Privacy

Last updated 18 September 2026.

1. Who is responsible

The controller for the processing described here is:

[Operator name]
[Street and number]
[Postal code and city], Germany
Email: [contact email]

2. What Brief does

Brief shows a short morning summary (the "brief") on your Garmin watch and in the companion web app. To write it, our server reads the sources you connect, combines them into a few lines of text with the help of an AI writing service, stores that text encrypted, and hands it to your watch when it asks for it.

3. Data we process, why, and for how long

3.1 Account

Your email address, the time you signed up, the time of your last sign-in, and, if you sign in with Google, the identifier Google assigns to your account (not your Google password). We use these to create your account, sign you in (a link sent to your email or Google sign-in) and contact you about the service. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Kept until you delete your account.

3.2 Watch

When the watch app first runs it sends a device identifier generated by the watch, the watch model and firmware version. We store these together with the pairing code, the time of pairing and the time of the last fetch, so the watch can be linked to your account and fetch your brief. With each fetch the watch attaches body metrics it measured (body battery and recovery time) so they can be mentioned in the next brief. Metrics are kept for 24 hours and then no longer used; the device record is kept until you unpair the watch or delete your account. Legal basis: performance of a contract (Art. 6(1)(b)).

3.3 Google Calendar (only if you connect it)

When you connect Google Calendar we receive a refresh token from Google that lets our server read your calendar. It is stored encrypted. Once a day, and when you ask for a fresh brief, the server reads the titles and times of that day's events (on the Pro plan, of tomorrow's events in the evening and from all calendars you have selected in Google). Event data is used to write the brief and is discarded afterwards; only the finished brief is stored. Legal basis: your consent (Art. 6(1)(a)), given when you click "Allow" at Google. You can withdraw it at any time by removing Brief under Google account, third-party access, or by deleting your account, which also asks Google to revoke the token. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.4 Weather

The coordinates you set (city level is enough) are sent to Open-Meteo (open-meteo.com) to fetch the forecast. Open-Meteo receives the coordinates and our server's IP address, no account data. Legal basis: performance of a contract (Art. 6(1)(b)).

3.5 News feeds (Pro)

If you enable news, our server fetches the RSS or Atom feeds you selected. The feed publishers see requests from our server, not from you. Feed contents are cached for a short time on the server and not stored per user. Legal basis: performance of a contract (Art. 6(1)(b)).

3.6 Notes and settings

The notes, topics, language and source settings you enter in the app are stored with your account so the brief can use them. Kept until you change or delete them. Legal basis: performance of a contract (Art. 6(1)(b)).

3.7 AI writing

To phrase the brief, the day's facts (event titles and times, the weather summary, body metrics, news items, your notes and topics) are sent to Anthropic's API (Anthropic PBC, USA, or its EU entity where available). Your email address is not sent. Anthropic processes this data on our behalf under its commercial terms and, according to those terms, does not use API inputs to train its models. The transfer to the USA rests on the EU Standard Contractual Clauses included in Anthropic's data processing terms. Legal basis: performance of a contract (Art. 6(1)(b)).

3.8 The brief itself

The finished brief is stored encrypted and replaced by the next one. We keep only the current brief per account.

3.9 Push notifications (Pro, only if you enable them)

If you turn on notifications in the companion app, your browser gives us a push subscription (an endpoint URL at your browser vendor's push service plus two keys). We use it to send one short notification when your morning brief is ready. Removed when you turn notifications off, when the push service reports the subscription gone, or when you delete your account. Legal basis: your consent (Art. 6(1)(a)).

3.10 Payments (Pro)

Subscriptions are handled by Stripe (Stripe Payments Europe, Ltd., Ireland). Stripe collects and stores your payment details; we never see your card number. We store your Stripe customer and subscription identifiers, your plan and its end date. Stripe is an independent controller for the payment itself; see Stripe's privacy policy. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations to keep accounting records (Art. 6(1)(c)), which is why invoice data at Stripe is retained for the statutory period of ten years.

3.11 Server logs

Our web server records each request with the time, path, response code and IP address, for security and debugging. Logs are rotated and deleted after 7 days. Legal basis: our legitimate interest in running a secure service (Art. 6(1)(f)).

4. Where the data is stored

The service runs on a virtual server rented from Hostinger International Ltd. (Cyprus) in a data centre in the European Union [exact location to be confirmed by the operator]. Recipients outside our server are those named above: Google, Open-Meteo, the feed publishers you choose, Anthropic, your browser's push service and Stripe.

5. Encryption

All traffic between your watch, your phone, your browser and our server is encrypted (HTTPS). Your brief and your Google refresh token are additionally encrypted at rest with a key that is not stored in the database.

6. Your rights

Under the GDPR you have the right to access the personal data we hold about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interest (Art. 21). Where processing rests on consent you may withdraw it at any time with effect for the future.

• Delete everything: open Account and choose "Delete my account". This removes your account, devices, settings, push subscriptions and brief immediately and asks Google to revoke calendar access. A Stripe subscription is cancelled; Stripe keeps invoice records as required by law.
• See or export your data: the companion app shows everything we hold about you; for a machine readable copy, write to the contact address above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one of the German federal state where you live or where the operator is based.

7. No profiling, no advertising

We do not sell data, do not show advertising and do not track you across other sites. No cookies are set other than the session cookie that keeps you signed in (30 days, deleted on sign-out).

8. Changes

When this policy changes we update the date at the top; material changes are announced in the companion app.