Privacy Policy

AICC Health is a private, local-first Windows health application. It connects to WHOOP only after a user authorizes access through WHOOP's OAuth process. This policy explains what AICC Health accesses, how the application uses that information, and the choices available to its users.

Information AICC Health accesses

With a user's authorization, AICC Health can read the WHOOP data covered by these permissions:

• recovery, including recovery score, heart rate variability, resting heart rate, and related fields;
• physiological cycles, including strain and heart-rate summaries;
• sleep records and sleep-stage information;
• workouts and activity details;
• basic WHOOP profile information; and
• body measurements, such as height, weight, and maximum heart rate.

AICC Health also stores the OAuth credentials needed to keep the connection working. WHOOP's public API does not give AICC Health permission to edit a member's WHOOP records.

Users may add information directly to AICC Health, including manual activities, strength sessions, programs, goals, reflections, settings, and files they choose to import. The application can also store chat messages, daily briefs, backups, portable bundles, and human-readable exports created at the user's request.

How the information is used

AICC Health uses this information to:

• synchronize and display authorized health records;
• calculate trends, contributors, training history, goals, and progress;
• generate user-requested daily briefs and answer health-related questions;
• support backup, restore, portability, and export features; and
• report connection status, data freshness, and errors.

AICC Health does not sell personal information or use it for advertising.

Storage and security

The application stores its primary database in the user's Windows application-data directory. Sensitive database fields are encrypted, and encryption credentials and the WHOOP client secret are stored through Windows Credential Manager. OAuth tokens are encrypted before database storage.

Ordinary backups retain encrypted sensitive fields. Portable bundles are encrypted and protected by a passphrase selected by the user. JSON and CSV exports are intentionally human-readable and are not encrypted; users are responsible for protecting or deleting exported copies. No security method can guarantee absolute protection.

Service providers and disclosures

WHOOP supplies authorized source data and manages OAuth consent and revocation.

When a user requests an AI daily brief or uses embedded chat, AICC Health may send the prompt, relevant health evidence, and current-screen context to OpenAI through the user's authenticated Codex environment. AICC Health limits the health evidence sent to information relevant to the request. Users can avoid this processing by not using AI briefs or chat.

Cloudflare hosts this privacy-policy website and may process routine request information, such as IP address, browser information, and request timestamps, when someone visits the page. The AICC Health desktop application's health database is not hosted on this policy website.

AICC Health does not otherwise disclose personal information except at the user's direction, as needed to provide a requested feature, or when required by law.

Retention, disconnection, and deletion

Authorized data remains in the local AICC Health installation until the user removes it. Disconnecting WHOOP revokes future API access and stops synchronization, but it does not automatically erase previously synchronized history. Users can also revoke AICC Health from their WHOOP account.

The application's deletion control clears active records and destroys the local database-encryption credential. Existing encrypted artifacts and ordinary encrypted backups then become unreadable. A portable bundle can still be restored by someone who has its passphrase, and human-readable exports remain readable until those copies are separately deleted.

User choices

Users can pause synchronization, disconnect WHOOP, export their information, delete their local AICC Health data, or stop using AI features. A user can request access, correction, or deletion of app-owned information by using the controls in AICC Health.

Children's privacy

AICC Health is not directed to children under 18 and is not intended to collect information from them.

Changes to this policy

This policy may be updated as AICC Health changes. The effective date at the top of this page will identify the current version.

Contact

AICC Health is currently a private application. Privacy questions or requests may be sent to the contact address listed for AICC Health in the WHOOP authorization screen.