We IBD

Privacy Policy · We IBD

Last updated: October 13, 2026 · Effective: October 13, 2026

On this page
  1. 1. Who we are
  2. About this website (not the app)
  3. 2. Your personal & health data (stored on your device)
  4. 3. Data handled by third parties (free version)
  5. 4. How we use information
  6. 5. Legal basis (GDPR)
  7. 6. Sharing
  8. 7. Retention
  9. 8. Your rights (GDPR, EEA/UK/Switzerland)
  10. 9. Children
  11. 10. Security
  12. 11. Medical disclaimer
  13. 12. Changes
In short. We IBD needs no account and no login. Your health and symptom data stays on your device, in an encrypted store: there is no backend, no telemetry and no data collection on our side. Nothing about your health is ever sent to us.

1. Who we are

We IBD is operated by wewe (Werner Masseglia), Rue d'en haut 33, 7830 Silly, Belgium. Contact: contact@we-ibd.com.

About this website (not the app)

The We IBD app itself collects no data: it works 100% on your device, with no analytics, no trackers, and no advertising. On Android, Google components are built in for purchases, label reading and the rating request (see § 3); none of them receives any health data. The section below is only about the website you are currently reading (we-ibd.com), not the app.

This section covers the website (we-ibd.com) only, not the mobile app. The website sets no cookies and uses no analytics, no trackers and no advertising. It loads no third-party fonts or scripts. Like any website, it is served by a hosting provider, Google (Firebase Hosting), which necessarily processes technical connection data (IP address, date and time, page requested, browser type) to deliver the pages and keep them secure. Legal basis: our legitimate interest in providing and securing the website (GDPR Art. 6(1)(f)). Google acts as our processor; this data may be processed outside the European Union, under the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. We do not use this data and derive no statistics from it; it is kept for the hosting provider's retention period. If you write to us at contact@we-ibd.com, your message passes through Cloudflare's email routing service before reaching our mailbox (Gmail, Google); we only use it to reply to you. The website needs no account and collects no other personal data.

2. Your personal & health data (stored on your device)

We IBD is designed around data minimisation. Everything you enter is stored locally on your device, in an encrypted container, and is never sent to us. Depending on what you choose to log, this may include:

  • Symptom & digestive data: stools (frequency, Bristol type, blood, urgency, night-time episodes), abdominal pain, bloating, nausea and other symptoms.
  • Food & meals: what you eat, and the personal food ratings the app derives from your own history.
  • General health context: sleep, fatigue, stress, weight, body temperature, medication intake, flares (start/end, severity, suspected triggers) and lab results you enter (e.g. CRP, faecal calprotectin).
  • Optional profile details: tracking type (e.g. Crohn's, ulcerative colitis, IBS or simple tracking) and any personal notes or photos you choose to keep.
  • Consent records: for each optional purpose, whether you granted or refused it, with a timestamp and the policy version, kept locally so your choices are traceable and revocable.
  • Weekly check-in: your own written and rated answers to a short weekly self-review (a few questions plus one 0–100 scale, nothing pre-filled); reproduced verbatim in your consultation report, never scored and never fed into any indicator.

Because this is health data (a special category under the GDPR) it is treated with particular care: it is processed only on your device, on the basis of your explicit consent, purpose by purpose. You can withdraw any consent, or erase all your data, at any time from within the app.

Apple Health (HealthKit): iOS

If you choose to connect Apple Health, We IBD can read your sleep, weight, fatigue, activity (step count), heart-rate variability, resting heart rate, body temperature and, on iOS 18 and later, your mood (State of Mind, from other apps only) to enrich your own view and your report, and write the digestive symptoms, fatigue and mood you log. Body temperature only feeds the report's “Fever” line and the fever note in your insights; it never enters the indicator. This is opt-in per data type, happens on your device, and Health data is never used for advertising or marketing, nor shared with any third party. You can revoke access anytime in the iOS Health settings.

