: our website (wellearn.io), our quiz and checkout pages (quiz.wellearn.io and quiz.wellearn.ai), the WellEarn web dashboard (dashboard.wellearn.io), the WellEarn apps for iOS and Android, and our emails and support (together, the “Service”). We wrote one policy for everyone. Because we are established in the European Union, we apply the EU General Data Protection Regulation (GDPR) to the personal data of all our users; Section 10 adds what applies in the EEA and the UK, and Section 11 adds what applies to residents of the United States. Words such as “Service” have the meanings given in our Terms of Use (https://wellearn.io/legal/terms).
In Short
Who we are: Onelabel AI Ltd, a company in Cyprus, owns and provides WellEarn and decides how your personal data is used (we are the “controller”). Payments are charged by our affiliate OneLabel, Inc., in the United States, which also processes payment data for us.
What we collect: your quiz answers, email address and name; your account, learning progress and settings; what you write or upload in the AI chat and in practice tasks; payment details, which go to our payment processor, Stripe (we never see your full card number); information about your device and how you use our website, the quiz and the dashboard; and information about the ad or link that brought you to us.
Why we use it: to provide WellEarn and your learning plan, take payments, answer support requests, keep the Service secure, understand and improve it, and measure our advertising.
AI features: what you write in the AI chat is sent to the AI provider whose model answers it — OpenAI, Google or Anthropic. We do not use your chats to train AI models.
Analytics and advertising: our website, wellearn.io, uses Google Analytics to count visits, with its advertising features turned off. Our quiz uses Google Analytics, Amplitude and the Meta Pixel; the dashboard uses Google Analytics and Amplitude. Under some U.S. state laws, our use of Meta for advertising may count as “sharing” personal information, and you can opt out (Section 11).
Your rights: you can ask us for a copy of your data, to correct or delete it, to stop certain uses, and to stop marketing emails. Email support@wellearn.io.
Where your data goes: our servers are in the United States, and some providers process data in other countries (Section 7).
1. Who We Are and How to Contact Us
The controller of your personal data is Onelabel AI Ltd, a company incorporated in the Republic of Cyprus (registration number HE 481834), with its registered office at 75 Prodromou, Oneworld Parkview House, Floor 4, 2063 Nicosia, Cyprus. You can reach us about privacy at support@wellearn.io; please put “Privacy Request” in the subject line so that your email reaches the right person.
Payments: Onelabel AI Ltd owns and provides WellEarn. Its affiliate OneLabel, Inc., a Delaware corporation in the United States, charges the payments for WellEarn as the merchant of record and handles refunds and payment disputes for the payments it charges. OneLabel, Inc. also processes payment data on our behalf: through our payment processor, Stripe, it receives the payment and billing information it needs to charge payments and to handle refunds and payment disputes.
2. What We Collect and Where It Comes From
2.1 Information You Give Us.
Quiz Answers: the answers you give in our quiz before you buy — for example, your gender, your age range, the kind of work you do and your field, your goals (including income goals) and your experience with AI. We use them to build your personal plan.
Account Data: your email address, the name you give us, and your password, which we store only as a secure hash. If you correct your email address after buying, we keep the earlier address too, so that we can link your purchase to your account.
Marketing Choice: whether you agreed to receive marketing emails, which our quiz asks, and when you changed this choice.
Learning Data: your learning goal, the lessons and courses you open and finish, your answers to practice tasks, your streaks, and the certificates you earn, including the name you choose to show on them.
AI Chat Content: the messages you write in the AI chat, the images you attach or create there, the model you choose, and the AI’s replies (see Section 4).
Payment Information: your card or wallet details go directly to our payment processor, Stripe; we never receive your full card number. From Stripe we receive what we need to manage your subscription, such as the plan, the amounts and dates of payments, the card brand and its last four digits, the billing country and postal code and, if you pay with a digital wallet such as Apple Pay, the name, phone number and address that the wallet shares.
Support and Feedback: what you write when you contact support or send feedback in the app, and our replies.
