Privacy

This extension runs entirely on your own computer. There is no server operated by the author, and nothing is sent to the author — no data, no telemetry, no analytics, no error reports.

Last updated 20 September 2026.

Your Garmin password

When you install the extension, Claude Desktop asks for your Garmin email and password and stores them in its own configuration. They are passed to the extension when it starts.

The password is used once, to ask Garmin for an access token. That token is then saved on your computer at ~/.garminconnect, readable only by your user account, and the password is not used again unless the token is rejected — typically after about a year, or if you change your Garmin password.

Your password is never written to disk by Zone Two, never logged, and never transmitted anywhere except directly to Garmin's own sign-in service.

Your health data

Requests go directly from your computer to Garmin. There is no intermediary.

Data you ask about is sent to Anthropic. That is how Claude works: when you ask "how did I sleep last night?", the answer from Garmin becomes part of your conversation, and conversations are processed by Anthropic under their privacy policy. Only what a question actually requires is fetched — asking about sleep does not send your activity history.

Nothing is stored by the extension beyond the access token. There is no database, no cache of your health data, and no copy kept after a conversation ends.

What it can and cannot do

Zone Two is read-only by default. Unless you switch on "Allow changes to my Garmin data" during installation, it can only read.

With that setting on, it may rename an activity and record a weight or hydration entry. It can never delete anything — no tool for deleting activities, records or measurements exists in the extension at all.

How it connects to Garmin

Garmin's official API is only issued under a commercial partner agreement, so this uses the same private interface the Garmin Connect mobile app uses. It is not supported or endorsed by Garmin, and it may stop working if Garmin changes that interface. It reads your own account, using your own credentials.

Removing it

Uninstall Zone Two in Claude Desktop, which removes the stored credentials. To remove the saved access token as well, delete the ~/.garminconnect folder. To cut access from Garmin's side, change your Garmin password, which invalidates the token.

Children

This extension is not intended for use by anyone under 16.

Questions

The source code is public: every claim on this page can be checked against it. Raise anything you find on the issue tracker.