Privacy Policy for Heart Rate Widget

1. Overview & Core Privacy Principles

• Your heart rate stays on your phone. Heart rate and battery readings are received directly from your monitor over Bluetooth and processed only on your device. They are never sent to us, to Google, or to any other third party.
• No account, no cloud. The app has no sign-up, no login, and no server of its own.
• No ads, no data selling. The app shows no advertising, and we do not sell, rent, or share your personal data.
• Diagnostics only. The app uses Google Firebase to receive crash reports and basic usage statistics (see Section 3). These never contain your heart rate.

2. Information Accessed and Processed

A. Bluetooth (BLUETOOTH_SCAN, BLUETOOTH_CONNECT)

• Purpose: To find nearby Bluetooth heart rate monitors and connect to the one you choose.
• What is read from the monitor: The standard Bluetooth Heart Rate Measurement (heart rate and skin contact) and Battery Level. On Amazfit/Zepp devices, the app also reads the battery charging status. The app does not write data to your monitor and does not access its activity, sleep, or account data.
• Location: On Android 12 and newer, Bluetooth scanning is declared as not used for location and the app does not request location permission. On Android 11 and older, Android itself requires location permission before it returns Bluetooth scan results, so the app asks for it when you start a scan. The app never reads, stores, or shares your location, and you can deny the permission; the app still works with monitors already connected to your phone. The app never requests background location.

B. Heart Rate and Battery Readings

• Processing: Readings are used only to display your live heart rate, heart rate zone, skin contact, and battery level in the app, on the home screen widget, and in the monitoring notification.
• Storage: Only the most recent reading (heart rate, battery level, charging status, and the time it was received) is kept in the app’s private storage on your device, so the widget can display it. The app does not keep a heart rate history.
• Transmission: None. Heart rate and battery readings are never transmitted off your device.

C. Your Paired Monitor

• Storage: The name and Bluetooth hardware address of the monitor you connect to are saved in the app’s private storage, so the app can reconnect automatically.
• Removal: Device Info → Forget & Remove Device deletes the saved monitor and all stored readings.

D. Background Monitoring (FOREGROUND_SERVICE, FOREGROUND_SERVICE_CONNECTED_DEVICE, WAKE_LOCK, RECEIVE_BOOT_COMPLETED)

• Purpose: To keep receiving readings from your monitor while the app is closed, so the home screen widget stays up to date. While monitoring is active, Android shows an ongoing notification.
• After a restart or app update: If you were monitoring, the app resumes monitoring automatically. If you disconnected or removed your monitor, it does not.

E. Notifications (POST_NOTIFICATIONS)

• Purpose: To show the ongoing monitoring notification with your current heart rate and battery level.

F. Internet (INTERNET, ACCESS_NETWORK_STATE)

• Purpose: Used only by the Google Firebase diagnostics described in Section 3. The app’s own features work entirely offline.

3. Google Services & Diagnostics

The app uses two Google Firebase services (provided by Google LLC). Neither receives your heart rate or battery readings.

Firebase Crashlytics

To find and fix crashes, the app sends crash reports to Firebase Crashlytics.

• What is collected: Crash stack traces, app version, Android version, device model, available memory and storage, a per-installation identifier, and short technical logs of recent app activity (for example “scan started” or “connected”). The app removes Bluetooth hardware addresses from these logs before they are sent, and they never include your heart rate or your monitor’s name.
• Retention: Crashlytics keeps crash reports for up to 90 days.

Google Analytics for Firebase

To understand how the app is used and improve it, the app sends basic usage statistics to Google Analytics for Firebase.

• What is collected: Screens viewed and app events (starting a Bluetooth scan, connecting, disconnecting, starting the demo, and removing a monitor), an app-instance identifier, device information (model, Android version, language), how the app was installed (Google Play install referrer), and approximate location derived from your IP address (country/region).
• What is not collected: The name and Bluetooth hardware address of your monitor are not sent to Analytics, and neither are your heart rate or battery readings.
• Advertising ID: The app does not collect or use your Android Advertising ID. Advertising ID access is disabled in the app, and Analytics advertising features are turned off.
• Retention: Usage statistics are kept according to Google Analytics data retention settings.

For details on how Google processes this data, see Google’s Privacy Policy: https://policies.google.com/privacy and How Google uses information from apps that use its services.

4. Data Sharing and Disclosure

We do not sell, rent, disclose, or share your personal data with third parties. The only data that leaves your device is the Google Firebase diagnostics described in Section 3, which Google processes on our behalf. We use no advertising networks or data brokers.

5. Data Retention, Security, and Deletion

• Local data: Your saved monitor and latest readings stay in the app’s private storage on your device, which other apps cannot access.
• Delete in the app: Device Info → Forget & Remove Device removes the saved monitor and all stored readings.
• Delete everything on your device: Uninstall the app, or clear its data in Android Settings → Apps → Heart Rate Widget → Storage → Clear storage.
• Diagnostics: Crash reports and usage statistics are not linked to your name, email, or account (the app has none). To request deletion of diagnostic data associated with your installation, contact us at the email below.
• Security: Data sent to Google Firebase is encrypted in transit.

6. Health Information & Medical Disclaimer

Heart Rate Widget displays readings provided by your heart rate monitor. It is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease or health condition. Do not rely on it for medical decisions; consult a healthcare professional for medical advice.

7. Third-Party Devices

Heart Rate Widget is an independent application and is not affiliated with, endorsed by, or sponsored by Amazfit, Zepp Health, or any heart rate monitor manufacturer. All trademarks belong to their respective owners. Your monitor’s own app and services are governed by their own privacy policies.

8. Children’s Privacy

Heart Rate Widget is not directed to children under the age of 13, and we do not knowingly collect personal information from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

• Email: support@gooselabs.app