Health Connect: Android

On Android, We IBD can read only the following data from Health Connect: your sleep, your weight, your activity (step count), your heart-rate variability, your resting heart rate and your body temperature. They feed your tracking indicator, your trend charts and the report you show your doctor; body temperature is used only for the report's “Fever” line and the fever note, never for the indicator.

The app never writes to Health Connect and requests no write permission. It also does not request access to history older than 30 days, because its analysis window is 30 days. This data is never used for advertising or marketing, never shared, and stays in the same local, encrypted storage as everything else. You can revoke access at any time from Health Connect; the app remains fully usable on the data you enter yourself.

Optional iCloud sync: iOS only

If you turn on iCloud sync (off by default), your data is synced between your own Apple devices through your encrypted iCloud account (Apple's CloudKit private database). It never passes through a server operated by us, and we cannot access it. If you leave it off, We IBD stays strictly single-device and 100% local.

The Android version has no synchronisation at all: neither ours nor yours. Your data exists on one device at a time; to move it, export it from the app.

3. Data handled by third parties (free version)

We IBD contains no advertising and no analytics, crash-reporting or ad-network tool, in any version. No health data ever leaves your device. What can leave it, always for a specific feature:

  • iCloud sync (iPhone), optional and off by default, described above.
  • The food-barcode lookup, optional and declined by default: it sends only the scanned barcode number, to identify a product missing from the built-in database.

On Android only, the following Google components are built in:

  • Google Play Billing, which opens the Play Store purchase flow. We pass it nothing but the offer you choose.
  • Google ML Kit (Text Recognition), which reads the ingredient list on a package when you tap “Read the label”. The analysis happens on your device: the label content and the photo never leave it. Google receives technical operating metrics (device model, Android and app version, processing time, error codes), only if you use the label reader; Google offers no setting to switch them off.
  • Google Play In-App Review, which displays Google Play's rating window. The app passes it nothing: no health data, no counter, no identifier. Any rating and comment are entered with Google and published on the app's store listing.

4. How we use information

We do not sell your personal information, and we never use your health data for advertising or marketing.

5. Legal basis (GDPR)

PurposeLegal basis
Core functionality (local journal on your device)Performance of a contract
Processing of health data (symptoms, food, labs, HealthKit)Explicit consent (special-category data, GDPR Art. 9)
Optional iCloud syncConsent
Legal requestsLegal obligation

6. Sharing

We share your data with no one. There is no wewe apps server to share it from: your data stays on your device (and, if you opt in, in your own private iCloud).

7. Retention

On-device data is kept until you delete it in the app or remove the App: deletion is immediate and total, since we hold no copy.

8. Your rights (GDPR, EEA/UK/Switzerland)

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, plus the right to complain to your supervisory authority. As we hold no account-linked personal data on our servers, your data lives on your device: you can view, export (and import it back, e.g. on a new phone), correct or erase it directly in the app. Belgian authority: Autorité de protection des données.

9. Children

No personal information is required to use the App. We do not knowingly collect data from children under 13 (16 in the EEA) without verifiable parental consent.

10. Security

Your data is stored in an encrypted container with iOS file protection, and can be locked behind Face ID / Touch ID. Content stays on your device; any transfer to Apple (e.g. for the optional iCloud sync) uses encryption in transit and Apple's own lawful transfer mechanisms.

On Android, your data lives in the app's private internal storage, which the system keeps under file-based encryption (credential-encrypted, decrypted only after you first unlock the device). Automatic backup is disabled, so your health data never leaves in a Google Drive backup. An optional biometric lock can protect the app itself.

11. Medical disclaimer

We IBD is a personal self-tracking journal. It is not a medical device, does not provide a diagnosis, and does not replace professional medical advice. Always consult your doctor.

12. Changes

We may update this Policy and will post a notice in the App and update the date above.

← We IBD · Terms of Service

Start your journal today

Free download on iPhone and Android. No account, and everything stays on your phone.