Collect what the service needs, keep health assumptions out of listening activity, do not sell personal information, and give members practical access and deletion controls.
1. Who is responsible
My Wealth 2 Health is responsible for personal information processed through the website, apps, membership, support, and rewards program. Contact our Information Officer or privacy team at privacy@mywealth2health.com.
2. Information we collect
- Account identity: provider identifier, name, email or Apple relay email, avatar where supplied, sign-in timestamps, and account status.
- Membership and transaction records: plan, trial and entitlement dates, payment-provider customer/reference identifiers, payment status, refunds, chargebacks, and limited billing metadata. We do not store full card details.
- Listening preferences: favorites, session identifiers, timestamps, duration, and custom audio settings you choose to save.
- Device and security data: IP address, browser/app version, device type, language, approximate region, logs, cookies, session identifiers, and fraud/security signals.
- Support and legal records: messages, requests, consent records, complaints, and account deletion/export activity.
- Rewards information: application status, referral code, attribution, qualifying transactions, reward ledger, payout and tax/identity details where required.
The service is designed without diagnosis fields or disease protocols. Listening history is a convenience record, not a medical record. Please do not send us medical records or sensitive health details through support or rewards tools.
3. How we use information
We process information to create and secure accounts; authenticate sign-ins; provide audio features; manage trials, payments, access and refunds; sync favorites/history; operate rewards; prevent fraud and misuse; provide support; send service notices; comply with law; keep records; measure reliability; and improve the service using aggregated or appropriately protected information.
4. Legal grounds
Depending on location and context, processing is based on performance of our contract, consent, compliance with legal obligations, and legitimate interests such as account security, fraud prevention, service operation, and improvement. You may withdraw consent where consent is the basis, without affecting earlier lawful processing.
5. Cookies and local storage
We use essential cookies or device storage for authentication, security, preferences, PWA operation, and checkout continuity. Non-essential analytics or marketing technologies, if introduced, will be subject to appropriate notice and consent controls.
6. Sharing and service providers
We disclose only what is needed to vetted providers supporting identity, payment processing, hosting, security, email, support, app distribution, accounting, and professional advice. Google, Apple, payment providers, and app stores process information under their own privacy terms. We may disclose information where lawfully required or to protect rights, safety, and service integrity.
We do not sell personal information and do not use health information or listening choices for targeted advertising.
7. Cross-border processing
Some providers or infrastructure may process information outside South Africa or your country. We use contractual and organisational safeguards and assess transfers as required by applicable data-protection law.
8. Retention
We keep account data while the account is active; listening history according to available account controls and operational needs; transaction, tax, fraud, affiliate, consent, and legal records for applicable statutory or dispute periods; and security logs for limited risk-based periods. We delete or de-identify information when no longer reasonably needed, subject to lawful retention.
9. Security
We use layered technical and organisational measures appropriate to the information and risks, including encrypted transport, access controls, server-side token verification, secure credential handling, audit logs, backups, and incident response. No system can guarantee absolute security.
10. Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, information about recipients, withdrawal of consent, or a review of certain automated decisions. You may manage membership and request account deletion from the account page. We may verify identity before acting.
South African users may complain to the Information Regulator. We encourage you to contact us first so we can address the issue.
11. Marketing
Service and security notices are not marketing. Electronic direct marketing is sent only where permitted, with required consent and a working opt-out. Affiliate partners may not add contacts to our systems or send unsolicited messages on our behalf.
12. Children
The service is intended for adults aged 18 and older. We do not knowingly create accounts for children. Contact us if you believe a child’s information has been provided.
13. Account deletion
An in-account deletion request begins identity verification, access closure, and deletion or de-identification of associated information, except records we must or may lawfully retain. Store subscriptions may need to be cancelled separately with Apple or Google.
14. Changes and contact
We will update the effective date and provide additional notice for material changes where required. Privacy and rights requests: privacy@mywealth2health.com.