Sensitive Information: we do not ask for special categories of data (such as health, racial or ethnic origin, religious beliefs or sexual orientation). Please do not include them in chats, practice tasks or support requests. If you do, we handle them under this Policy.
2.2 Information We Collect Automatically.
Device and Connection Data: your IP address, browser and device type, operating system, language, time zone, and the date and time of each request. The quiz uses your time zone and IP address to estimate your country, for tax and fraud checks and for ad measurement: your browser asks a network service for the country of your IP address, and at checkout our server may ask an IP-location service if that fails.
Usage Data: on our website, the pages you visit; on the quiz, the screens you see and the answers you choose (we may also record some visits to the quiz pages, meaning what is shown on the screen and how you tap, click and scroll, to see where the quiz is hard to use; the card payment form is excluded); in the dashboard and the apps, the features and lessons you use and when (see Section 5).
Advertising Data: if you arrive from an ad or a link, we collect the ad and campaign details in the link (such as fbclid and utm tags and ad, ad set and campaign IDs) and the values of the Meta cookies _fbp and _fbc.
Cookies: our Cookie Policy (https://wellearn.io/legal/cookies) lists the cookies we use and describes the similar technologies.
2.3 Information From Others.
From Stripe, the payment information described in Section 2.1. From advertising platforms, reports about how our ads perform.
3. Why We Use Your Data and Our Legal Bases
The table shows what we use your personal data for, which data we use, and our legal basis under the GDPR. Where we rely on our legitimate interests, you can object (Section 9).
| Purpose | Data we use | Legal basis (GDPR) |
|---|---|---|
| Build your plan from your quiz answers and show you your offer | Quiz answers, email address | Steps you ask us to take before entering into a contract (Article 6(1)(b)) |
| Create your account, give you access to lessons, certificates and the AI chat, and save your progress | Account, learning and AI chat data | Performance of our contract with you (Article 6(1)(b)) |
| Take payments and manage your subscription, refunds and payment disputes | Payment information, account data, and chat history where it matters for a dispute | Contract (Article 6(1)(b)); our legitimate interests in handling disputes and preventing payment fraud (Article 6(1)(f)) |
| Send account emails, such as your password link, email verification and security notices | Email address, name | Contract (Article 6(1)(b)) |
| Send marketing emails | Email address, name, marketing choice | Your consent (Article 6(1)(a)), which you can withdraw at any time |
| Answer your support requests and feedback | Support and feedback content, account data | Contract (Article 6(1)(b)); our legitimate interest in helping our users (Article 6(1)(f)) |
| Understand how our website, the quiz, the dashboard and the apps are used and improve them, including tests of different versions of the quiz | Usage data, device and connection data | Our legitimate interest in understanding and improving the Service (Article 6(1)(f)) |
| Measure and improve our advertising | Advertising data; country, IP address and browser; email address, name, gender and payment postal code, sent to Meta in hashed form | Our legitimate interest in measuring our advertising (Article 6(1)(f)) |
| Keep the Service secure, prevent fraud and abuse, and fix errors | Device and connection data, account data, error reports | Legitimate interests (Article 6(1)(f)) |
| Keep records required by law, such as tax and accounting records | Payment records, account data | Legal obligation (Article 6(1)(c)) |
| Establish, exercise or defend legal claims | The data relevant to the claim, which can include chat history | Legitimate interests (Article 6(1)(f)) |
| Publish the verification page of a certificate you earn | Name on the certificate, course, date | Contract (Article 6(1)(b)) |
Providing Data: you need to give us your email address and payment details to buy a subscription, and your email address and a password to use your account; without them we cannot provide the Service. Your other quiz answers help us personalize your plan.
Automated Decisions: we do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. The AI features produce suggestions and feedback only.
4. AI Features and Our AI Providers
When you use the AI chat, our servers send your message, any image you attach, and the earlier messages of the same chat to the provider of the model you chose: OpenAI (ChatGPT), Google (Gemini) or Anthropic (Claude). When you ask the chat to create an image, your request is sent to OpenAI. When a lesson’s practice task gives you AI feedback, your answer is sent to OpenAI. We do not send your name, email address or password to the AI providers, unless you type them into a message yourself.
