Privacy policy

What data is collected

With your permission, Fitbit Journal reads data from your Google Health account through the Google Health API: activity and fitness data, heart rate and other health measurements, sleep, nutrition and hydration logs, ECG recordings, irregular rhythm notifications, and your Google Health profile, settings, and paired devices. It also reads your Google account email address to show which account is connected. Access is read-only: Fitbit Journal never writes to or changes your Google Health data.

How it is used

The data is used only to show you dashboards and analysis of your own health and fitness data. It is not used for advertising, not sold, and not shared with anyone else. No person reads your data unless you explicitly ask for help with your account, or when required for security or by law.

The use of information received from Google Health API and/or Developer Tools will adhere to the Google Health API Developer and User Data Policy, including the Limited Use requirements.

How it is stored and secured

Synced health data and Google access tokens are encrypted at rest (AES-256-GCM) in the app's database and are transmitted to and from Google over HTTPS. Only the data type names and dates needed to organize the data are stored unencrypted.

Managing and deleting your data

• To delete everything: on the Dashboard, click Delete my data. This removes your account and all synced data from Fitbit Journal and revokes its access to your Google account.
• To revoke access from Google's side: in the Google Health app, open your profile, then Apps and services, select Fitbit Journal, and remove it. You can also remove it at myaccount.google.com/connections.
• Signing out only ends your browser session; your synced data stays until you delete it.