Strainlog
Privacy Policy
Effective date: September 8, 2026
Overview
Strainlog is a personal health dashboard. It connects to WHOOP only after you authorize access and can receive Apple Health metrics that you choose to export. It uses that data to display your health, recovery, sleep, activity, and workout history.
Membership and invitations
Strainlog is invite-only: the owner sends each invitation to an email address. Invitation emails are delivered through Resend, a third-party email provider that processes the recipient address to deliver the message. Invitation links expire, are single-use, and are stored only as a cryptographic digest. Your email address is used to deliver and validate an invitation and is not used for marketing.
Data we access
With your permission, the application may access your WHOOP profile, body measurements, recovery, cycles, sleep, and workout data. It may also store Apple Health quantity metrics that you send through Health Auto Export, including steps and weight. It stores the OAuth credentials required to maintain the WHOOP connection.
How data is used
Your data is used only to operate the dashboard and provide personal health summaries and longitudinal analysis. It is not sold, rented, used for advertising, or shared with third parties.
Storage and data retention
Data is stored in the application's private database and is retained while you use the application. Reasonable technical safeguards are used to protect stored data and access credentials. No internet transmission or storage system can be guaranteed to be completely secure.
Revoking access and deleting data
You may revoke the application's WHOOP access from your WHOOP account. The owner may also revoke a member's access, which ends sign-in, removes notification subscriptions, and stops further data collection immediately. The application then asks WHOOP to revoke provider access and deletes the member's stored credentials. If WHOOP is temporarily unavailable, encrypted credentials are retained only so that cleanup can be retried while the membership remains revoked. Previously stored health data is retained until deletion is requested. To request deletion of data stored by Strainlog, email whoop@9.agency. Stored personal data and access credentials will be deleted after the request is verified.
Changes to this policy
This policy may be updated when the application's data practices change. The effective date above will be updated when a revision is published.
Contact
Questions about this policy can be sent to whoop@9.agency.