Controller
S.Ruttloff, Computer Hard- & Software, Owner: Sven Ruttloff, Morgensternstr.15, 04179 Leipzig, Germany. VAT identification number: DE255789971. Phone: +49 341-24854916. Email: info@saas-secure.com.
Hosting location
All personal data processed through the service is hosted and processed exclusively in Germany.
Contact and registration forms
The contact form collects only email address and message. Registration collects the data required to create and activate a free account. Registration data is stored securely, passwords are hashed, and transactional emails are sent only through our own SMTP infrastructure.
Health data access and use
When you connect Octi8 to Google Fit or Health Connect, and only after you grant the requested permissions, the service can access selected health data categories such as weight, body fat percentage, steps, workout energy, burned calories, sleep duration, and sleep HRV, depending on the provider and the scopes you enabled. We use that health data to import it into your account, display diary and Insights charts including workout, sleep duration, and HRV views, calculate BMR and calorie targets, sync burned calories, build activity summaries, and improve the nutrition tracking features you chose to use.
Health data sharing
Health data is not sold or used for advertising. It is processed only to provide the connected health features you selected. Depending on the provider, the data is exchanged with Google Fit, Android Health Connect, or the device integration that submits the data to Octi8 on your behalf.
Your controls
You can disconnect the health provider, disable individual read/write scopes, or stop using the feature at any time in Account -> Connections. Existing account data can be removed together with the account, subject to legal retention obligations.
Legal basis and transparency
We process personal data only to provide the website, answer contact requests, handle free-account registration and account activation, and operate the service securely. Data is collected only where necessary and handled as transparently as possible.
Retention and deletion
Contact requests are stored for 30 days after the last contact. Registrations that are not activated are stored for 30 days. Active account data is deleted within 30 days after deletion or the end of the contractual relationship, unless statutory retention obligations require longer storage.