Privacy

AI Remote connects your Garmin watch or Edge to OpenAI's GPT, using your own OpenAI API key. This relay, run by Falkster.com (San Francisco, California, USA), runs GPT for you: it keeps only what that needs, for a short time, and sends each request to OpenAI under your own API account.

What you send with AI Remote goes to Falkster.com, not to Garmin, and Garmin isn't responsible for it. The relay runs on Railway, in the US (US West). Your device reaches the relay over HTTPS through the Garmin Connect app on your phone. AI Remote is offered in every country, so wherever you use it from, your data is processed where the relay runs, and by OpenAI as described below.

What is collected

• Vitals, only if you share them: heart rate, resting heart rate, stress, Body Battery, steps, calories, floors, intensity minutes, pulse oximetry and respiration rate.
• Recovery, only if you share it: recovery time and VO2 max. (Garmin does not give apps your sleep score or training status.)
• Activities, only if you share them: start time, sport, duration and distance of workouts.
• Prompts: what you send from the device (quick prompts, follow-up taps, typed text, notes, "workout finished" messages, answers and pause/resume/cancel requests for GPT's tasks), with up to 200 characters of the message you're answering.
• Voice messages: the audio you record on the device, and its transcript.
• Preferences: your sharing and alert settings, quiet hours, coaching level, private display, sync interval, phone alerts, time zone offset, and the device's model, type, app version and whether it has a microphone.
• Your OpenAI API key, if you pair with GPT: encrypted at rest with a key kept outside the database. It is never shown again (the pages show only a hint like sk-…a1B2), never exported and never logged. Also your model choice, and the kind of the last error OpenAI reported (such as a rejected key), so the settings page can tell you.
• Memories: short facts you asked GPT to remember, or that GPT saved from what you told it.
• Automations: each one's name, time, days and the prompt GPT runs.
• What GPT sends back for your device: a status line, quick prompts, replies, cards, questions, tasks and an action history.
• Workouts and routes GPT sends to your device: their name, steps and targets, or a route's GPS points and stops. The file is deleted once your device has it; its name stays in the list and history.
• Ride screen, only if you add the AI Remote Ride data field: a random ID for it, its model and type (watch or Edge), when it last checked in, and, while you share activities, when an activity starts and stops and its sport.

What you say or type, and what GPT writes, can include health or other personal details about you or other people. The relay stores it as described here.

Readings go with each sync (every 5 to 60 minutes, as you set), one sample each time. When you first share workouts, the last 2 days are sent. Before pairing, the device sends only its settings; pair only with the code your own device shows.

The app shows your next item (up to 24 characters) as a "Next from GPT" complication that any watch face on your watch can display; with private display on it shows "New update". The AI Remote Face sends nothing: it only shows that line and Garmin's own readings on your watch.

The relay identifies your device by a random ID. It stores only fingerprints (SHA-256 hashes) of the device's access tokens and of your settings page link, never the tokens themselves. It does not ask for your name, email or Garmin account. Your IP address is used, in memory only, to rate-limit registering, pairing and the settings page; it isn't saved. The relay keeps no request log of its own; the hosting provider logs each request (time, address requested, result) and keeps those logs for 30 days. The logs don't include what you send.

What GPT sees, and OpenAI

Each time you ask something, or an automation is due, the relay sends GPT the recent conversation (the last 24 hours, up to 12 messages), your settings, memories, automations, open questions and tasks. The Garmin data you share is sent only when GPT asks for it with a tool, for example before training advice. Voice messages are sent to OpenAI to be transcribed with your key. When GPT searches the web for you, it does so through OpenAI's web search, under the same terms.

These requests go to OpenAI under your own API account, with store: false: the relay sends the context it needs each time instead of asking OpenAI to keep the conversation. OpenAI's API terms and privacy policy govern what OpenAI does with the requests; see openai.com/policies. OpenAI bills your API account for them.

If you pair your own agent instead of GPT, no API key is stored and the relay doesn't run GPT for your device. The agent you connect can read everything listed above for your device through its token, and once it has, its provider's terms apply, not this policy.

Why, and on what basis

So GPT (or your own agent) can answer you, coach you and act on your requests with context from your device, and so its replies, questions and progress reach your wrist. Nothing is sold, used for advertising, or shared with anyone other than as described here. The relay processes your data to provide the service you set up between your device and GPT.

