Connected Services Privacy Policy

Sequorr LLC ("Sequorr", "we", "us", or "our") respects your privacy and is committed to protecting the data you choose to share with us from other services. This Connected Services Privacy Policy describes what data we receive from third-party services you connect to the Sequorr mobile application and related services, including Findrr by Sequorr (collectively, the "Service"), how we use it, how we protect it, and how you can disconnect or delete it. It applies to Garmin, Oura, Polar, Suunto, and Wahoo (the "Third-Party Services").

This policy supplements our Privacy Policy. Where the two differ on data from Third-Party Services, this policy controls. By connecting a Third-Party Service, you acknowledge that you have read and understood this policy. If you do not agree, please do not connect a Third-Party Service.

1Services Covered

Connecting a Third-Party Service is optional, and the Service works without one. If you choose to connect one, you authorize it through that company's own sign-in:

• Garmin, through the Garmin Connect Activity API and Health API.
• Oura, through the Oura API.
• Polar, through Polar AccessLink.
• Suunto, through the Suunto Cloud API.
• Wahoo, through the Wahoo Cloud API.

Activities > Connected Devices shows which Third-Party Services are available to connect.

2Connecting a Third-Party Service

If you choose to connect a Third-Party Service, you sign in on that company's own website and approve the data Sequorr may access. Sequorr never receives or stores your password for that account. The connection uses OAuth 2.0 authorization, and Sequorr verifies that each connection request started in your account. The Third-Party Service issues Sequorr an access token, which we store encrypted. Once connected, new data syncs to Sequorr automatically. We do not import data from before you connected.

3Data We Receive

We request only the data needed to provide the Service. Depending on the Third-Party Service and what your device records, we receive and store the following:

• Garmin: workouts (type, time, duration, distance, calories, steps, cadence, speed, elevation gain and loss, and heart rate) and each workout's file with its GPS route, heart rate, and laps; the device name; daily resting heart rate, steps, and active minutes; sleep (duration, stages, sleep score, and overnight blood oxygen); overnight heart rate variability; VO2 max; and the data types you choose to share with Sequorr in Garmin Connect.
• Oura: sleep (duration and sleep score), heart rate variability, lowest overnight heart rate (used as resting heart rate), blood oxygen, VO2 max, steps, active minutes, workouts (type, time, distance, calories, and heart rate), and your ring's model and settings.
• Polar: workouts with heart rate, GPS route, power, cadence, and laps; training load and running index; overnight heart rate variability and resting heart rate; sleep score and duration.
• Suunto: workouts with heart rate, GPS route, power, cadence, and laps; device name; sleep (duration and quality score), heart rate variability, and minimum heart rate.
• Wahoo: rides, runs, and indoor sessions with heart rate, GPS route, power, cadence, and laps; calories, ascent, and speed; and your FTP (functional threshold power).

We also store the identifiers needed to keep the connection working, such as your user ID at the Third-Party Service and the tokens it issues. To register your connection, we send Polar your Sequorr user ID. For Garmin, we request your Garmin user ID and the data types you share with Sequorr, and we ask Garmin to remove the connection when you disconnect or delete your account. Otherwise, we send a Third-Party Service only the authorization you approve and the requests needed to retrieve your data.

4How We Use It

Data from Third-Party Services is used exclusively to provide the Service to you, including to:

• Display your activities, including routes, splits, heart rate, and the metrics on each activity.
• Calculate training load, fitness, fatigue, and form (TSS, CTL, ATL, TSB), heart rate zones, and thresholds.
• Calculate your daily readiness from sleep, heart rate variability, and resting heart rate.
• Track progress toward your training plan and goals.
• Show your training history and trends.

5What We Do Not Do

Data from Third-Party Services stays within the Service unless you direct us to send it elsewhere, or we are required to disclose it as described in section 3.4 of our Privacy Policy.

6Storage & Security

Data from Third-Party Services is stored on secure servers hosted by our infrastructure providers in the United States. It is transmitted over encrypted connections (HTTPS/TLS), passes through our network provider in transit only, and is stored in an encrypted database. Access tokens for Third-Party Services are encrypted at rest with AES-256-GCM. Section 4.2 of our Privacy Policy lists our other security measures.

7Disconnecting

You can disconnect a Third-Party Service at any time in Activities > Connected Devices > Service Name > Disconnect. When you disconnect, Sequorr stops receiving new data, asks the Third-Party Service to stop sending data where it supports that, and deletes the stored access token. Data the service already sent remains in your account until you delete it, delete your account, or ask us to delete it at [email protected]. If you remove Sequorr from your account in Garmin Connect, Sequorr stops receiving Garmin data.

8Data Retention & Deletion

We retain data from Third-Party Services for as long as your account is active, so your history and trends stay available. You can delete individual activities at any time. When you delete your account, we permanently delete data from Third-Party Services within 30 days, and backups are deleted within a further 30 days, as described in section 4.3 of our Privacy Policy.

9Each Company's Policy

Each Third-Party Service is an independent company and is responsible for the data it holds about you. Data on its systems is subject to its own terms and privacy policy: Garmin (garmin.com/en-US/privacy/global), Oura (ouraring.com/privacy-policy), Polar (polar.com/en/legal/privacy-notice), Suunto (suunto.com/privacy-policy), and Wahoo (wahoofitness.com/privacy-policy). Sequorr is not responsible for the privacy practices of Third-Party Services.

10Children

The Service is not directed to children under 16 years of age, and you must be at least 16 to create an account. Only the account holder may connect a Third-Party Service. We do not knowingly receive data from Third-Party Services about anyone under 16.

11Changes to This Policy

We may update this policy as Third-Party Services are added or changed. When we make material changes, we will notify you through the Service or via email and update the "Effective" date at the bottom of this policy. Continued use of a connected Third-Party Service after changes are posted constitutes acceptance of the updated policy.

Effective October 23, 2026