FUZB Legal

Privacy Policy

Last updated: 5 October 2026

This privacy policy applies to this website (www.fuzb.net) and to all applications and services developed by Steven Gill ("I", "me", "my"), including but not limited to SG-PlannerSync, SG-Wayfinder, and SG-Health (collectively referred to as "the Services"). This policy describes what personal information the website and the Services collect, how it is used, and your rights regarding that information.

What Personal Information Is Collected

The type of personal information collected depends on the Service you use:

• SG-PlannerSync — may process project plan data (task names, assignments, dates, and other project metadata) from Microsoft Project files and Microsoft Planner in order to perform synchronisation.
• SG-Wayfinder — may access floorplan, geolocation, device location and orientation sensor data in order to provide indoor navigation functionality.
• SG-Health — processes health and fitness data, your account details and anything you type into it. Because this includes health data, it is covered in its own section: SG-Health and your health data.

Apart from SG-Health accounts (which sign in with your email address) and paid subscriptions (where the payment provider holds your billing details), the Services do not collect names, email addresses, or other directly identifying information unless you voluntarily provide it (for example, when contacting support).

How Your Information Is Used

Any personal information processed by the Services is used to provide the functionality you have chosen to use, and — as described under Cookies and Tracking below — to understand how the website and the Services are used so that they can be improved. Specifically:

• Data is processed to deliver the features and services you expect, and to measure how those features are used.
• Data is processed locally on your device wherever possible (SG-PlannerSync, for example, works entirely in your browser), and is only sent to a server when the feature needs it. SG-Health stores your data on a server, as explained below.
• Data is never used for advertising or profiling, and never for any purpose beyond running, measuring and improving the website and the Services.

Data Sharing and Selling

I will never sell, rent, trade, or share your personal data with third parties for marketing, advertising, or any commercial purpose. Your data is yours.

SG-Health and your health data

SG-Health handles information about your health, which UK data protection law treats as special category data and protects more strictly. This section explains exactly what it holds, where it goes and why.

What SG-Health holds

• Your account: your email address, used to send you a one-time sign-in code.
• Profile details you enter: such as your date of birth, sex, height, health conditions and medications.
• Data from sources you connect: for example weight and body composition (Withings), sleep, heart rate, HRV and activity (Oura Ring), and steps, workouts and vitals (Apple Health).
• Blood test results you upload, paste or enter.
• What you write or say to it: chat messages, voice conversations, journal entries and notes, and the summaries ("memory") the AI health team keeps so it can follow up.

Why, and the legal basis

Your data is used only to run SG-Health for you: to show your dashboards and trends and to power the AI health team. It is never used for advertising, never sold, and never used to make decisions about you.

I process your account and data to provide the service you have signed up for. Because health data is special category data, I rely on your explicit consent to process it. You give that consent when you connect a source or enter health information, and you can withdraw it at any time by disconnecting the source, deleting the data or asking me to delete your account.

AI providers

The AI features only work by sending relevant parts of your data to an AI model. They are sent when you use the chat, voice or insight features, and by background features that summarise your notes and keep the health team's memory up to date.

• Text chat and insights are sent through OpenRouter, which passes each request to the third-party AI model provider that runs the selected model. The model, and so the provider, can change over time. Each provider processes the request under its own terms.
• Voice chat and voice previews are processed by OpenAI, which receives your speech along with the health context the conversation needs.

Only what a request needs is sent, not your whole record. These providers are processors acting on my instructions, and their own privacy policies explain how they handle and retain data.

Where it is stored and processed

• Your SG-Health data is stored in Microsoft Azure in the UK (UK South).
• The app and its API run on Azure Static Web Apps in Western Europe.
• The AI providers above may process requests in the United States or other countries outside the UK. Where data leaves the UK, it is protected by the providers' contractual safeguards, such as the UK International Data Transfer Addendum or the UK-US data bridge where it applies.

How long it is kept

Your data is kept for as long as you have an account. If you ask me to delete your account, your SG-Health data is deleted from storage within 30 days. Data you disconnect or delete inside the app is removed from your account straight away. Requests already sent to AI providers are kept only for as long as their own policies allow.

Not medical advice

SG-Health is not a medical device and does not provide medical advice. See the Terms of Service.

Third-Party Services

Some Services may connect to third-party APIs in order to function (for example, Microsoft Graph API, health data providers, or cloud storage). When data is shared with these services, it is done solely to provide the requested functionality and is governed by the respective third party's privacy policy. I only integrate with reputable services and never send your data anywhere unnecessary.

Data Storage and Security

I take reasonable steps to protect any personal information processed by the Services. This includes:

• Using secure, encrypted connections (HTTPS) for all data transmission.
• Minimising data collection to only what is necessary for the Service to function.
• Processing data locally on your device wherever feasible, reducing exposure to external systems.
• Not retaining personal data longer than necessary to provide the Service.
• Storing data in the UK wherever possible. Where a Service uses a provider outside the UK, this policy says so (see SG-Health).

Cookies and Tracking

I may use cookies, analytics and similar tracking technologies on this website and in any of the Services, in order to understand how they are being used and to make them better. Where I do, it is for measurement only: never for advertising, never to build a profile of you, and never to sell or share your data with anyone.

Today that means Google Analytics 4 on this website. It records things like which pages are viewed, how visitors arrived at the site, the approximate region a visit came from, and the browser and device used. Google Analytics 4 does not log or store IP addresses, and I have no way to identify you personally from it. Google's handling of the data is covered by Google's Privacy Policy.

If analytics are added to one of the Services, or the tools used on this website change, this section will be updated to say so and the "last updated" date above will change with it.

If you would rather not be counted, you can install the Google Analytics Opt-out Browser Add-on, or use any ad or tracker blocker, or your browser's tracking protection. Everything works exactly the same either way — nothing depends on analytics.

Third-party services integrated into the Services may use their own cookies or similar technologies — please refer to their privacy policies for details.

Children's Privacy

The Services are not directed at children under 13 and I do not knowingly collect any personal information from children. If you believe a child has provided personal information through one of the Services, please contact me so I can take appropriate action.

Your Rights

You have the right to:

• Access the personal data the Services hold about you, and get a copy of it.
• Have inaccurate data corrected.
• Have your data deleted.
• Restrict or object to how it is processed.
• Take your data elsewhere (data portability).
• Withdraw your consent at any time, without affecting processing that has already happened.

To use any of these rights, contact me through the support page. I will reply within one month. For Services that work only on your device, you can also delete your data by clearing the app data or uninstalling the Service.

If you are unhappy with how your data has been handled, you can complain to the UK's Information Commissioner's Office (ICO), though I'd appreciate the chance to put it right first.

Changes to This Policy

I may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "last updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy.

Contact

If you have any questions or concerns about this privacy policy or how your data is handled, please contact me through the support page.