Effective date: November 1, 2026
Application: Rafa OS / HealthOS
Email: rms16training@gmail.com
Rafa OS is a personal, self-hosted health and fitness tracking application. It is not affiliated with WHOOP.
With authorization through WHOOP OAuth, the application may access sleep, recovery, HRV, resting heart rate, activity, strain, timestamps and account identifiers. OAuth access and refresh tokens are used to maintain the connection.
Data is used for personal health, fitness and recovery tracking, historical analysis and synchronization between authorized personal systems.
WHOOP data is stored in the private HealthOS application and its database on a personal server. Selected daily summaries may also be synchronized to a private Notion workspace when that integration is enabled.
Personal health data is not sold, used for advertising or shared with data brokers.
The integration is intended to use encrypted connections, authentication and restricted access. Security controls must be verified before activating the integration.
Data is retained for personal tracking until deleted. WHOOP access can be revoked, and stored records and tokens can be deleted. Backup copies may remain temporarily until backup rotation removes them.
For privacy requests or questions, contact rms16training@gmail.com.
This policy may be updated when the application or its data practices change. The effective date will be revised accordingly.