Privacy policy
Last updated
Legato is an app for iPhone and iPad that brings the activities recorded by your Garmin watch into Apple Health. This policy explains what happens to your data in the app and on this site, getlegato.app. It applies under the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
In short
- Your credentials and activities stay in the app. Your Garmin password goes only to Garmin, and your activities go from Garmin Connect to your device, then to Apple Health. We never receive them.
- Anonymous usage statistics. The app shares fully anonymised usage analytics, to understand how people use it and improve the service. You can turn them off in Legato’s Settings.
- On this site, we count visits without cookies, and we receive what you write to us.
Who is responsible
Jérôme Neuvéglise, chemin de la Butte 3, 1036 Sullens, Switzerland, is the controller for the processing described here. Contact: hello@getlegato.app.
The app
What the app processes, on your device
| Data | Where it comes from | What the app does with it |
|---|---|---|
| Your Garmin Connect e-mail and password | You type them when you sign in | Sent only to Garmin to sign you in. The password is never stored. |
| Your Garmin session, profile ID and display name | Returned by Garmin after sign-in | Kept in the iOS Keychain, to fetch your activities and show which account is connected. |
| Your activities: list, details, laps, weather, the day’s VO2 max, your device names | Downloaded from your Garmin Connect account | Shown in the app and used to build each import. |
| The original file of each activity you import | Downloaded from your Garmin Connect account | Kept on your device so an interrupted import can resume. Excluded from device backups. |
| Your import history | Created by the app | Which activity was imported, when, and what reached Apple Health. Identifiers and statuses only, no measurements. Included in your iCloud or computer backups like other app data. |
| Workouts and measurements in Apple Health | Written by the app with your permission | Each activity you import: heart rate, route, power, cadence, calories, weather, VO2 max, FTP and the other measurements it holds. |
| Workouts already in Apple Health | Read by the app with your permission | Workouts, routes, effort, VO2 max and FTP are read to tell you when an activity is already there. |
The developer of Legato never receives any of this. The app only sends data to the services below, directly from your device. Only the anonymous counts described below leave it.
Services the app connects to
- Garmin. To reach your activities, the app connects to Garmin’s services (sso.garmin.com and connectapi.garmin.com) with your own Garmin account, as the Garmin Connect app does. Garmin processes that connection under its own privacy policy. Legato is not affiliated with Garmin.
- getlegato.app, our site. When it launches or comes back to the screen (at most hourly), and when it signs you in to Garmin or renews that connection, the app downloads from our site a signed configuration file: the public OAuth key Garmin’s sign-in requires, the oldest app version still supported, and any notice for users. The request carries only the app’s name and version number; nothing you entered or recorded is sent. Cloudflare, which hosts the site, processes your IP address to deliver the file and to limit abusive requests; the site keeps no log of this request. Legal basis: our legitimate interest in keeping the app working and telling you what you need to know (GDPR art. 6(1)(f)).
- Apple Maps. Routes are drawn on Apple Maps. Apple receives the map area being displayed, under Apple’s privacy policy.
- Apple Health, which is on your device (below).
Anonymous usage statistics
The app shares fully anonymised usage analytics to understand how people use it and improve the service: per day, how many activities were imported by type, and how many activities of Garmin types it doesn’t import yet were listed, with the app’s version. No identifier of you or your device is sent or created, and no measurement, time or place from your activities. Our site adds these counts to day totals and keeps the totals for 25 months. Legal basis: our legitimate interest in improving the service (GDPR art. 6(1)(f)). They are on by default; turn them off in Legato’s Settings › Share anonymous statistics, which also forgets what the app had counted. The counts wait on your device until they are sent. Each report carries a random number, new for every report, so that a report sent twice counts once; our site keeps it for 60 days. Cloudflare, which hosts the site, processes your IP address to receive the report and to limit abusive requests; the site keeps no log of it.
Apple Health
The app asks for your permission before writing to or reading from Apple Health. You can change it at any time in the Health app, under your profile › Apps › Legato, or in Settings › Privacy & Security › Health. Data from Apple Health is used only to show and import your activities. It is never used for advertising, never sold, never shared with anyone and never sent off your device by Legato.
How long it stays, and how to delete it
- Signing out in Legato deletes your Garmin session from your device. It does not end the session at Garmin; you can do that from your Garmin account.
- Deleting the app deletes the activity files and the import history it keeps. iOS can keep Keychain items after an app is deleted; Legato removes your Garmin session if you install it again. To remove it right away, sign out in Legato first.
- Workouts written to Apple Health stay there, like those of any other app, until you delete them in the Health app.
App Review demo
The app contains a demo sign-in for Apple’s reviewers. It lists sample activities recorded by the developer and bundled with the app, and it contacts no service.
Crash reports
If you agreed to share analytics with app developers in your device settings, Apple may send us crash reports through App Store Connect. They contain technical details of the crash, not your name, contact details, activities or health data. You can turn this off under Settings › Privacy & Security › Analytics & Improvements.
This site
Hosting
The site is served by Cloudflare, Inc. To deliver pages and protect the site, Cloudflare processes technical data such as your IP address, browser and the page requested. The site’s own logs are kept for at most 7 days. Legal basis: our legitimate interest in running a secure site (GDPR art. 6(1)(f)).
Visit statistics
We use Cloudflare Web Analytics to count visits and pages viewed. It sets no cookie, does not fingerprint your browser and does not follow you across sites; we see aggregated numbers only. Legal basis: our legitimate interest in knowing which pages are read (GDPR art. 6(1)(f)).
When you write to us
When you use the contact form or write to hello@getlegato.app, we receive your name, your e-mail address, your message and the language of the page you wrote from, and use them only to answer you.
- Anti-spam. The form uses Cloudflare Turnstile, which checks your IP address and browser signals to tell a person from a bot. It does not use cookies for tracking or advertising.
- Delivery. The form’s message is delivered by Resend, Inc., an e-mail service, which keeps it for up to 30 days, our Free plan’s data retention, under its privacy policy. Mail to hello@getlegato.app is forwarded by Cloudflare Email Routing to the developer’s mailbox, hosted by an e-mail provider.
- Retention. We keep your message as long as we need to answer you and delete it at the latest 12 months after the conversation ends.
- Legal basis: answering your request (GDPR art. 6(1)(b)) and our legitimate interest in keeping the form free of spam (art. 6(1)(f)).
Processors and transfers abroad
We rely on Cloudflare, Inc. (hosting, statistics, anti-spam, e-mail forwarding), Resend, Inc. (e-mail delivery) and the developer’s e-mail provider. Cloudflare and Resend are based in the United States. Transfers to them rely on the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified, and otherwise on the European Commission’s standard contractual clauses, which Switzerland recognizes.
Your rights
You can ask us to see, correct or delete the personal data we hold about you, to receive a copy, to restrict its processing, or object to it. Write to hello@getlegato.app. Since your credentials and activities never reach us, the only data we can hold is your messages and what the site’s host logs. We make no automated decisions about you. The usage statistics can’t be linked to you, so there is nothing of yours to find or delete in them.
If you think we handle your data unlawfully, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the data protection authority of your country.
Children
Legato is not directed at children under 16.
Changes
If this policy changes, the new version is published here with a new date. Translations are provided for convenience; if they differ from this English version, the English version prevails.