Terms of Service

These Terms of Service ("Terms") are an agreement between you and Bestony, an individual developer based in the People's Republic of China (Mainland China), who operates GHealth Connector by StillWarm.app ("the Service", "we", "us"). By creating an account or using the Service, you accept these Terms. If you do not accept them, do not use the Service.

Our Privacy Policy forms part of these Terms and describes what we do with your data.

GHealth Connector by StillWarm.app lets you:

• connect your Google Account and authorize access to Google Health;
• read the health data categories you authorized, live from Google, reaching back up to 90 days, without storing a server-side copy;
• write records back to Google Health, for the categories where you granted write permission;
• optionally expose your own data to a Model Context Protocol (MCP) application that you choose and approve.

The Service is a tool for working with data you already own. It is not a health record system of record, and it is not a substitute for the apps and devices that produce your data.

• You must be at least 18 years old and able to enter into a binding agreement.
• You must give accurate account information and keep it up to date.
• You are responsible for your credentials and for everything done through your account. Tell us at bestony@linux.com as soon as you suspect unauthorized access.
• One account per person. Do not share an account, and do not let anyone else use yours.

• The Service needs a Google Account. Your use of that account is governed by your agreement with Google, not by us.
• Health access is a separate consent from signing in. You grant it on Google's consent screen, permission by permission, and you can leave any of them unticked.
• Authorization is incremental: a later request adds permissions without revoking earlier ones. Your dashboard always shows what Google actually granted, which may be less than what was asked for.
• You can revoke everything at https://myaccount.google.com/permissions at any time. Features that depend on the revoked permission will stop working, which is expected and is not a fault in the Service.
• Google may change, restrict or withdraw its APIs. If that breaks a feature, we may have to change or remove it.

The data the Service shows comes from consumer devices and apps by way of Google Health. It can be incomplete, delayed, duplicated or simply wrong — because a sensor was inaccurate, a device did not sync, a permission was withdrawn, or an API call failed. Any summary, trend or answer the Service produces from that data inherits those limits.

Do not use the Service to make decisions about medication, treatment, or whether to seek care. You use it, and anything derived from it, at your own risk.

You own your health data. Nothing here transfers ownership of it to us.

You grant us a limited, non-exclusive, revocable, royalty-free licence to process and transmit your data solely to operate the features you asked for — retrieving it live from Google, returning it to you, writing back what you asked to write, and serving it to an MCP client you connected. The licence exists only to make the Service work, and it ends when you withdraw the applicable permission or delete your account.

We do not use your health data to train or fine-tune machine learning models, we do not sell it, and we do not use it for advertising. The Privacy Policy states the full set of limits, including the Google API Services User Data Policy commitments we are bound by.

MCP access is an optional feature. It requires either an API key you generate or an OAuth application you approve. An API key can access your account's MCP data. An OAuth application can access only your account and the scopes in its approval.

• You choose the application. You are responsible for the applications you approve, and approving an application is your instruction to disclose your health data to it within the displayed scopes until you revoke that approval. When you connect one, your health data is sent to it at your direction. If it forwards your data to a model provider or anywhere else, that is a consequence of the client you chose, and its terms govern what happens next.
• You are responsible for your API keys. Treat an API key like a password. Anyone holding it can read your MCP health data. Do not commit it to a repository, paste it into a shared document, or give it to anyone you would not hand your health records to.
• Transfers cannot be undone. Revoking an API key stops future access for that key. Revoking an application's approval deletes the approval and its stored access and refresh tokens; the MCP endpoint rejects its old access token on the next request. These controls are independent and do not revoke each other. Data a client already received is beyond our reach.
• We may protect the endpoint. We can rate-limit, suspend or revoke MCP credentials that appear compromised, abusive, or that threaten the Service's stability. Where practical we tell you first.

