Privacy

Harbor stores an account (name, email, password hash) and, after you connect a device, the data that device shares. The ring connection can include email, personal details, daily sleep, readiness, activity, heart rate, workouts, tags, sessions, blood oxygen, stress, heart health, and ring configuration. Withings, if you agree separately, can include blood pressure, activity, and sleep.

Each account has its own archive. Harbor does not show that archive to anyone who is not signed in as that account. Sessions last 30 days. Password reset mail is sent from Harbor <noreply@harbor.gammameon.eu>.

Harbor keeps a subscriber’s archive while the subscription is open. Cancelling it deletes that account’s archive file and device tokens. Deleting the account also removes the login and sessions, immediately. The original archive that was already on this server before per-account files is not erased from the website, because it lives in the same database as logins. Removing that file is a host action.

Disconnecting the ring removes the token. For an account that has its own archive file, disconnecting also deletes that file. You can download a copy of your archive from Settings. The download does not include password hashes or device tokens.

Harbor does not send archive data to an AI model. Harbor does not sell advertising against your nights. Card payments go through Stripe. Harbor sends Stripe the account email and the chosen plan. The archive is not included in that payment.