Skip to main content

Data Permissions

Grant or withdraw watch, relay, Health Connect, sync and AI access one by one

Optional health sharing is off

Sharing is your choice. Account sync, Health Connect writes and AI summaries start off unless you previously enabled them. You can refuse sharing and still use local readings, calculations and history.

Withdrawal blocks new requests; it cannot recall data already sent or erase saved cloud records. Existing share links, downloaded reports, manually sent alerts and the phone relay app’s own Samsung Health sync are separate. Manage them separately. Account sign-in and billing can still contact online services.

Hardware on this device

Readings taken through these stay on this device until a sharing switch below sends them on.

Samsung Watch 7 access

Let the app connect to your watch and read its sensors.

What happens
Opens a Bluetooth link to the watch and subscribes to heart rate, beat-to-beat intervals, skin temperature, blood-oxygen and activity. Readings stay on this device unless another permission below sends them on.
If you switch it off
No live vitals, no HRV, no readiness or ECG fusion.

Phone Bluetooth relay

Accept watch and scale data from the relay app on your phone.

What happens
Connects to the relay's local WebSocket on your own network. The relay holds the Bluetooth link to the watch and the smart scale and forwards readings to this console.
If you switch it off
No relay stream: the scale and the watch only work over this device's own radio.

Sending data elsewhere

These are off until you turn them on. Each one is a separate decision — allowing one never implies the others.

Health Connect writes

Let weigh-ins be written into your phone's Health app.

What happens
Sends a write request over the relay link so the phone stores the weigh-in in Health Connect, where other health apps can read it. Body composition is only included when the scale actually measured body resistance.
If you switch it off
Your readings stay inside Body-PulseX and are not visible to other health apps.

Web console sync

Sync weigh-ins and baselines to your signed-in account.

What happens
Uploads weigh-ins and body measurements to your own private account rows so the phone, browser and desktop app show the same history. Nothing is shared with other people unless you create a share link.
If you switch it off
History stays on this device only and does not appear on your other devices.

AI health briefing

Send a numbers-only summary to the AI model for interpretation.

What happens
Sends the derived indices — trend slopes, baseline corridors, significance values — with no name, contact detail, raw waveform or location attached, and returns a written briefing. Nothing is stored by the model.
If you switch it off
The AI briefing panel stays empty; every other number is unaffected.

These safeguards are informed by consent and withdrawal guidance, not a claim of certification. No app can guarantee protection from coercion or a compromised device. Turning a switch on does not determine whether a particular use is lawful.

Uploaded health-data copies

These copies belong to your signed-in account. Deleting a cloud copy leaves local readings unchanged. Deleting a shared report also removes its link.

Checking account…

Deletion turns off web console sync in this browser, including same-site tabs. Another device, an upload already sent, or turning sync back on can upload retained readings again. Review sync on your other devices before deleting.

Copies outside this control

  • Samsung Health / Health Connect — cannot remove here. Stored copies are not inventoried by this page. Review and delete them in those phone apps; the relay’s own Samsung sync is separate.
  • Downloaded reports, alerts and recipient copies — cannot recall. Files or messages already saved or sent must be removed by their holder. The app cannot confirm deletion.
  • AI submissions — removal unverified. Reviews request no model storage, but this page cannot inventory or erase provider-side processing records.
  • Service backups — removal unverified. The delete action confirms removal from the app’s active account storage, not backup erasure.

Activity log

When each permission above was switched on or off, and everything the app refused to do while one was off. Kept on this device only — never uploaded, never part of a report, and it records the decision, never the reading behind it.

Deleted automatically after 365 days (permission changes) and 30 days (blocked actions). Retention review

  • Samsung Watch 7 access

    No change recorded on this device

  • Phone Bluetooth relay

    No change recorded on this device

  • Health Connect writes

    No change recorded on this device

  • Web console sync

    No change recorded on this device

  • AI health briefing

    No change recorded on this device

Nothing recorded yet. Changing a switch above, or the app declining something because a switch is off, appears here straight away.

Cookies and crash reporting are separate and controlled on the privacy page.