This is a private, personal-use application. It exists so a single individual — its owner — can download a copy of their own WHOOP data to their own computer. It is not a commercial product, it has no other users, and it does not operate a backend service that receives your data.
With your explicit consent through WHOOP's OAuth screen, the app requests read-only access to:
The app requests read-only scopes. It never writes to, modifies, or deletes anything in your WHOOP account.
Exported files and stored tokens live only on the owner's local machine and are deleted by deleting those files. There is nothing else to delete, because no other copy exists.
You can revoke this app's access at any time from your WHOOP account settings (or at developer.whoop.com). Revoking immediately invalidates the tokens and stops all further data access.
All communication with WHOOP uses HTTPS. Credentials and tokens are kept in local files readable only by the owner's user account and are excluded from version control.
The app is not directed at anyone under 16 and is used solely by its adult owner.
If this policy changes, the revised version will be published at this same address with an updated date.
Questions about this policy: aalfirm@gmail.com