You agree not to:

• access or attempt to access any account or data that is not yours;
• circumvent authentication, authorization, rate limits or any other protective measure;
• probe, scan or test the Service's security, or interfere with its operation, without our written permission;
• scrape, bulk-export or otherwise extract data beyond your own, or use the Service to assemble a dataset about anyone else;
• resell, sublicense or commercially redistribute the Service;
• reverse-engineer or decompile the Service, except where the law expressly permits it;
• use the Service in a way that breaks Google's terms or the Google API Services User Data Policy;
• use health data obtained through the Service to make decisions about anyone's credit, insurance, employment or eligibility for anything;
• use the Service for anything unlawful, or to infringe anyone's rights.

The Service is provided on an ongoing but not guaranteed basis. We may add, change, suspend or discontinue features at any time, and there is no uptime commitment or service level agreement. If we decide to shut the Service down permanently, we will give you reasonable advance notice and a window in which to export or delete your stored account data.

The Service is free to use. We do not charge you, and we do not ask for or hold payment details.

The Service depends on third parties — Google above all, plus hosting and infrastructure providers, and any MCP client you connect. We do not control them, we do not endorse them, and we are not responsible for their acts, omissions, availability, or terms. Your relationship with each of them is your own.

You may stop using the Service at any time, revoke our Google access, and ask us to delete your account — we complete deletion requests within 30 days.

We may suspend or terminate your account if you materially breach these Terms, if we are legally required to, or if your use poses a security or stability risk to the Service or to other users. Except where that is impossible or would defeat the purpose, we will tell you why and give you a chance to export your data first.

section 5, and section 13 through section 16, survive termination, along with any provision that by its nature should.

To the maximum extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, whether express, implied or statutory, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be uninterrupted, timely, secure or error-free, nor that the health data it retrieves or derives is accurate, complete or current.

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, exemplary or punitive damages, nor for lost profits, lost data, lost goodwill, or the cost of substitute services, arising out of or related to the Service — whether the claim is framed in contract, tort or otherwise, and even if we were told such damages were possible.

Our total aggregate liability arising out of or related to the Service is limited to the greater of the amounts you paid us in the twelve months before the event giving rise to the claim, or USD 100.

Some jurisdictions do not allow certain exclusions or limitations. Where that is the case, these limits apply only to the extent permitted, and nothing here excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded.

You agree to indemnify and hold us harmless from claims, damages, liabilities and reasonable costs arising from your use of the Service in breach of these Terms, your violation of law, or your infringement of anyone's rights — including anything that results from an MCP client or credential you chose to connect or share.

These Terms are governed by the laws of the People's Republic of China (Mainland China), without regard to its conflict-of-laws rules.

Resolve it informally first

If something goes wrong, email bestony@linux.com and describe the problem. Most disputes are a misunderstanding, and we would rather fix it than litigate it. If we have not resolved it within 30 days of your email, either of us may take it further.

Then, the courts

Any dispute that cannot be settled informally shall be submitted to the courts with jurisdiction at the operator's place of residence. If you are a consumer, this does not deprive you of the protection of mandatory rules — including the right to bring proceedings — that the law of your own country of residence gives you.

We may update these Terms. The "Last updated" date at the top always reflects the current version. For material changes we will give you notice by email or in the app before they take effect. Continuing to use the Service afterwards means you accept the updated Terms; if you do not accept them, stop using the Service and ask us to delete your account.

• Entire agreement. These Terms and the Privacy Policy are the whole agreement between us about the Service, and supersede anything said before.
• Severability. If a provision is unenforceable, it is limited or removed to the minimum extent necessary and the rest stays in force.
• No waiver. Not enforcing a provision once is not a waiver of it.
• Assignment. You may not assign these Terms. We may assign them to a successor operator of the Service, on the notice described in the Privacy Policy.
• Notices. We reach you at the email address on your account; you reach us at bestony@linux.com.
• Language. These Terms are written in English. If we publish a translation and the two conflict, the English version controls.

• Email: bestony@linux.com
• Operator: Bestony, an individual developer based in the People's Republic of China (Mainland China)
• Service: https://www.stillwarm.app