The AI providers receive this data to return the answer to us, under their API terms and data processing terms, which set what each of them may do with it, including how long it keeps the data, for example to detect misuse.
Training: we do not use your chats or practice answers to train or fine-tune AI models. If we ever want to, we will update this Policy first and, where the law requires it, ask for your consent.
Chat History: we keep your chats and the AI’s replies with your account so that you can return to them. When you delete a chat in the app, it disappears from your list, but we keep a copy as a record for support, billing and payment disputes until your account is deleted. When your account is deleted, we delete your chats too, unless we need a particular conversation to handle an open dispute or legal claim.
Images in Chats: images you attach to a chat or create there are stored on our servers. To show them in the app, each image has its own long, random web address. We do not publish these addresses, but anyone who has one can open the image.
AI Results: AI replies and feedback are generated automatically and can be wrong. They are suggestions for your learning, not decisions about you.
5. Analytics and Advertising
Our Website: wellearn.io uses Google Analytics on every page, for every visitor, without asking for consent; it uses no advertising tools. Google Analytics sets the cookies _ga and _ga_<ID>, and our hosting provider’s network sets one strictly necessary security cookie (see our Cookie Policy). The quiz and the dashboard use the same _ga cookie, and the dashboard uses the same Google Analytics property as our website.
Google Analytics 4 (Google LLC), on our website: which pages you visit, your device and browser, your approximate location (country and city, worked out from your IP address) and pseudonymous identifiers stored in cookies. We use it to count visits and see which pages people use. Its advertising features (Google signals, ad personalization) are turned off. Google keeps this data for no longer than 14 months.
The Quiz: our quiz and checkout pages use Google Analytics, to measure visits and purchases; Amplitude, to understand how the quiz is used and to test different versions of it; and the Meta Pixel and Meta’s Conversions API, to measure which of our ads on Facebook and Instagram bring visits and purchases and to improve how our ads are delivered. The quiz loads these tools when its first page opens, for every visitor, and does not ask for consent.
What Meta Receives: the quiz pages you open and the steps you reach, your purchase and its value, Meta’s cookies and click ID, your IP address and browser, and, in hashed (scrambled) form, your email address, name, gender, country, a random ID we give your browser and, for purchases, the phone number, city, state and postal code of your payment method. Some of these events are sent from our servers (Conversions API) as well as from your browser. Meta also uses this data under its own terms.
Purchases Through quiz.wellearn.ai: some of our ad campaigns are run by an advertising agency. Visits and purchases that come through quiz.wellearn.ai are measured with a Meta pixel that the agency owns, so the agency, as well as Meta, receives the data described above for those visits.
Campaign Reporting: a marketing analytics service we use receives our Google Analytics purchase events, which include the subscription and customer IDs, the price, and the age range and gender you gave in the quiz.
The Dashboard: the web dashboard uses Google Analytics and Amplitude to understand which features and lessons are used. It loads them when it opens, for every visitor, and does not ask for consent. It does not use the Meta Pixel. Because the quiz and the dashboard use the same Amplitude cookie on wellearn.io addresses, Amplitude can connect your visit to the quiz with your use of the dashboard in the same browser.
The Apps: the WellEarn iOS app uses Google Analytics for Firebase to understand how the app is used and links these events to your account ID. It does not use the data to track you across other companies’ apps or websites. The WellEarn app for Android lets you sign in with your WellEarn account and use the Service with the same account data as the dashboard.
Your Choices: see Section 9 and our Cookie Policy.
