Privacy Policy

What this notice covers

This notice covers the burnd Garmin watch app, getburnd.app, the routine builder and our watch activation service. GetBurnd is operated by Horia Jurcut, an individual developer. Contact hello@getburnd.app with support or privacy questions.

The watch keeps workout and profile information on your device and in Garmin’s activity system. Our activation service receives licensing information, not your workout recordings, routes or body measurements.

Profile and settings on your watch

When you choose a program, burnd reads available running VO₂max, birth year, height, weight, sex and resting heart rate through Garmin’s UserProfile permission. It can use average resting heart rate if a configured resting value is unavailable. It derives an approximate age from the birth year, converts weight to kilograms and stores valid values locally. Age may be off by one year because the exact birthday is unavailable. burnd does not change your Garmin profile.

Running VO₂max supplies the automatic starting targets when available. Otherwise a complete profile and a manually selected activity category can supply a fitness estimate for ages 20–70. The category describes the type and weekly duration of your exercise. Garmin’s activity class is not used as that questionnaire. Missing information gives you editable starter settings.

You can enter optional overrides in burnd’s Connect IQ settings: VO₂max, age, height in centimeters, weight in kilograms, sex, resting heart rate and activity category. Blank numeric fields mean Auto; sex can use Garmin, and activity can remain Not set. Automatic values may come from Garmin or retained local values. Clearing an override does not erase the source Garmin profile. These settings also exist in Garmin’s Connect IQ Properties system; burnd stores imported values, overrides and a settings snapshot on the watch.

Local preferences include program, duration, level, environment, units, sound, vibration, treadmill limits and per-program targets. An updated installation keeps its existing routine and saved targets until you choose a different level or reset an activity’s targets. A profile refresh alone keeps the previous routine. A small interruption checkpoint contains active seconds and saved state, without a route or sensor history. Normal save or reset clears that checkpoint.

Activity and sensor information

With Garmin’s Fit, Positioning and Sensor permissions, burnd records a running or treadmill activity and reads available speed, distance, timer and heart rate information for the display. Outdoors starts GPS acquisition on the summary; treadmill mode leaves GPS off.

Garmin’s saved activity can contain time, distance, speed, pace, laps, available heart rate and an outdoor route. Garmin may include other device or profile metadata in its recording. burnd does not add its separate stored body measurements to the activity file or keep its own online workout history.

Saved activities remain on your watch and can sync to Garmin Connect under your Garmin settings. Saving and syncing are separate. Garmin handles these records under its Garmin Connect Privacy Policy. Garmin’s store and installation services have a separate Connect IQ Privacy Policy.

Activation and network access

The watch uses Garmin’s Communications permission to contact our service over HTTPS for first activation and later license checks while idle. On first activation it receives a random installation identifier, credential and temporary six digit code. The watch stores its credential and activation state locally. The website asks for the code and your Polar license key to connect that installation to a valid burnd license.

Our service sends the license key to Polar for validation. Later checks use Polar’s license reference. Signed Polar events can flag a license for a fresh check. We do not send watch profile values, health readings, activity recordings or routes to this service.

After successful activation, a valid stored entitlement permits offline workouts. An uncertain network response preserves that entitlement. A confirmed inactive license affects future starts; network work does not run during recording or saving.

Activation records

The database stores an installation identifier, a hash of its credential, keyed one way fingerprints of codes and claimed license keys, Polar license, customer and benefit references, activation state and timestamps. It also stores failed attempt counts, signed event delivery references and rate limit counters. Rate limit buckets use protected fingerprints of request IP addresses.

The database does not store raw watch codes, raw license keys, raw installation credentials, names, email addresses, payment details, workout recordings, location or body measurements. The protected identifiers are still linked to an installation or purchase; they are not anonymous.

We use these records to deliver and maintain license access, reconcile license changes, handle retries and protect the service from abuse. Request bodies, codes, keys and credentials are not intentionally written to application logs.

