Privacy notice

App: Wearable Context Bridge. Operator: the individual owner of this private personal integration. Contact: pikimoo@gmail.com.

Purpose and consent

The owner authorizes read-only access to their wearable information to sync selected measured heart-rate and sleep facts into their chosen Kindroid companion. OAuth consent allows acquisition; it does not itself authorize a companion delivery. The relay requires separate operator-controlled authorization.

Information the current collector reads

Where available, the collector reads heart-rate samples, sleep records, steps, resting heart rate, heart-rate variability, respiratory rate, oxygen saturation, estimated VO2 max, and exercise records, together with source times and associated API record metadata. The current queries use recent time ranges for samples and sleep and longer lookbacks for some daily metrics and exercise. These records can be stored in local snapshots and compressed raw-evidence logs.

The permissions cover activity and fitness, health metrics and measurements, and sleep. They are read-only. The app does not request Google email, contacts, files, or permission to write wearable records.

Information sent to Kindroid

Only latest measured heart rate, sleep duration, their source timestamps, and stale/unavailable labels are included in the bounded companion scene-setting update. Raw API records, the other collected metrics, and OAuth credentials are not included in that update. Kindroid receives and processes the selected health context to provide the owner's companion interaction. This is a transfer of personal health information to a third-party AI service.

The owner controls the destination account and companion. Kindroid's retention, processing, and deletion practices are governed by Kindroid's own privacy policy and terms. Revoking this integration does not remove information already sent to Kindroid. Deletion of a local record does not delete a provider-side copy.

Local storage and access

Wearable credentials are kept in protected service storage, separate from public web content and source publication. Raw measurements, snapshots, outgoing context, source freshness, and delivery/audit events may be stored privately for operation and troubleshooting. Access is limited by service identities and filesystem controls; a trusted host administrator can administer these records. Troubleshooting access is limited to the consented purpose and applicable security requirements.

This public site contains no health values, tokens, private archives, or companion target identifiers. These static pages have no scripts, analytics, advertising trackers, forms, or cookies of their own. These public information pages are hosted by Cloudflare Pages. Cloudflare may process ordinary request metadata, such as IP address and request time, to deliver and protect the site, under its privacy policy. Health measurements and authorization credentials are not uploaded to these public pages.

Retention and deletion

The current local acquisition and delivery logs have no automatic deletion deadline. Existing records remain until removed by the operator. Stopping the relay or revoking Google access does not automatically delete those records. The owner may contact the operator to arrange local deletion and separately use Kindroid's deletion controls or contact Kindroid for copies held by that service. This notice does not promise a deletion deadline or deletion capability that has not been implemented.

Data use restrictions

The relay does not sell wearable information, use it for advertising, make eligibility decisions, or operate a model-training pipeline. Its disclosed use is the owner's personal wearable-information feature. The app’s use and transfer of information received from Google Health APIs will adhere to the Google Health API Developer and User Data Policy, including its Limited Use requirements. This notice describes the integration's practices and does not replace Kindroid's own privacy policy.

Stopping access

The owner may revoke the app's access through the Google Account connections page. The operator can stop acquisition and disable the relay independently. Delivery stops when required acquisition, authorization, or safety checks fail; a failed check is not overridden to keep updates flowing.

Contact and changes

Questions or deletion requests: pikimoo@gmail.com. Material changes to the information collected, recipients, or uses require updated disclosure and any required consent before the changed use begins. Effective date: when this notice is first published.