6. Who We Share Data With
We do not sell your personal data for money. We share it only as described in this Policy. Service providers act on our instructions under contracts; where a recipient also uses data for its own purposes, we say so.
| Recipient | What they do for us | Data they receive |
|---|---|---|
| OneLabel, Inc. (USA), our affiliate | Charges payments as the merchant of record; handles refunds and payment disputes for its charges; processes payment data on our behalf | Payment and billing information, account email address, purchase details |
| Stripe | Payment processing and fraud prevention | Card or wallet details, email address, name, country, IP address and browser; with each purchase we also store in Stripe the ad and campaign details of your visit and the gender and name from the quiz |
| Our cloud hosting provider (USA) | Hosting of our servers, database and files | The data we store |
| Network and IP-location services | Network and security for our websites; estimating your country from your IP address, for the quiz and at checkout | IP address and connection data |
| Google Analytics (website, quiz and dashboard), Google Analytics for Firebase (iOS app) and the Gemini AI model | Usage, device and connection data; what you send to Gemini | |
| Amplitude | Product analytics and tests of different versions of the quiz | Usage, device and connection data, a random ID |
| Meta Platforms | Measurement and delivery of our ads on Facebook and Instagram | The data described in Section 5; Meta also uses it under its own terms |
| Our advertising agency (purchases through quiz.wellearn.ai) | Runs some of our ad campaigns | The Meta measurement data for those visits (Section 5) |
| A marketing analytics service | Marketing analytics: reports on our ads and revenue | Google Analytics purchase events with subscription and customer IDs, price, age range and gender |
| OpenAI, Google and Anthropic | AI models for the AI chat, images and practice feedback | What you send to the AI features (Section 4) |
| Our email services | Sending our account emails, and the mailbox of our support team | Email address, name and the content of the emails we send you; your emails to support and our replies |
| Our error-monitoring service | Error monitoring | Technical data about errors, which can include your IP address and browser |
| Our team’s messaging service | Notifications to our team | Feedback you send from the app, with your name and email address; notices of payments with country, plan and a payment reference |
Where the table describes a recipient by the kind of service it provides, you can ask us which company it is: email support@wellearn.io with “Privacy Request” in the subject.
We may also share personal data with professional advisers, such as lawyers, accountants and auditors, who are bound by confidentiality; with courts, authorities or other parties when the law requires it or to protect our rights, our users or others; with a buyer or successor if our business is reorganized, merged or sold, under the terms of this Policy; with our current or future affiliates, such as OneLabel, Inc., for the purposes in this Policy; and with others at your direction or with your consent.
7. International Transfers
Onelabel AI Ltd is established in Cyprus, and our servers are hosted by our cloud hosting provider in the United States. Your personal data is therefore transferred to and stored in the United States, and some providers process it in other countries. When we transfer personal data from the EEA, the UK or Switzerland to a country that is not recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (with the UK International Data Transfer Addendum where needed) or approved frameworks where available. You can ask us for more information about these safeguards.
8. How Long We Keep Data
We keep personal data only as long as we need it for the purposes in Section 3 or as the law requires, and then delete or anonymize it.
| Data | How long we keep it |
|---|---|
| Account, learning and quiz data | While your account exists. When you ask us to delete your account, we delete or anonymize this data within 30 days of your request, except the records below that we must or may keep |
| AI chats and chat images | With your account. Chats you delete in the app are kept as records until your account is deleted. When your account is deleted, we delete them too, unless we need a conversation for an open dispute or legal claim; we keep that one until the dispute or claim is closed |
| Payment and billing records (ours and Stripe’s) | As long as tax and accounting laws require (often around 7 years) |
| Ad and campaign data on our servers from before your purchase | 90 days after your last visit to the quiz |
| Ad and campaign data saved with your purchase, in your account and in Stripe | In your account: as long as your account exists. In Stripe: as long as the payment record (see above) |
| Records of whether the Meta Pixel loaded, with IP address, browser and campaign tags | 1 year |
| Support emails and feedback | As long as we need them to answer you and to handle any later question, billing issue or dispute about the same matter |
| Analytics data and error reports | Google Analytics: no longer than 14 months. Amplitude, Google Analytics for Firebase and our error-monitoring service: for the retention period set in our account with each of them |
| Certificates and their verification pages | As long as the certificate exists, so that it can be verified. You can ask us to delete a certificate |
| Information in your browser (cookies and local storage) | As listed in our Cookie Policy, or until you clear it |
| Backups | Data we delete can stay in our backups until those backups are replaced. If we ever restore a backup, we delete such data again |
9. Your Rights and Choices
Wherever you live, you can ask us to: give you a copy of your personal data (access) and the data you gave us in a machine-readable format (portability); correct inaccurate data; delete your data; restrict our use of it; object to our use of it based on legitimate interests, including for advertising, and to direct marketing at any time; and withdraw any consent you gave, without affecting what we did before you withdrew it.
