1. Introduction
This Privacy Policy describes how Andrew Davies (“we,” “us,” or “our”) handles information when you use Crashboard (the “Service”) and choose to connect or integrate your WHOOP account through our WHOOP developer integration (the “WHOOP Integration”). It is intended to meet common requirements for applications registered in the WHOOP developer environment.
WHOOP is a separate company. Their handling of your data is governed by WHOOP’s own policies. We encourage you to review WHOOP’s privacy documentation on whoop.com.
2. Information we collect
When you authorize the WHOOP Integration, we may access and process categories of health, fitness, and account-related data made available to us through the WHOOP API, depending on the permissions you grant. This may include, for example:
- Profile or account identifiers needed to link your WHOOP account to the Service
- Activity, recovery, sleep, strain, or similar metrics and summaries exposed by WHOOP for authorized applications
- Technical data such as API tokens, connection timestamps, and error logs needed to operate the integration securely
We do not use the WHOOP Integration to collect information from WHOOP beyond what you authorize through WHOOP’s consent and OAuth (or successor) flows.
3. How we use information
We use WHOOP-related information solely to:
- Provide, maintain, and improve features you request
- Authenticate and secure your connection to WHOOP
- Debug, monitor reliability, and prevent abuse or fraud
- Comply with applicable law and enforce our terms
We do not sell your personal information. We do not use WHOOP data for third-party advertising or profiling unrelated to operating the Service.
4. Legal bases (where applicable)
If laws such as the UK or EU GDPR apply, we rely on one or more of: (a) performance of a contract with you, (b) your consent where required for health-related or sensitive processing, and/or (c) our legitimate interests in providing a secure, reliable service, balanced against your rights.
5. Sharing and subprocessors
We may share information only as needed with:
- WHOOP, to the extent required for the integration to function
- Service providers that host, store, or process data on our behalf (for example, infrastructure, authentication, or database providers), under contracts that require appropriate safeguards
- Authorities if required by law or to protect rights, safety, and security
6. Retention
We retain WHOOP-related data only as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce our agreements. When you disconnect WHOOP or delete your account, we will delete or anonymize associated data within a reasonable period, except where law requires longer retention.
7. Security
We implement reasonable technical and organizational measures designed to protect information against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
8. Your choices and rights
Depending on your location, you may have the right to:
- Access, correct, or delete certain personal information
- Restrict or object to certain processing
- Withdraw consent where processing is consent-based
- Port data where applicable
- Lodge a complaint with a supervisory authority
You can revoke the Service’s access to your WHOOP account at any time through WHOOP’s account or developer authorization settings and through any disconnect option we provide in the Service. Revoking access may limit or disable WHOOP-related features.
9. International transfers
We may process and store information in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
10. Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
11. Changes
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. Material changes may be communicated through the Service or other reasonable means where appropriate.
12. Contact
For privacy questions or requests regarding this policy or the WHOOP Integration, use the contact method configured for this deployment.