Connections › WHOOP
WHOOP
BodyComp connects to your WHOOP account through the WHOOP API, read-only, so your burn, recovery and sleep sit beside the food and training you log.
- Optional
- Read-only
- Included in Free
- Disconnect any time
What BodyComp reads
| WHOOP data | Permission | Used for |
|---|---|---|
| Workouts | read:workout | The Workout tab, activity and heart-rate zones |
| Daily cycles | read:cycles | Whole-day burn |
| Recovery | read:recovery | The recovery card and Charts: WHOOP's recovery score, resting heart rate, HRV |
| Sleep | read:sleep | Sleep on Charts and the recovery card |
| Staying connected | offline | Refreshes without asking you to sign in again |
WHOOP's consent screen also asks for read:profile, which BodyComp requests but doesn't use.
Where it goes
- WHOOPyour account
- Our serverpasses through memory; never written to its database or logs
- Your iPhonestored with your log
- Your iCloudyour private database; we can't read it
Your WHOOP access and refresh tokens are kept on our server, encrypted with AES-256-GCM, with the key held outside the database. All traffic uses HTTPS.
2 AI features can send figures from WHOOP when you run them, through our server, which keeps no copy, to Anthropic, whose commercial terms bar training on it. The weekly review sends that week's WHOOP workouts (sport, duration, average heart rate), your average whole-day burn, also split into training and rest days, and your average sleep with a count of short nights, each with its source. The goal check sends your plan's maintenance-calorie estimate, which is the average of WHOOP's whole-day burn over your last 14 days when your plan was built from it.
What never happens
- Soldto anyone, for any reason
- Used for adsthere are none in the app
- Shown to other peoplenot in chat, not anywhere
- Used to train AInot by us, and Anthropic's commercial terms bar it
Disconnect and delete
- In BodyComp, while online: Settings → Integrations → WHOOP → Disconnect. Our server deletes its WHOOP tokens, so nothing more is read.
- At WHOOP: remove BodyComp from your WHOOP account to end the grant at WHOOP's end too.
- What was already read stays in your log until you delete it: Settings → Storage → Delete Everything I've Logged.
Questions
[email protected]. BODY COMP LLC, 23210 57th Ave W, PO Box 255, Mountlake Terrace, WA 98043. The Privacy Policy and the Consumer Health Data Privacy Policy say all of this in full.
WHOOP is a trademark of WHOOP, Inc. BodyComp is not affiliated with, sponsored or endorsed by WHOOP. BodyComp is a tracking tool, not medical advice.