How to Ask: email support@wellearn.io from the email address of your account, with “Privacy Request” in the subject. We may ask for information to confirm your identity. We respond within the time the law requires, generally within 30 days, with the possibility of extension as the law allows. Requests are free unless they are clearly unfounded or excessive. Where the law allows, you may use an authorized agent; we may ask for proof of the authorization.
Deleting Your Account: email support@wellearn.io from the email address of your account and ask us to delete it. We delete your account within 30 days of your request, as Section 8 describes. Deleting your account does not cancel your subscription; ask us to do both in one email.
Marketing Emails: use the unsubscribe link in any marketing email or the email settings in your dashboard.
Cookies and Advertising: see our Cookie Policy (https://wellearn.io/legal/cookies). You can control how Meta uses information from other websites to show you ads at https://www.facebook.com/adpreferences, and you can stop Google Analytics in your browser with Google’s add-on at https://tools.google.com/dlpage/gaoptout.
Do Not Track: we do not respond to browser “Do Not Track” signals.
Other Countries: if you live in Brazil, Canada or another country with its own privacy law, you have the rights your local law gives you, and you can use them as described in this Section.
10. If You Are in the EEA or the UK
The GDPR and the UK GDPR give you the rights described in Section 9. Section 3 lists our legal bases, and Section 7 explains international transfers.
Complaints: you can complain to a data protection supervisory authority, in particular in the country where you live or work or where you think the law was broken. In Cyprus, where we are established, it is the Commissioner for Personal Data Protection; in the UK, it is the Information Commissioner’s Office (ICO). We would appreciate the chance to deal with your concern first.
11. If You Are in the United States
This section applies to residents of U.S. states with consumer privacy laws, including California (the CCPA, as amended by the CPRA). Together with Sections 2 to 8, it is our notice at collection: it describes the categories of personal information we collect, why we collect them, and how you can use your rights.
| Category | Examples | Sources | Why we use it | Disclosed to | Sold or shared |
|---|---|---|---|---|---|
| Identifiers | Name, email address, IP address, cookie and device IDs, account ID | You; your device; Stripe | Providing the Service, payments, security, analytics, advertising | Service providers; Meta and our advertising agency | Shared, for advertising |
| Customer records | Billing country and postal code, card brand and last four digits, wallet phone number and address | Stripe | Payments, fraud prevention, advertising measurement (in hashed form) | OneLabel, Inc., Stripe; Meta (hashed) | Shared, for advertising |
| Characteristics | Age range, gender | You, in the quiz | Your plan, analytics, advertising measurement | Service providers, including a marketing analytics service; Meta (gender, hashed) | Gender shared, for advertising |
| Commercial information | Plans bought, payments, refunds | You; Stripe | Providing the Service, billing, reporting, advertising measurement | OneLabel, Inc., Stripe, service providers; Meta (purchase events) | Shared, for advertising |
| Internet or network activity | Quiz steps and answers, pages viewed, features used | Your device | Analytics, improving the Service, security, advertising measurement | Service providers; Meta (quiz steps and page addresses) | Shared, for advertising (quiz only) |
| Approximate location | Country, region or city estimated from your IP address and payment method | Your device; Stripe | Tax and fraud checks, advertising measurement | Service providers; Meta | Shared, for advertising |
| Audio, electronic or visual information | Images you attach or create in the AI chat | You | Providing the AI chat | AI providers, hosting provider | Not sold or shared |
| Professional information | The kind of work you do and your field, from the quiz | You, in the quiz | Your plan | Service providers | Not sold or shared |
| Content of communications | AI chats, practice answers, support emails, feedback | You | Providing the Service and support; handling disputes | AI providers, our email services, our team’s messaging service, hosting provider | Not sold or shared |
| Inferences | Your learning plan and recommendations | The Service | Personalizing the Service | Service providers | Not sold or shared |
| Sensitive personal information | Account log-in: your email address with your password | You | Letting you sign in | Hosting provider | Not sold or shared |
Sale and Sharing: we do not sell personal information for money. When you use our quiz, the Meta Pixel and the Conversions API send information about your visit and purchase to Meta, and for quiz.wellearn.ai also to our advertising agency, to measure and target our advertising. Under the CCPA this may be “sharing” for cross-context behavioral advertising, and under other state laws “targeted advertising” or a “sale”. We do not knowingly sell or share the personal information of consumers under 16; WellEarn is for adults aged 18 and over.
