Data Use & Retention Policy
Last updated: [DATE] · Version [LEGAL_VERSION]
This policy describes how we use data received from connected services such as Garmin Connect (via the Garmin Connect Developer Program's Health and Activity APIs), and the commitments we make to users and to those services.
What we request
Only the data needed for the features you see:
| Data type | Used for |
|---|---|
| Daily summaries (resting HR, steps, intensity minutes, stress / energy) | recovery trends, active days |
| Sleep summaries (duration, score) | sleep trends |
| HRV summaries | recovery trends |
| User metrics (VO2max) | VO2max history and fitness tier |
| Activity summaries (type, start, duration, distance, heart rate, zones) | training load and session analysis |
We do not request data we do not display or use.
How we use it
- Only to provide the Service to the user it belongs to (dashboards, insights, MCP answers the user requests).
- Aggregated, de-identified statistics only to improve the Service (no individual data leaves us).
- Never sold, rented, or shared with data brokers or advertisers; never used for advertising, credit, insurance, employment or any eligibility decision.
- No combination with data from other sources to identify users beyond what they gave us.
User control
- Users connect each service explicitly and can disconnect at any time in Settings, or in the provider's own app (e.g. Garmin Connect → connected apps). Either way we stop syncing.
- We honour permission changes the provider sends us (e.g. a user turning off a data type) by no longer storing that data type.
Retention and deletion
| Event | What happens | When |
|---|---|---|
| User disconnects a service (in our app or in the provider's app — e.g. Garmin deregistration notification) | stop syncing, revoke tokens, delete that service's data | immediately; purged from backups within [35] days |
| User deletes account | revoke all tokens, delete all data and consent records | immediately; backups within [35] days |
| Raw notification payloads | kept for debugging only | at most [14] days |
| Inactive accounts | email reminder, then deletion | after [24] months of inactivity |
Security
Encryption in transit (TLS 1.2+) and at rest for tokens; least-privilege access; logging of administrative access; incident response with notification to affected users, to the provider (e.g. Garmin) and to authorities as required by law and by the provider's agreement, within [72] hours of becoming aware.
Branding
We identify the source of data in the app (e.g. "Data source: Garmin") following each provider's brand guidelines, and we do not imply endorsement.