Effective: July 9, 2026
Privacy Policy — Track × Heart
Track × Heart ("the app", "we", "our", or "us") is operated by Heymann Apps LLC. Track × Heart is a personal analytics tool that lets you connect your own WHOOP account and see how interventions you log (such as a medication or dose change) relate to your heart-rate trends. We built it with privacy as a core principle — not an afterthought.
1. The short version
Track × Heart runs locally on your own device. Your WHOOP data and the interventions you log are stored only on that device. They are not transmitted to, or stored on, any Heymann Apps server. We do not sell, share, rent, or advertise against your data — ever.
2. WHOOP data we access
When you choose to connect WHOOP, you authorize the app (via WHOOP's official OAuth flow) to read your own WHOOP data using these read-only scopes:
- Recovery — resting heart rate, heart-rate variability, recovery score.
- Cycles — daily strain and heart-rate summaries.
- Sleep — sleep performance and related summaries.
- Workouts — per-activity heart-rate summaries and strain.
- Profile & body measurements — basic profile details.
The app requests read-only access. It never writes to, modifies, or deletes anything in your WHOOP account.
3. Data you enter
You may log "interventions" (for example: a medication name, dose, date, and optional notes). This information is created by you and stored locally alongside your synced WHOOP data. You can edit or delete it at any time.
4. Where your data lives
Synced WHOOP data and your logged interventions are stored in a local database file on your own device. Your WHOOP access and refresh tokens are stored locally so the app can keep your data up to date, and are used only to communicate directly with WHOOP's API. None of this data passes through Heymann Apps infrastructure.
5. What we do not do
- We do not sell or rent your data to anyone.
- We do not use your data for advertising or marketing.
- We do not share your data with data brokers or third parties.
- We do not upload your WHOOP data or interventions to our servers.
- No human at Heymann Apps can access your data.
6. Revoking access & deleting data
You can disconnect WHOOP from within the app at any time, which removes the stored tokens. You can also revoke the app's access directly from your WHOOP account settings. Because your data is stored locally, you can delete all of it permanently by clearing the app's local database — no request to us is required.
7. Not medical advice
Track × Heart is a personal insight and reflection tool. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Any statistics it shows describe your own data and should not be used to make medical decisions. Always consult a qualified healthcare professional about medications or your health.
8. Children's privacy
Track × Heart is not directed to children under 16 and requires a WHOOP membership. We do not knowingly collect data from children.
9. Not affiliated with WHOOP
Track × Heart is an independent project and is not affiliated with, endorsed by, or sponsored by WHOOP. "WHOOP" is a trademark of its respective owner. Your use of WHOOP and its API is subject to WHOOP's own terms and privacy policy.
10. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a new effective date.
11. Contact
Questions about this policy? Email [email protected].