Your Rights: depending on your state, you can ask to know what personal information we collect, use and disclose; to access, correct, delete or get a portable copy of it; to opt out of sharing, sale, targeted advertising and certain profiling; and to limit the use of sensitive personal information, which we use only to provide the Service. We will not discriminate against you for using these rights.
How to Opt Out: email support@wellearn.io with “Do Not Sell or Share” in the subject; you do not need an account.
How to Use Your Rights: email support@wellearn.io with “Privacy Request” in the subject. We verify requests by matching the email address of your account. An authorized agent must show your written permission. If we deny your request, you can appeal by replying to our answer with “Appeal” in the subject, where your state provides that right.
Shine the Light: California residents can ask us about disclosures of personal information to third parties for their own direct marketing purposes; we do not make such disclosures.
Other States: residents of other states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, and others as their laws take effect — have similar rights, which you can use as described above.
12. Children
WellEarn is for adults. You must be at least 18 years old to use it, and we do not knowingly collect personal data from anyone under 18. If we learn that we have, we delete it. If you believe a minor has given us personal data, contact us at support@wellearn.io.
13. Security
We protect personal data with technical and organizational measures, including encryption of data in transit (TLS) and at rest, backups of our data, hashed passwords, sign-in tokens with limited lifetimes, access controls that limit access to the people and providers who need it, and monitoring of our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account is no longer secure, contact us at support@wellearn.io.
14. Data Breaches
If a personal data breach puts your rights at risk, we will notify the competent authorities and, where the law requires it, you, within the time limits set by law, and we will tell you what happened and what you can do.
15. Changes to This Policy
We update this Policy when our practices or the law change, and we change the “Last Updated” date at the top. If a change is material, we will tell you in advance by email or in the Service. Section 16 lists the versions of this Policy.
16. Version History
October 30, 2026: Section 6 describes some of our service providers by the kind of service they provide rather than by name, and says how to ask us which company it is; Section 4 states plainly that we do not use your chats or practice answers to train AI models; Section 13 adds that we encrypt data at rest and keep backups, and Section 8 says how long deleted data can stay in backups; OneLabel, Inc. is named with its state and country only.
October 29, 2026: rewritten for the new WellEarn website. It names the providers we use, adds tables of purposes and legal bases, recipients, retention periods and U.S. categories, explains how our website uses Google Analytics and how the quiz uses analytics and advertising tools, and says that our use of Meta for advertising may count as “sharing” under U.S. state laws. Previous version: August 11, 2026; you can ask us for a copy.
17. Contact Us
Questions or requests about this Policy or your personal data: email support@wellearn.io with “Privacy Request” in the subject, or write to us:
Onelabel AI Ltd, a company incorporated in the Republic of Cyprus (HE 481834), 75 Prodromou, Oneworld Parkview House, Floor 4, 2063 Nicosia, Cyprus.
Payments are charged by OneLabel, Inc., a Delaware corporation, USA.
Email: support@wellearn.io
Questions? Email support@wellearn.io.