Privacy Policy
Last Updated: December 18, 2025
This Privacy Policy explains how www.hgit.pl collects, uses, discloses, and protects personal information obtained through the Garmin Health API or Activity API. By authorizing access to your Garmin Connect data, you consent to this policy.
1. Information We Collect
We access the following data from your Garmin Connect account solely with your explicit consent via OAuth:
- Activity calendar and summaries (dates, types, durations)
- Heart rate (HR) data, including averages and zones
- Sleep metrics (duration, stages, quality scores)
- Weight and body composition data
- HRV (Heart Rate Variability) status and readings
- Full activity details (GPS tracks, pace, elevation, calories, splits)
No other personal data (e.g., name, email unless shared via API) is collected. All access is read-only for analysis purposes.
2. How We Use Your Information
Data is used exclusively for:
- Personalized fitness analysis, performance insights, and trend reporting within our application
- Generating aggregated, anonymized statistics (no individual data shared)
- Improving our analytics algorithms (anonymized only)
3. Data Sharing and Disclosure
Your data is never sold or shared except:
- With trusted service providers (e.g., secure cloud hosting) under strict data processing agreements
- As required by law or to protect rights/safety
No data is transferred outside the EU/EEA without adequacy decisions or safeguards like Standard Contractual Clauses.
4. Data Security
We implement industry-standard protections:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Access limited to authorized personnel via role-based controls
- Regular security audits and vulnerability scans
- Breach notification within 72 hours if required by law (e.g., GDPR)
5. Data Retention and Deletion
Data is retained only as long as needed for analysis (default: synced period) or your account is active. You can revoke access anytime via Garmin Connect settings, triggering immediate deletion from our systems within 30 days.
Garmin Connect → Settings → Connected Apps → Revoke
6. Your Rights (GDPR Compliant)
Under GDPR, you have the following rights:
- Access: Request a copy of your data
- Rectification/Deletion: Correct or erase your data
- Objection/Restriction: Object to or restrict processing
- Portability: Receive data in machine-readable format
Contact us at it@hgit.pl to exercise your rights.
7. Children's Privacy
Our service is not directed to children under 16. We do not knowingly collect their data.
8. Changes to This Policy
We may update this policy. Changes will be posted here with the update date. Continued use constitutes acceptance.
9. Contact Us
For questions regarding this Privacy Policy or your data:
- E-mail: it@hgit.pl
- Website: www.hgit.pl
We comply with GDPR and Polish data protection laws.
See also our general Privacy Policy and Cookie Policy.