Privacy Policy — BabyTrack Face
Last updated: 17 May 2026 · Applies to BabyTrack Face v1.0.0 and later.
This policy applies specifically to the BabyTrack Face Garmin Connect IQ watchface. Other apps published by BIKINTULIS have their own policies — see the directory.
1. Who we are
BIKINTULIS is an independent developer of Garmin Connect IQ apps, based in Germany. For questions about this policy, use the contact form.
2. Summary in plain language
- BabyTrack Face is read-only. It displays data already collected by the BabyTrack app — it never logs new feeds, sleeps, or diapers itself.
- It does not ask for your name, email or any account credentials.
- From installation, the face checks the BIKINTULIS server about every 5 minutes (in the background) to see whether it has been paired yet, sending only a random face ID generated on the device. Once paired, it additionally downloads the household's data (day arc, last feed / sleep / diaper, predictions) using the resolved user ID. It is read-only — it never uploads logs.
- The configurable biometric top strip (Body Battery, Heart Rate, Stress, Steps) is read on-device and rendered locally — those values are never transmitted.
3. Permissions BabyTrack Face requests
| Permission | Why |
|---|---|
Communications | Background contact with the BIKINTULIS server about every 5 minutes. Before pairing: a lookup that sends a random face ID to check whether you've claimed the face yet. After pairing: a read-only download of the household's logs and predictions using the resolved user ID. The face never uploads (POSTs) logs. |
Background | Periodically refresh the displayed values so the face shows current information without requiring the BabyTrack app to be open. |
SensorHistory | Read Body Battery, Heart Rate, and Stress on-device for the configurable top strip. Values stay on the watch — never transmitted. |
4. Data this watchface uses
4.1 On the watch
- A short cache of the latest household state returned by the server (day arc, sleep blocks, feed dots, predictions, active-session flag).
- A random face ID generated on first run (used to check pairing status), and the resolved user ID once paired.
- Device sensor data from
SensorHistory(Body Battery, Heart Rate, Stress, Steps) — read on demand for the top strip; not stored or transmitted.
4.2 Sent to the BIKINTULIS server
BabyTrack Face contacts a secure endpoint on the BIKINTULIS server (read-only — it never uploads logs). What it sends depends on whether it has been paired:
- Before pairing: a random face ID generated on the device, plus its licence state (trial / active / expired) — used purely to ask "has this face been claimed yet?". No baby data is involved.
- After pairing: the resolved 16-character user ID (plus the licence state), to download the household's logs and predictions.
BabyTrack Face never writes new logs to the server — that's the BabyTrack app's job. Until it has been claimed in the BabyTrack app it shows placeholder values, but it still performs the lightweight pairing-check poll described above.
5. What BabyTrack Face does NOT collect or send
- No real name, email address, phone number, postal address, or any account credential.
- No GPS / location data.
- No biometric values are transmitted — Body Battery / HR / Stress / Steps stay on the watch.
- No install location, IP geolocation, or device IMEI / MAC.
- No data from any other app on your watch.
- No advertising or analytics SDKs of any kind.
6. Garmin Connect & your Garmin account
BabyTrack Face runs inside Garmin's Connect IQ platform. Garmin's own collection and use of data is governed by Garmin's policy at garmin.com/privacy. BIKINTULIS has no access to your Garmin account, your activities, or anything synced to Garmin Connect.
7. The bikintulis.de website
Separate from the watchface, when you use the bikintulis.de website itself:
- If you leave a comment or review, your name, email, rating and comment text are stored. Your name, rating and comment are published publicly after moderation; your email is never published.
- If you use the contact form, your name, email, subject and message are stored privately and used to reply to you. If you attach a photo or video (optional, up to 20 MB), it is stored on the BIKINTULIS server alongside the message and only viewable by the site owner via an authenticated admin panel. The attachment is deleted when the message is deleted.
- Your IP address is stored only as a salted SHA-256 hash (rate-limiting / spam prevention). The raw IP is not retained.
- Standard web-server access logs are kept up to 30 days.
- No cookies, no third-party analytics, no advertising, no tracking pixels.
8. Legal basis (GDPR)
- Performance of a service — reading the household's shared data, which exists because a paired BabyTrack instance opted in.
- Your consent — when you submit a comment or contact message on the website.
- Legitimate interest — IP hashes and server logs, used solely to keep the site secure and operational.
9. Data retention
- Cached household state on the watchface: overwritten on each refresh; removed when you uninstall the face.
- Server data: tied to the household; deleted when the household is deleted (see the BabyTrack policy for household retention).
- Website comments: retained while BabyTrack Face is listed on this site.
- Contact messages: retained as long as needed to handle your enquiry, then deleted.
- Server access logs: up to 30 days.
10. Your rights
You have the right to:
- Ask what data is held about you (provide your watch-generated user ID — find it in BabyTrack → Extras → License).
- Ask for your household data to be deleted from the server.
- Ask for your data to be corrected.
- Withdraw consent at any time (uninstall BabyTrack Face to stop reading; uninstall BabyTrack and leave the household to delete the upstream data).
- Object to processing that relies on legitimate interest.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, use the contact form. Requests are answered within 30 days.
11. Security
- All traffic between BabyTrack Face and the BIKINTULIS server is over HTTPS.
- The server stores data in a private database not exposed to the public internet.
- No payment data is ever handled by BIKINTULIS — purchases go through the Garmin Connect IQ store.
12. Children
BabyTrack Face displays data about a baby (their next nap, when they last fed, etc.) — but it is designed for and used by the parent or caregiver. It does not target children as users and does not collect any personally identifying information about the child.
13. Changes to this policy
This policy may be updated to reflect new BabyTrack Face features or legal requirements. The "Last updated" date at the top reflects the latest change. Continued use of BabyTrack Face after a change indicates acceptance of the updated policy.
14. Contact
Questions, requests or complaints about this policy: please use the contact form.