1. Who this policy covers
Fitness App is a private health and fitness information dashboard operated from the United Kingdom. This policy applies to the Fitness App mobile application, its supporting private service and this website.
Privacy questions and requests can be sent to info@sandastays.co.uk.
2. Information the app handles
Google Health information
When the user chooses to connect Google Health, Fitness App requests read-only access to:
- processed sleep sessions, start and end times, duration and sleep stages;
- heart rate, resting heart rate and heart-rate variability (HRV);
- oxygen saturation, respiratory summaries and sleep-temperature derivations, when available; and
- step records used for comparison with the user’s other activity source.
The app also handles the OAuth identifiers and tokens required to maintain the connection. It does not request permission to alter or delete source records in Google Health.
Other information supplied or connected by the user
The app can also display Garmin activity and wellbeing records, the user’s gym logs, nutrition and supplement records, profile settings and optional health records that the user deliberately adds or connects. Those sources remain separate from the Google Health authorization.
Technical information
Limited security and diagnostic information may be processed to authenticate requests, detect errors and protect the service. The health-data service is designed not to place health response bodies or access credentials in ordinary application logs.
3. How the information is used
Information is used only to provide and maintain user-facing Fitness App features, including:
- displaying daily and historical health, sleep, recovery and activity information;
- showing trends and user-requested comparisons between connected sources;
- calculating clearly labelled personal summaries from authorised inputs; and
- maintaining, securing and troubleshooting the user’s private connection.
Fitness App does not sell Google user data, use it for advertising, build advertising profiles, or use it to train general-purpose artificial intelligence or machine-learning models.
4. Google API Services User Data Policy
Fitness App’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
5. Storage, sharing and service providers
The current Google Health integration retrieves authorised records through a private service hosted on Google Cloud. OAuth credentials are kept in a restricted secret store. The service does not currently maintain a separate long-term archive of Google Health records. The mobile app may retain a private on-device cache to support the dashboard, trend history and offline viewing.
Information is not shared with advertisers or data brokers. It may be processed by infrastructure providers only to operate the service, or disclosed where required by law. Google Health information is not sent to Garmin, and Garmin information is not written into Google Health by this integration.
6. Security
Reasonable technical and organisational safeguards are used, including encrypted HTTPS connections, restricted server credentials, private service access controls and protected credential storage. No system can guarantee absolute security, and the app is not a substitute for the user securing their own phone and Google Account.
7. Retention and deletion
OAuth credentials are retained only while the Google Health connection is active or until deletion is requested. On-device cached information remains until it is cleared, the application is removed, or the user requests deletion where applicable. Essential security records may be retained for a limited period where necessary to protect the service or comply with law.
See the disconnect and deletion instructions for the available controls and expected timescales.
8. User choices and rights
Google access is optional and can be revoked at any time from the user’s Google Account. Depending on applicable law, the user may also request access, correction, deletion, restriction or a copy of personal information held specifically by Fitness App. Requests should be sent to the privacy contact above.
Revoking or deleting the Fitness App connection does not delete source records held independently by Google, Garmin or another provider. Those must be managed with the relevant provider.
9. Children
Fitness App is not directed to children and is not intended for use by anyone under 18.
10. Changes to this policy
This page will be updated before any material change to the Google data accessed or the purposes for which it is used. The effective date at the top of the page identifies the current version.