Controller

S.Ruttloff, Computer Hard- & Software, Owner: Sven Ruttloff, Morgensternstr.15, 04179 Leipzig, Germany. VAT identification number: DE255789971. Phone: +49 341-24854916. Email: info@saas-secure.com.

Hosting location

All personal data processed through the service is hosted and processed exclusively in Germany.

Contact and registration forms

The contact form collects only email address and message. Registration collects the data required to create and activate a free account. Registration data is stored securely, passwords are hashed, and transactional emails are sent only through our own SMTP infrastructure.

Health data access and use

When you connect Octi8 to Google Fit or Health Connect, and only after you grant the requested permissions, Octi8 can read or write selected health data depending on the provider and the scopes you enabled. Health data is used only for the connected features inside your account and is not used for advertising.

  • Weight: imported to your account, shown in body-data and Insights views, and used for progress tracking and BMR-related calculations.
  • Body fat percentage: imported to your account, shown in body-data and Insights views, and used where available to improve body-composition and energy-calculation context.
  • Steps: imported to build daily activity summaries and to calculate step-based burned-calorie estimates used in diary and Insights views.
  • Workout sessions and workout energy: imported to show workouts and workout calories in Insights and activity summaries.
  • Burned calories / active calories: imported so Octi8 can show daily energy expenditure and combine it with BMR and workout data.
  • Sleep duration: imported for Insights charts and sleep-related history views where the provider supplies this data.
  • Sleep HRV: imported for Insights charts and recovery-related history views where the provider supplies this data.
  • Calories consumed written by Octi8: if you enable calorie export, Octi8 sends your diary calorie totals back to the connected provider for the selected day windows.

How health sync works

Health sync starts only after you actively connect a provider and grant the requested permissions. Google Fit uses Google OAuth consent. Health Connect uses the Android device-side permission flow inside the wrapper app. After authorization, Octi8 imports only the enabled categories and stores the resulting values in your Octi8 account hosted in Germany.

  • Imported samples are normalized and stored so they can be shown in the diary, body-data area, and Insights charts.
  • Current-day imported weight and body-fat values may also be copied into your Octi8 profile history so your body-data timeline stays consistent.
  • Burned-calorie and workout data are used to build daily summaries and energy charts.
  • If calorie export is enabled, Octi8 writes consumed-calorie totals from your diary back to the connected provider. This happens only for the scopes you enabled and only after the provider connection is active.

Health data sharing

Health data is not sold and is not used for advertising. It is processed only to provide the health features you selected. Depending on the provider, data is exchanged with Google Fit, Android Health Connect, or the device integration that submits Health Connect data to Octi8 on your behalf.

Your controls

You can disconnect the health provider, disable individual read/write scopes, or stop using the feature at any time in Account -> Connections. Existing account data can be removed together with the account, subject to legal retention obligations.

Legal basis and transparency

We process personal data only to provide the website, answer contact requests, handle free-account registration and account activation, and operate the service securely. Data is collected only where necessary and handled as transparently as possible.

Retention and deletion

Contact requests are stored for 30 days after the last contact. Registrations that are not activated are stored for 30 days. Active account data is deleted within 30 days after deletion or the end of the contractual relationship, unless statutory retention obligations require longer storage.