WristWisdom Privacy Policy

WristWisdom shows you one quote a day on your Garmin watch: a notification at a time you choose, plus a glance and a screen inside the app. It works through a fixed list of quotes in order, so nothing repeats and nothing is skipped.

Keeping that place is the only reason the app talks to a server at all. Thirty quotes are built into the app; the rest, and a backup of your place in the list, come from a small server I run myself. That is what lets a reinstall pick up where you left off instead of starting over.

Once a day, in the background, the app makes one request to api.martinnagy.dev. It carries exactly four things:

• Your watch’s app-specific device identifier. Garmin issues a different one for every app, so it cannot be matched against your other apps, and it is not your Garmin account. It does survive reinstalling WristWisdom — which is precisely what lets the app resume.
• The number of the next quote to show you.
• The time of day you set for the daily notification.
• Whether that notification is switched on.

The app also downloads pages of quotes. Those pages are identical for every watch and identify nobody.

One thing worth being plain about: switching the daily notification off stops the notification, not the daily request. The app still syncs its place once a day.

Everything else the app needs lives only on the watch and is never sent anywhere: a short buffer of upcoming quotes, the last quote shown, the date it was shown, how many extra quotes you asked for today, and a cached layout for the glance so it draws instantly.

Uninstalling the app removes all of it.

No name, email address, or account. No location, and no GPS. No heart rate, activity, sleep, or any other health or fitness data. No contacts, no messages, no cookies, and no advertising identifiers. No analytics and no crash reporting — the app contains no third-party SDK of any kind.

The app asks Connect IQ for three permissions and nothing more: background execution, internet communication, and notifications. It requests no permission for position, sensors, your user profile, or activity recording, so it cannot read any of them even if it wanted to.

I am the data controller: Martin Nagy, reachable at the address under Contact below. The server is hardware I own and run. Its database holds the four values above plus the time of your last sync, and nothing else.

Requests reach it through Cloudflare, which runs the tunnel into my network and a rate limit that keeps the service from being hammered. A rate limit works on IP addresses, so Cloudflare does process the IP address your watch connects from, acting as a processor on my behalf. I keep no IP log myself, and there is no access log on my side linking an address to a device identifier.

The legal basis, under Article 6(1)(f) of the GDPR, is legitimate interests: keeping your place in the quote list across a reinstall, honouring the notification time you chose, and keeping the service available. Nothing is sold, shared with anyone else, or used for advertising or profiling.

A device record is deleted once the watch behind it has not synced for twelve months. To be precise about how that works: the sweep runs when the service starts, so a record can outlive the twelve-month mark briefly, until the next restart.

The database is backed up daily and backups are kept for fourteen days, so a deleted record can still exist in a backup for up to that long after it is gone from the live database.

• Uninstall the app and the daily request stops. Your record then expires on its own, as above.
• Change your mind about the notification whenever you like — its time and its on/off switch live in the app’s menu on the watch, and in the Garmin Connect app.
• Ask me to delete your record and I will do it by hand. Email the address below.

An honest caveat about that last point: the record is keyed only by the app-specific identifier, and the app does not display it anywhere. Deleting one specific record immediately therefore needs that identifier. If you cannot get hold of it, uninstalling and letting the record expire is the reliable route, and I am glad to walk through it with you by email.

You have the right to ask for access to your data, its correction or erasure, a restriction on how it is used, and to object to that use. You can also complain to your national data protection authority.

If this policy changes in a way that matters, the date at the top of this page changes with it.

Questions, or a deletion request: nagy.martin19@gmail.com