Privacy Policy
Hermes WHOOP Daily Report uses authorized WHOOP data to create a private daily health summary for the account owner.
Effective date: July 15, 2026 · Last updated: July 15, 2026
1. Data We Access
After the WHOOP member gives explicit OAuth consent, the integration may access only the scopes selected during authorization:
- Recovery score, heart-rate variability (HRV), resting heart rate (RHR), SpO₂, and skin temperature.
- Physiological cycles, day strain, and heart-rate summaries.
- Sleep duration, sleep stages, sleep performance, efficiency, consistency, and respiratory rate.
- Workout summaries and activity strain.
- Basic profile information solely to identify the authorized account.
2. How Data Is Used
WHOOP data is used only to generate personal health summaries, compare recent trends, and provide general wellness observations to the authorized account owner. The integration does not make automated medical decisions.
3. Storage and Security
Health data and OAuth credentials are processed on the account owner's private Windows computer. OAuth tokens are stored locally in a restricted folder. They are not embedded in this website, published, sold, rented, or used for advertising.
4. Sharing and Third Parties
The integration communicates with the official WHOOP API. Generated summaries may be delivered to the account owner's private Hermes/Telegram channel at the owner's request. Data is not shared with unrelated third parties.
5. Retention
Only the minimum data needed for current and short-term trend reporting is retained locally. The account owner may delete stored reports and OAuth tokens at any time.
6. Revoking Access and Deletion
The member may revoke the integration from WHOOP account settings or the WHOOP Developer authorization controls. Local access can also be removed by deleting the integration's token file. After revocation, the integration can no longer retrieve new WHOOP data.
7. Health Disclaimer
The daily report is informational and is not medical advice, diagnosis, or treatment. Consult a qualified healthcare professional regarding medical concerns.
8. Contact
Privacy questions or deletion requests can be sent to the application owner through the same private channel used to receive the daily report.