DeskFlow1. Summary
In short: DeskFlow reads steps and sleep from Health Connect only with your permission, processes them only on your phone and never sends them to us or anyone else. We don't share or sell consumer health data, and we don't use geofencing.
DeskFlow is a general wellness app, not a medical device. It doesn't provide medical advice, diagnosis or treatment.
| Question | Answer |
|---|---|
| What consumer health data is involved? | Steps and sleep sessions from Health Connect, and four daily values derived from them. |
| Where does it come from? | Health Connect on your phone, only with your permission. |
| What is it used for? | Only in-app features: your movement goal, wellness score, today's steps, coffee timing and sleep duration. |
| Do we receive it or keep it on servers? | No. We have no servers, and the data stays on your device. |
| Is it shared or sold? | No, never. |
| Can you withdraw consent or delete it? | Yes, at any time, from the app or your phone's settings. |
2. Who we are
DeskFlow is developed by Kuantis (“we”, “us”), based in Colombia. Contact: kuantis.dev@gmail.com. This policy supplements our Privacy Policy; where they differ about consumer health data, this policy applies.
3. Categories of consumer health data
In short: steps, sleep sessions and four daily values calculated from them.
- Steps: step counts from Health Connect (permission
android.permission.health.READ_STEPS). - Sleep sessions: the start and end times of your sleep sessions from Health Connect (permission
android.permission.health.READ_SLEEP). - Derived daily values: today's total steps, steps during your work hours, minutes of sleep and wake-up time, saved in your daily log on your phone. The app also shows averages of these values in Insights and includes daily steps and minutes of sleep in the CSV report if you choose to export it.
Some laws define consumer health data broadly. Your wellness logs (for example glasses of water, coffee or tea, breaks and stand-ups) and your wellness score could also fall under these laws. They're handled the same way: kept only on your device, and never shared or sold.
4. Sources
- Health Connect on your device, which stores data from your watch, band, phone or fitness apps. DeskFlow reads it only after you grant permission.
- You, when you log habits in the app.
We don't obtain consumer health data from any other source, such as data brokers or advertisers.
5. How we use it
In short: only for features you can see in the app.
- Counting the steps you take during your work hours toward your movement goal and wellness score, and showing today's steps and your averages.
- Finding your real wake-up time to adjust the suggested time for coffee or tea, and showing how long you slept and your averages.
- Including daily totals in a CSV report, only if you choose to export it.
We don't use consumer health data for advertising, profiling, research, training AI models, creditworthiness, insurance, employment or any other purpose.
6. Collection and storage
In short: we don't collect it on servers. It stays in DeskFlow's private storage on your phone.
- We don't collect consumer health data on our servers: we don't have servers. DeskFlow reads and processes it on your device, and it never leaves your device because of us.
- To the extent a law treats processing by our app on your device as “collection”, that processing is limited to what this policy describes, happens only with your consent and serves only the features you request.
- It's stored in DeskFlow's private storage on your phone. Daily logs are deleted automatically after 400 days, and you can delete them at any time.
- It can leave your device only through your own actions: the CSV report you export goes where you send it; and if you turned on Google backup, Android includes the app's data in an encrypted backup in your own Google account, which we can't access.
8. Consent
In short: you give consent on Health Connect's permission screen and can withdraw it at any time.
- DeskFlow reads Health Connect data only after you tap to connect in Settings → Watch & health and grant access on Health Connect's own permission screen, where you choose steps, sleep or both.
- You can withdraw your consent at any time: tap Stop using health data in Settings → Watch & health, or revoke DeskFlow's permissions in Health Connect. Withdrawing doesn't affect the app's other features.
- We would ask for your separate consent before any sharing and your authorization before any sale, but we don't share or sell this data.
9. Your rights
Depending on where you live (for example Washington, Nevada or Connecticut), you have the right to:
- confirm whether we collect, share or sell your consumer health data (we process it only on your device, and we don't share or sell it);
- access it, including a list of all third parties and affiliates with whom it has been shared (none);
- withdraw your consent;
- have it deleted;
- in Nevada, ask us to stop collecting, sharing or selling it;
- not be discriminated against for exercising these rights.
10. How to exercise your rights and appeal
In short: you can do almost everything yourself in the app. You can also email us, and appeal if you disagree with our answer.
- Access: see your steps and sleep in the app (Today, Watch & health and Insights), and export a CSV report from Insights → Download report (CSV).
- Withdraw consent: Stop using health data, or revoke the permissions in Health Connect.
- Delete: your phone's Settings → Apps → DeskFlow → Storage → Clear data, or uninstall the app (step by step). If you use Google backup, also delete the app's backup from your Google account.
- By email: write to kuantis.dev@gmail.com. Because we don't hold your consumer health data, there's no copy on our side to retrieve or delete, but we'll confirm this in writing and help you with the steps above. We respond within 45 days, free of charge. If we need more time (up to 45 more days, where the law allows), we'll tell you why.
- Appeal: if we decline your request, reply to our decision with “Appeal” in the subject line. We'll answer in writing within 45 days, explaining what we did and why. If you're not satisfied, you can contact your state Attorney General, for example in Washington, Nevada or Connecticut.
11. No geofencing
DeskFlow doesn't request location permission and doesn't use geofences (virtual boundaries around places), including around facilities that provide health care services. We don't identify, track or send notifications to anyone based on their presence at such places.
12. Security and breach notification
- Consumer health data stays in DeskFlow's private app storage, which Android isolates from other apps. We run no servers, and DeskFlow doesn't send health data over the network.
- No employee or contractor of ours can access your health data.
- We don't disclose identifiable health information without your authorization. If a breach of security involving identifiable health information ever occurred, we would notify the affected users, the U.S. Federal Trade Commission and, where required, the media, as required by the FTC Health Breach Notification Rule (16 CFR Part 318), and we would notify other authorities as the law requires, without undue delay.
13. Changes
We'll update the dates at the top of this policy and post a notice in the app or on this website before material changes take effect. We'll ask for your consent before using consumer health data in a materially different way.
14. Contact
Kuantis · kuantis.dev@gmail.com. See also our Privacy Policy, especially the Health Connect section.
Translations: this policy is available in English and español. If the versions differ, the English version prevails, unless your local law requires otherwise.