Privacy policy

1. Data the app accesses

After the account holder authorizes access through Google, MDSleepChart reads sleep records through the Google Health API. It requests only the https://www.googleapis.com/auth/googlehealth.sleep.readonly permission.

The app retrieves sleep dates, start and end times, duration, and sleep-stage information. It uses these records to calculate sleep efficiency and a simple rating, and to create personal charts and exports. These calculations are not medical diagnoses.

The read-only permission does not allow the app to edit the source sleep records.

2. How the app uses and stores data

The sync runs on the account holder’s Windows computer. It creates an HTML chart, a CSV export, and a JSON file in a local output folder. The output location can be changed. OAuth configuration and authorization tokens are stored in a separate local app configuration folder.

On successful report generation, the app replaces its three output files using the selected lookback period, which defaults to 28 days. This is not an automatic deletion policy: existing files remain when the sync is stopped, and copied exports, logs, backups, and source archives are not removed by this process.

The files and credentials are ordinary local files. The app does not provide its own encryption at rest. Access to them depends on the computer’s account permissions and any device protection, backup, or folder-sync settings.

Normal progress logs contain counts and file paths. Optional raw-response logging and API error messages may include personal information. Logs should be handled as potentially sensitive; the script has no log-rotation mechanism.

3. Sharing and network connections

The sync connects to Google to request consent, exchange or refresh authorization tokens, and retrieve authorized identity and sleep information. Authorization uses a temporary callback on the same computer.

The local sync has no analytics, advertising, telemetry, email, or public-upload function, and does not upload downloaded sleep records to another service. Its generated HTML report is self-contained and does not load external scripts, fonts, or other resources.

Charts, exports, credentials, and logs are not uploaded to this informational website. Copies that the account holder separately shares, backs up, or places in a synced folder are outside the sync script’s control.

4. Stopping access and removing local copies

To stop scheduled retrieval, disable the Windows scheduled task that runs the sync. You can also review or remove MDSleepChart’s authorization in your Google Account connections.

Removing Google access stops further authorized access, but does not erase files already downloaded. The app has no built-in deletion or revocation button.

To remove local copies, delete the generated HTML, CSV, and JSON files and the app’s local authorization files. Separately review and remove any logs, copied exports, and backups you no longer need. Stopping the scheduled task first avoids generating new copies.

Deleting local files does not delete records held by Google or any separate source archive.

Google explains its authorization controls in Manage links between your Google Account and other apps.

5. This informational website

This website is separate from the local sync. Its current source contains only static pages, styles, and a logo. It includes no analytics script, advertising, account sign-in, health-data upload, or application cookie code.

Following an external link takes you to that provider’s website, which has its own data practices.

The infrastructure that delivers this website may process routine request metadata, such as IP addresses, browser information, request times, and security logs. This website-delivery information is separate from the sleep records processed by the local app.

6. Policy updates

This notice describes the current personal-use version of MDSleepChart. It will be updated if the app’s data practices change. The date above identifies the latest revision.