Care Companion Privacy Policy

Garmin Data — Collection, Use, Processing and Storage (English)

This is the English version of Section 3 for Garmin Connect Developer Program review. Both language versions are intended to have the same meaning.

What we collect and how

• Authorization. When you tap “Connect Garmin Connect™ account”, you are redirected to the Garmin Connect™ consent page, where you choose which data categories to share. We never receive or ask for your Garmin password.
• Delivery. After authorization, Garmin sends newly available data for the categories you approved to our server via Garmin Health API push/ping notifications. On connection we request a backfill of the last 30 days. We only receive the categories you approved.
• Data categories. Daily summaries (steps, distance, active time, calories, moderate/vigorous intensity minutes, floors, all-day heart rate including 15-second samples, resting heart rate, stress score, Body Battery™ charge/drain), sleep (duration, stages, sleep score, sleep respiration, sleep SpO2), pulse ox, stress details and Body Battery™ curve, heart-rate variability (HRV), body composition (weight, BMI, body fat, muscle mass, bone mass, hydration; from Garmin scales), blood pressure (from Garmin blood pressure monitors), VO2max and fitness age.
• Account information. Your Garmin API user ID, the list of permissions you granted, and the access/refresh tokens used to retrieve data from Garmin.

How we use Garmin data

• To display your data, trend charts and statistics in the member dashboard and in LINE health summaries.
• To generate evidence-based health-promotion insights with a rules engine and AI (outputs are labelled “Insights derived in part from Garmin device-sourced data”).
• To let the care team you authorized manage your case, assess risk, send reminders and prepare visit reports (printable PDF for your physician).
• To write exercise prescriptions (workouts) created by your care team into your Garmin Connect™ account via the Garmin Training API, only when you granted the “workout import” permission.
• We do not use Garmin data for advertising, sell or trade it, or use it to train any AI model.

Who processes Garmin data (third parties and AI services)

• The operator’s care team (case managers, nurses, administrators) with role-based access; case managers see only assigned members. All access and changes are audit-logged.
• Google Cloud (Google LLC) — infrastructure and AI processing: the service runs on Google Cloud Run in Taiwan (asia-east1); database backups and measurement photos are stored in Google Cloud Storage; secrets are protected by Secret Manager. AI health insights and visit summaries are generated with Gemini models on Google Cloud Vertex AI. Only de-identified Garmin data summaries (no name, LINE ID, e-mail or phone) are sent to the model; Google processes them under the Vertex AI data-processing terms and does not use your data to train models.
• LINE (LY Corporation) — messaging: health summaries (including values derived from Garmin data such as steps, resting heart rate, sleep and stress, plus recommendations) are delivered to your LINE account through the LINE Messaging API and LINE Login; delivery is governed by LINE’s privacy policy.
• Garmin: only if you granted the workout-import permission, we write exercise prescriptions back to your Garmin Connect™ account. No other data is sent to Garmin.
• Garmin data is not shared with, sold to or provided to any other third party. Any future change of AI or data-processing provider will be reflected in this section first and submitted to Garmin for written approval, as required by the Garmin Connect Developer Program, before implementation.

Storage, security and retention

• Garmin data is stored in a database in the Google Cloud Taiwan (asia-east1) region. Data is encrypted in transit (TLS) and at rest, including backups. Garmin access tokens are kept in a separate secret column, are never shown in any interface and never written to logs.
• Retention: from authorization until you disconnect, request deletion or leave the service. After disconnection we immediately stop receiving new data and delete the Garmin tokens; when you request account deletion we delete your historical Garmin data, and daily database backup copies are automatically deleted after at most 90 days.

Your control over Garmin data

• Revoke. At any time you can remove this service under “Connected apps” in your Garmin Connect™ account settings, or tap “Disconnect” under “Garmin Connect™ account” in the member site. When Garmin sends a User Deregistration notification, we immediately mark the connection inactive and stop processing that account’s data.
• Change scope. When you change the permissions granted to this service in Garmin Connect™, Garmin sends a User Permission Change notification and we immediately restrict processing to the categories you still allow.
• Access, correction, deletion. Under Taiwan’s Personal Data Protection Act you may request access, a copy, correction or deletion of your Garmin data via the contact in Section 9; we respond within 15 business days.

Trademarks and disclaimer

Garmin, Garmin Connect and Body Battery are trademarks of Garmin Ltd. or its subsidiaries. This service is operated independently by us and is not a Garmin product; Garmin is not responsible for its content or recommendations. Wearable data is provided for health promotion and screening and is not a medical diagnosis.