Privacy Policy — Jony Health Watch

Effective date: 8 August 2026
Operator: Nguyễn Đình Đạt
Contact: the administrative contact registered for this app in the WHOOP OAuth consent screen.

1. Purpose and scope

Jony Health Watch is a private, personal wellness-reporting integration. It uses the official WHOOP OAuth API to prepare daily health and activity summaries, trend comparisons, and general wellness suggestions for the authorized WHOOP member.

2. Data collected

With explicit OAuth consent, the app may read:

• recovery score, heart-rate variability, resting heart rate, and recovery-related measurements;
• physiological cycles, day strain, average heart rate, and related summaries;
• sleep timing, duration, stages, performance, efficiency, consistency, and related measurements;
• workout type, timing, heart-rate summaries, and accumulated strain; and
• body measurements such as height, weight, and maximum heart rate.

The app does not request WHOOP profile access and does not use WHOOP data for employee attendance, payroll, advertising, or sale.

3. Use and processing

Authorized data is used only to calculate personal daily reports, 7-day and 28-day trends, and general suggestions concerning recovery, activity, sleep, hydration, and meals. The app does not diagnose disease or replace medical advice.

When AI-personalized wording is enabled by the operator, only selected health metrics and derived trends needed for the report may be processed by the configured AI service. WHOOP credentials, access tokens, member identifiers, and account-login information are never included in that prompt.

4. Storage, security, and retention

• OAuth client secrets, access tokens, and refresh tokens are stored only on the operator's Mac in restricted local files.
• Health records and derived summaries are kept in a local database with access limited to the operator.
• Raw API records are retained for up to 90 days. Derived daily summaries and trend values are retained for up to 12 months, unless deleted earlier.
• Credentials and health records are not placed in public logs, source code, or public web pages.

5. Sharing

The app does not sell health data and does not share it for advertising. Data is disclosed only to service providers strictly necessary to retrieve WHOOP data, generate an opted-in report, and deliver that report privately to the operator.

6. User control and deletion

The authorized member may revoke access through WHOOP's connected-app controls at any time. Revocation stops future collection. The operator may also delete local raw records, summaries, and OAuth tokens on request. WHOOP account data remains governed by WHOOP's own privacy policy.

7. Changes

This policy will be updated before the integration materially expands its data categories, purposes, sharing, or retention periods.

← Jony Health Watch