Privacy Policy
1. Who operates this app
This app is operated by:
OK IT SOLUTIONS LLC8 The Green STE B, Dover, DE 19901, USA
Email: contact@ok-it.org
In this policy, "we" and "the operator" mean OK IT SOLUTIONS LLC.
2. What this app is
This app is a private, single-user integration. It connects the operator's own WHOOP account to the operator's own automation server.
The app is not offered to the public. No other person can sign up for it or use it.
3. Data we read from WHOOP
The app requests only these WHOOP OAuth scopes:
read:sleep– sleep records (for example start time, end time, nap flag and sleep stage totals).read:recovery– recovery records (for example recovery score, resting heart rate and HRV).offline– a refresh token, so that the server can keep access without a new login.
The app also receives WHOOP webhook events. From each event it keeps the event id, the event type, the delivery trace id (to drop duplicate deliveries) and the time of receipt.
The app does not read profile, body measurement, cycle or workout data.
4. Why we use the data
The app uses the data for one purpose: to detect the end of the main night sleep. This event starts the operator's own morning automation.
We do not use the data for any other purpose.
5. Storage and retention
- All data is stored on the operator's own server. It is not stored with third-party analytics or cloud data services.
- OAuth access and refresh tokens are kept in a private file on that server. Only the operator's account can read the file.
- Webhook event metadata and the sleep and recovery records that the app reads are kept for up to 90 days. After 90 days they are deleted.
- When access is revoked, we delete the stored tokens.
7. Security
All connections to WHOOP use HTTPS. The server is accessible only to the operator. Tokens are stored with restricted file permissions. We keep the stored data to the minimum that the purpose needs.
8. Your rights
- You can revoke the app's access at any time in the WHOOP app, or by email to contact@ok-it.org.
- You can ask for a copy of the stored data, or for its deletion, by email to the same address. We delete the data within 30 days of the request.
9. Changes to this policy
We can change this policy. We publish each change on this page and update the "Last updated" date.
10. Contact
For questions about this policy, write to contact@ok-it.org.