Privacy Policy
This policy explains how Crónica del Aventurero, a personal project by Andrés Bustos published at andresb.dev/proyectos/cronica-del-aventurero, accesses, uses, stores and shares data from Google APIs. It turns daily health and fitness numbers into a 16-bit RPG: levels, stats, weekly goals and advice.
Who uses the app
The app is used by a single person: its author, Andrés Bustos. It only connects to the author's own Google account. It does not offer sign-in to other people and does not access anyone else's data. Visitors of andresb.dev don't sign in and no data is collected from them.
Data accessed from Google
With the author's consent, the app reads the following data through the Google Health API (read-only scopes):
- Activity and fitness (
googlehealth.activity_and_fitness.readonly): daily step count and daily active minutes (moderate and vigorous). - Sleep (
googlehealth.sleep.readonly): minutes asleep per day. - Health metrics and measurements (
googlehealth.health_metrics_and_measurements.readonly): daily resting heart rate.
The app never writes, modifies or deletes any data in the Google account.
How the data is used
Once a day, a script reduces the data above to one summary per day (date, steps, minutes asleep, active minutes, resting heart rate). Those summaries are used only to show the author's progress in the game: character level and stats, weekly goals, boss battles, comparison charts and an estimated "physiological age". The data is not used for advertising, profiling, selling, credit or insurance decisions, or for training AI models.
How the data is stored and published
- The daily summaries are stored in a JSON file in the GitHub repository that hosts andresb.dev and are published on the website by the author's own choice, as part of his portfolio. They are visible to anyone who opens the project page.
- The OAuth credentials (client secret and refresh token) are kept as encrypted GitHub Actions secrets and on the author's computer. They are never published.
- No raw data streams, locations, or data other than the daily summaries listed above are stored.
Sharing with third parties
- Anthropic (Claude API): once a day, the current week's daily summaries are sent to the Claude API to write three short, non-medical recommendations shown in the game ("the Sage"). Anthropic processes them only to generate that response.
- GitHub: hosts the repository, runs the daily update (GitHub Actions) and serves the website (GitHub Pages).
Data from Google APIs is not sold and is not shared with anyone else.
Limited Use
The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
The daily summaries are kept while the project is online so the game can show history. The author can delete them at any time by removing the data file from the repository and the website. Access can be revoked at any time from myaccount.google.com/permissions; after that, no new data is read.
Security
Data is transferred only over HTTPS. The OAuth credentials are stored as encrypted secrets with access limited to the repository owner, and the app only requests read-only scopes.
Use of the app and of andresb.dev is also covered by the Terms of Service.
Changes and contact
If this policy changes, the new version will be published on this page with a new date. For any question, write to andres0613@utp.edu.co.