Privacy

In short: the FlexFace watch face shows data from your watch on your watch, and sends nothing anywhere. I don’t receive your health, activity, location or calendar data. This website sets no cookies and counts visits without identifying you.

Who is responsible

FlexFace is made by MetricLabs, the developer name of Dmytro Kravchenko, who is responsible for your data (the “controller” under the EU General Data Protection Regulation, GDPR). For any question about your data, write to support@flexface.app.

This policy covers the FlexFace watch face and the flexface.app website.

The watch face

FlexFace reads data on your watch to show it on the face:

• Activity and health: steps, distance, floors, calories, intensity minutes, heart rate, resting heart rate, Body Battery, stress, sleep score, Pulse Ox, recovery time, training status, VO2 max, and your weekly running and cycling distance, as your watch provides them.
• Weather and surroundings: the current weather your watch already has, sunrise and sunset, altitude and air pressure.
• Your calendar: the start time of your next event, for the “Next calendar event” metric. Its title and details are not read.
• Your watch’s status: battery level, whether your phone is connected, Do Not Disturb, whether an alarm is set, and whether you have notifications (not what they say).
• Your profile: only your 7-day average resting heart rate. This is why the face asks for the “user profile” permission.
• Garmin’s own values for these metrics, which it shares with watch faces, so FlexFace can show them and, when you hold one on a touchscreen watch, open its Garmin screen. This is why the face asks for the permission to read them (in Garmin’s terms, “complications”).

This data is read on your watch, shown on your watch, and never leaves it through FlexFace. The face has no permission to use the internet or your location, so it cannot send anything or track where you are. I never receive any of it.

Your settings (theme, metrics and so on) are stored by Garmin, on your watch and in the Connect IQ app, as for every Connect IQ app. Garmin’s privacy policy covers how Garmin handles them, along with the data your watch collects in the first place.

Buying FlexFace

You buy FlexFace in Garmin’s Connect IQ Store, and Garmin processes the payment under its privacy policy. I don’t see your payment details. If Garmin passes me details of an order as the seller, for example for a refund or for tax, I use them only for that purpose.

This website

• Hosting: the site is hosted by Cloudflare. Like any web host, Cloudflare processes technical data about each visit (your IP address, browser and the page requested) to deliver the page and protect the site from attacks. See Cloudflare’s privacy policy.
• No cookies, no advertising: the site sets no cookies and has no advertising or cross-site tracking.
• Visitor statistics: to learn how people find the site and which pages they read, it counts visits with Cloudflare Web Analytics. It records the page, the site that linked to it, your country, your browser and device type, and how fast the page loaded, without cookies, without storing anything on your device and without any identifier that would recognize you on a later visit. I see only totals, never individual visitors.
• How the site is used: to learn which pages and settings interest people and whether they find their way to the store, the site records what happens during a visit with PostHog, in its EU cloud (Germany): the pages you open and leave, the links and buttons you click (their text and where they lead, never what you type), the settings you change in the configurator and the face you build, the store button you press, the site that linked to you and any campaign tag in the address (such as utm_source), and your browser, device type and screen size. It uses no cookies and stores nothing on your device. To tell one visit from another, PostHog computes an irreversible code from your IP address and browser with a random value it replaces every day and then deletes, so the same visitor looks like a new one the next day and cannot be recognized or identified. The events pass through flexface.app on their way to PostHog; neither the site nor PostHog keeps your IP address. PostHog keeps the events for at most one year.
• Your theme: the theme you pick for the site is remembered in your browser’s storage, on your device only, so the site looks the same on your next visit. It is never sent anywhere; clearing your browser’s site data forgets it.
• The contact page loads Cloudflare Turnstile, which checks that a visitor is a person and not a bot, using signals from your browser. It runs only on that page. See Cloudflare’s Turnstile privacy addendum.
• The configurator runs entirely in your browser. The face you build is kept in the page’s address, so a link can share it; the settings you change are counted as described under “How the site is used”. “Copy link” writes that address to your clipboard, and only when you press it.

When you write to me

If you use the contact form or email support@flexface.app, I receive your email address and whatever you write, and the topic and watch model if you choose to give them. The form’s message passes through the site’s Cloudflare Worker, which checks it with Turnstile and emails it to me; nothing is stored on the website. I use it only to answer you, and delete it within 12 months of our last message unless I must keep it longer by law. The address forwards through Cloudflare Email Routing to my own mailbox, so Cloudflare and my email provider handle the message on its way.

Legal basis

Under the GDPR, I rely on:

• performance of a contract when handling a purchase you made or support for it;
• legitimate interests for keeping the website running and secure, for counting visits so I can improve the site, and for answering messages you send me.

I don’t sell your data, share it for advertising, or use it to make automated decisions about you.

Where data goes

Garmin and Cloudflare may process data outside your country, including in the United States; PostHog processes the site’s usage data in the EU. They use the safeguards the law requires for this, such as the European Commission’s Standard Contractual Clauses.

Your rights

You can ask me for access to the data I hold about you, and to correct it, delete it, restrict or object to its use, or receive it in a portable form. Write to support@flexface.app. In practice I hold very little: at most your emails, and order details if Garmin passes them on.

For data Garmin holds (your watch data, settings and purchases), use the options in your Garmin account or contact Garmin.

If you think your data is handled unlawfully, you can complain to the data protection authority where you live or work.

Children

FlexFace is not aimed at children, and I don’t knowingly collect data from them.

Changes

If FlexFace or this website starts handling data differently, this page will say so before the change, and the date at the top will change.