The routine builder

The routine builder calculates routines in your browser from static burnd templates. You can optionally enter running VO₂max or age, height, weight, sex, resting heart rate and an activity category to preview profile-based defaults. It cannot read your Garmin profile and does not ask for your Garmin login.

Profile values and edited targets stay in the page’s memory. burnd does not add them to the URL, save them in local storage or session storage, send them in network requests or pass them to the activation service. The page loads static plan data to perform the calculation. A program name can appear in a link’s URL and the technical request for that page.

The activation form asks for a watch code and Polar license key, without profile values, an email address or payment details.

Purchases through Polar

When checkout is available, purchases take place on Polar, the merchant of record and reseller for transactions it processes. Polar handles the contact, billing and payment information needed for the purchase under its Privacy Policy and Buyer Terms.

Polar can make purchase and customer information available to us through its seller tools. Our activation database does not copy customer names, emails, billing addresses or payment details. This does not change Polar’s own records or retention.

Hosting and service providers

Vercel hosts the website and activation functions. Neon hosts the PostgreSQL activation database. Polar processes payments and licenses. Resend hosts our support inbox and handles incoming messages, attachments and replies.

Hosting and protecting these services involves technical request information such as IP address, requested URL, browser information and timestamps. A hosting provider can process a raw IP address even though our rate limit records use a protected fingerprint. We use technical records for delivery, security and troubleshooting.

Providers can process information in other countries. Resend’s selected email sending region does not determine where its stored inbox data is held. Their notices and contractual safeguards describe their respective processing: Vercel, Neon’s linked provider notice, Polar and Resend.

Retention

The watch retains preferences, imported profile values, manual overrides, its settings snapshot and activation state between launches. Connect IQ settings are a separate Garmin-managed store. Clearing a manual field returns that setting to Auto; resetting one activity clears that activity’s saved targets. Neither action erases all app information, your Garmin profile or saved activities. We have not verified complete app-data removal across uninstall, reinstall and device backups.

Our service retains installation and license references to maintain and reconcile access. Active and revoked installation records currently have no automatic deletion schedule. You can ask us to review or delete records linked to you, subject to applicable obligations and the effect on activation access.

Temporary codes expire after ten minutes. Daily cleanup is configured to delete pairing records more than 24 hours after expiry, abandoned pending installations, expired rate counters and event receipts older than 90 days. A code’s expiry prevents use before its database record is deleted.

Support messages are kept as needed to handle your request, follow up on the issue and meet applicable legal obligations. Provider technical records and backups have their own retention controls; deleting a live record does not immediately remove every provider backup.

Cookies and browser storage

We have not added advertising trackers, visitor analytics or marketing cookies. The routine builder does not save routines or profile inputs in local storage or session storage. The activation page does not save your code or key in browser storage and clears both fields after a confirmed claim. Polar’s checkout has its own cookie and privacy practices.

Your choices and rights

Manage your source profile, saved activities and Garmin account through Garmin’s controls and its data management portal. We cannot remotely read or erase your watch or Garmin account. Removing the app does not itself delete saved Garmin activities. Garmin’s uninstall procedure removes the app after a successful sync; it is not a confirmed promise that every app value or phone setting is erased.

For records held by burnd, contact hello@getburnd.app. Depending on the law that applies, you may request access, correction, deletion, restriction or a portable copy, and object to processing based on legitimate interests. You may also complain to your local data protection authority. We may need to verify that a request concerns your installation or purchase. Do not email a license key, password, precise route or raw health file.

We use installation and purchase references to provide the license service you request, security records to protect it, and support correspondence to answer you. Where applicable, those purposes rely respectively on performing our agreement with you, legitimate interests in service security and support, or compliance with legal obligations. License validation is an automatic access check; contact support if you think it is wrong.

Support and changes

Email hello@getburnd.app with a description of the issue. We receive your email address, message and any attachments you choose to send. Send only what explains the problem and redact routes, account details and health information where possible. We use the Resend inbox to read and reply; no inbox AI agent is enabled.

We update this notice when our data practices change. The date above identifies the current version.