Health data (vitals, recovery and workouts) is processed only with your explicit consent (GDPR Art. 9). Before anything is shared, the app shows what is shared, why, who receives it and for how long, and asks you to agree. The relay records when you agreed and to which version of this text, and stores no health data without that record. You can withdraw consent at any time by turning sharing off on the device; the relay then deletes the readings it holds.

You're in control

• Health data is off until you turn it on. On the device you choose, per category, whether vitals, recovery and activities are shared. Turning a category off stops new data and, at the device's next sync, deletes the readings the relay holds for it. Messages that mention them, like "Finished running: 8.1 km" or a card from GPT, are deleted on the schedule below.
• Your settings page shows what GPT remembers and the automations it runs; delete any of them there. You can also replace your API key or change the model there.
• To disconnect GPT, choose Settings > Reconnect on the device. Your API key and settings link are deleted at once and your ride screen is unlinked. Your other data stays until it expires, and whoever pairs next with the new code can read it.
• To delete your data, choose Settings > Delete my data. The relay deletes your device, its data, your API key and its tokens at once; a linked ride screen is only unlinked, and deleted data can linger in the database's free space until it's overwritten. The relay can't delete what OpenAI (or your own agent) already received. The app then starts over as a new device and keeps your sharing choices, so turn sharing off first if you want nothing sent again.
• Removing the app deletes nothing on the relay by itself: a device that stops checking in is deleted after 180 days. To have it deleted sooner without the device, contact falk@falkster.com.

How long it's kept

• Vitals and recovery: 7 days. Activities: 30 days.
• Prompts, transcripts, conversation messages and the inbox GPT reads from: 7 days. Voice recordings: 3 days.
• Cards: until they expire (at most 3 days), then deleted 7 days later. Questions: deleted 7 days after they expire.
• Tasks: 30 days after their last update. Action history: 30 days.
• Memories and automations: until you or GPT delete them, or the device is deleted.
• Your encrypted API key: until you replace it, reconnect or delete your data.
• Your status line, quick prompts, preferences and phone alert topic: as long as the device exists.
• Which alerts were sent to your phone: 24 hours, so none is sent twice.
• Workouts and routes: the file is deleted once your device has it, or after 7 days; the record of it 7 days later.
• A ride screen is unlinked when you reconnect or delete the device, and deleted after 180 days without checking in.
• A device that hasn't checked in for 180 days is deleted with all of its data. One that registered but was never paired is deleted after a day.
• The hosting provider's request logs: 30 days. Backups of the relay, if any: 7 days.

Your rights

• A copy. On your settings page, choose "download everything the relay holds for your device", or write to falk@falkster.com. (An agent you connected yourself can also fetch it with export_data.) Your API key is never included.
• Correction. Change your settings and sharing on the device, and memories and automations on your settings page. Readings come from your Garmin; if one is wrong, or something GPT wrote about you is, write to falk@falkster.com and it will be corrected or deleted.
• Deletion. On the device with Settings > Delete my data, or, if you no longer have the device, by writing to falk@falkster.com.
• Withdrawing consent. Turn sharing off on the device at any time; it doesn't affect what was done before.

The relay holds no name or account, so in a request say which device it was (Settings > About shows its ID) and roughly when you last used it. Requests are answered within 30 days. If you're in the EU or UK, you can also complain to your data protection authority.

Phone alerts

Off unless you turn on phone alerts on your device. Then, when GPT sends something worth an alert (a reply, question, task update or card), the relay sends that alert's title and short text to the ntfy server at ntfy.sh, which delivers it to the ntfy app on your phone under its own terms. The text is the start of what GPT wrote, so it can include your health numbers (a briefing often starts with them); the relay never sends your vitals, recovery or activities as data. With private display on, only "Something needs you. Open AI Remote." is sent. Anyone who knows your alert topic can read what is sent to it, so keep it private. Turning phone alerts off stops this at the device's next sync and discards the topic; alerts already sent stay with ntfy and on your phone under ntfy's rules.

Not medical advice

AI Remote and GPT give coaching and general wellness information, not medical advice. Garmin's readings are estimates. Talk to a doctor about health concerns, and in an emergency call your local emergency number.

Contact

Questions or requests: Falkster.com, San Francisco, California, USA, falk@falkster.com.

Last updated 7 November 2026. See also the terms of use.