Connecting is voluntary.
You decide whether to connect Apple Health or Garmin and which provider permissions to grant. Declining or revoking device access does not remove your ability to participate manually in eligible Wellness OS activities.
When provider connections become available, Wellness OS will ask for your affirmative permission before importing any eligible activity. Apple and Garmin may also present their own permission screens and terms.
We limit collection to activity verification.
- The connected provider, such as Apple Health or Garmin
- A provider activity identifier used to prevent duplicate credit
- Activity category, start date and time, and duration
- Whether the provider reports that a workout was recorded by the approved wearable rather than entered manually
- Whether an eligible workout or step goal was completed
- Synchronization and verification timestamps
- Calories, heart rate, sleep, stress, blood pressure, or respiration
- Age, sex, weight, body composition, Pulse Ox, or reproductive health information
- Location, routes, medical records, or raw sensor streams
Activity data supports the employee experience.
Eligible connected-device information may be used to verify participation, prevent duplicate activity credit, update your private progress and rewards, troubleshoot synchronization, and produce privacy-protected organizational participation totals.
A workout qualifies only when an approved Apple Watch or Garmin device records one continuous session with at least ten minutes in an eligible strength, aerobic/endurance, studio-movement, or active-sport category. Provider-supplied pause, rest, and transition time is excluded. Manual entries, unapproved imports, excluded categories, previously processed provider identifiers, and future-dated records do not qualify. A longer or additional workout does not create another workout credit that day, and daily step-goal credit remains separate.
Accepted activity points, including verified completions from an optional connected device, may contribute to your private weekly Wellness Score. Raw health readings are not used. Your individual score is not shared with your employer.
Wellness OS does not sell connected-device information. It is shared with service providers only when necessary to operate and secure the service, subject to appropriate contractual and privacy safeguards, or when required by law.
Individual details stay out of leadership reporting.
You can see your own connected activity and connection status. Authorized administrators may see the minimum verification status needed to operate the program or resolve a synchronization problem. They do not receive raw health readings.
Leadership receives only privacy-protected organizational totals. Wellness OS suppresses employee-behavior reporting when the minimum privacy threshold is not met and does not provide leadership with an employee's device readings or individual activity history.
Information is kept only for defined operational needs.
- Provider access tokens are deleted when you disconnect.
- Raw provider payloads are not retained after processing, except for a maximum 24-hour failed-sync recovery window.
- Duplicate-prevention identifiers and privacy-safe synchronization errors are retained for 30 days.
- Verified activity and reward records are retained for two years after your last participation.
- Consent and revocation evidence is retained for seven years after participation ends.
Legal holds may temporarily suspend deletion. Properly de-identified organizational information may be retained longer when it can no longer reasonably identify an individual.
You can disconnect and request deletion.
When the integrations are active, you will be able to disconnect a provider from Wellness OS. Disconnecting stops future synchronization and deletes the provider access token. You can also revoke access directly through Apple Health or Garmin.
Disconnecting does not automatically erase activity already verified. You may separately request deletion of eligible connected-device information by emailing info@athleticinstinct.com. Some records may be retained when required for security, legal obligations, dispute resolution, or documented program administration.
Questions or privacy requests are welcome.
Wellness OS uses access controls, secure provider authorization, restricted administrative permissions, privacy-safe logging, and encryption provided by its hosting and communications infrastructure. No system can guarantee absolute security, but access is limited to what is needed to operate the service.
This policy may be updated as provider requirements or Wellness OS capabilities change. Material changes affecting connected-device information will be communicated before the new use takes effect when required.