Privacy Policy

Last updated: March 29, 2026

1. Information We Collect

Account Information

When you register, we collect your email address and a password (stored as a secure hash - we never store plaintext passwords).

Zepp/Amazfit Credentials

To fetch your health data, you provide your Zepp app login credentials. These are stored encrypted and used solely to authenticate with the Zepp API on your behalf.

Health Data

We fetch and store the following data from the Zepp API: sleep records (duration, stages, scores), workout records (type, duration, heart rate, distance), resting heart rate, daily step counts, and calorie data.

Payment Information

Payments are processed by Stripe. We never see or store your credit card details. We only receive a subscription ID and customer ID from Stripe.

2. How We Use Your Data

• Display your health data in interactive dashboard charts
• Provide CSV data export (Premium plan)
• Process subscription payments via Stripe
• Send essential service emails (account verification, payment receipts)

We do not use your health data for advertising, analytics, machine learning training, or any purpose other than displaying it back to you.

3. Data Sharing

We do not sell, rent, or share your personal or health data with third parties. The only external services that receive data:

• Zepp/Huami API - to fetch your watch data (using your credentials)
• Stripe - to process payments (receives only your email)

4. Data Storage & Security

• Data stored on encrypted European servers (Hetzner, Germany)
• HTTPS encryption on all connections (TLS 1.3)
• Passwords hashed with industry-standard algorithms
• No third-party analytics or tracking scripts on dashboard pages

5. Your Rights

You have the right to:

• Access all data we store about you
• Export your data (CSV export available on Premium plan)
• Delete your account and all associated data
• Revoke Zepp access at any time by changing your Zepp password

To exercise these rights, email support@sarmkadan.com.

6. Cookies

We use a single essential authentication cookie (harevest_auth) to keep you signed in. We do not use advertising, tracking, or third-party cookies.

7. Children

HAREVEST is not intended for users under 16 years of age.

8. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email to registered users.

9. Contact

Privacy questions: support@sarmkadan.com