Privacy Policies — Privacy Principles, Messaging Privacy Policy, CCPA and Consumer Health Data Privacy Notice

Account & Service Control · User right or choice

WHOOP says it will delete your personal data, or give you access to it, if you ask

WHOOP states that it will delete your personal data if you ask, including if you ask when you cancel your membership, and that it will give you access to your personal data if you ask, again including when you cancel. A self-serve route is described: you can delete your WHOOP data at any time through self-serve options in the WHOOP app or in the data management section of whoop.com.

Supporting quotations

We will delete your personal data if you ask us to, including if asked when you cancel your membership.

We will provide you with access to your personal data if you ask us to, including if asked when you cancel your membership.

you can delete it at any time by exercising our self-serve options, either in the WHOOP app or navigating to the

Qualifications & exceptions

• Both promises are triggered by the member asking; the principles say nothing here about WHOOP deleting data on its own initiative.
• Deletion is described as reachable at any time through the app or the data management section of whoop.com.

Not stated here

• These principles do not state a response time, any exceptions, or what happens to data WHOOP may be required to keep; other sections of this page describe how requests are made and some legal limits, but the principles do not restate them.

Cross-references

• contrast (model-proposed): California residents have CCPA rights to know, access, delete and stop sale, with CCPA limits — The Privacy Principles say WHOOP will delete personal data if asked, without stating exceptions, while the CCPA section says the CCPA limits the circumstances in which businesses must comply with a deletion request. The page does not say whether WHOOP applies those limits to its deletion promise.
• contrast (model-proposed): WHOOP keeps messaging information while you participate, as law requires, and as needed for disputes — The Privacy Principles say WHOOP will delete personal data if asked, while the Messaging Privacy Policy says WHOOP will retain and use information as necessary to resolve disputes, protect itself and its customers, and enforce its agreements. The page does not say whether a deletion request overrides that retention for messaging information.

Account & Service Control · Procedure

Ask for access or deletion through Data Management, the app, or privacy@whoop.com

To request access to, or deletion of, personal data collected through your use of WHOOP's Services, WHOOP points you to the 'Data Management' feature on the WHOOP Privacy Center or to email at privacy@whoop.com. For consumer health data, the same two routes are listed and the request can also be for correction. Separately, the principles describe self-serve deletion at any time in the WHOOP app or the data management section of whoop.com. 'Services' is defined as WHOOP's websites and mobile apps, any software embedded within the WHOOP Strap, and any features, content or applications WHOOP offers in connection with them.

Supporting quotations

To request access to or deletion of Personal Data collected via your use of the Services, please either (i) use the “Data Management” feature available on the WHOOP Privacy Center

To request access to, or correction or deletion of consumer health data collected via your use of the Services, please either (i) use the “Data Management” feature available on the WHOOP Privacy Center at:

you can delete it at any time by exercising our self-serve options, either in the WHOOP app or navigating to the

Services means, collectively, our websites and mobile apps, any software embedded within the WHOOP Strap, and any features, content, or applications offered, from time to time, by WHOOP in connection therewith.

Qualifications & exceptions

• The consumer health data route lists correction as well as access and deletion; the general Privacy Inquiries sentence lists access and deletion only.
• Self-serve deletion is described for deleting your WHOOP data at any time in the app or the data management section of whoop.com.

Not stated here

• Verification steps, response times and appeal handling for these requests are not described in this section.

Account & Service Control · User right or choice

Reply STOP, END, CANCEL, UNSUBSCRIBE or QUIT to opt out of further texts

You can opt out of receiving further commercial or transactional text messages through the Messaging Service by replying to any of WHOOP's text messages with STOP, END, CANCEL, UNSUBSCRIBE or QUIT. For additional opt-out information, the policy refers you to WHOOP's Terms.

Supporting quotations

You can opt-out of receiving further commercial or transactional text messages via the Messaging Service by responding to any of our text messages with any of the following replies: STOP, END, CANCEL, UNSUBSCRIBE, or QUIT.

For additional opt-out information, please review our

Qualifications & exceptions

• The opt-out covers both commercial and transactional text messages.

Not stated here

• The Terms referred to for additional opt-out information are a separate linked document and are not part of this analysis.

Account & Service Control · Company commitment

Consent to automated marketing texts is not a condition of any purchase

WHOOP says consent to receive automated marketing text messages is not a condition of any purchase.

Supporting quotations

Consent to receive automated marketing text messages is not a condition of any purchase.

Qualifications & exceptions

• The statement is about automated marketing text messages.

Account & Service Control · User right or choice

California residents have CCPA rights to know, access, delete and stop sale, with CCPA limits

WHOOP says the CCPA gives residents of California four rights: to know how personal information is collected and used, to have access to and request the personal information collected, to have personal data deleted, and to stop personal information from being sold or shared. It adds that the CCPA limits these rights, for example by prohibiting businesses from providing certain sensitive information in response to an access request and by limiting the circumstances in which they must comply with a deletion request.

Supporting quotations

The CCPA also provides the following rights if you are a resident of the state of California: (1) the right to know how your personal information is collected and used; (2) the right to have access to and request the personal information collected; (3) the right to have your personal data deleted; and (4) 4he right to stop your personal information from being sold or shared.

The CCPA limits these rights by, for example, prohibiting businesses from providing certain sensitive information in response to an access request and limiting the circumstances in which they must comply with a deletion request.

A “sale” under the CCPA is defined as “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to another business or to a third party for monetary or other valuable consideration.”

Qualifications & exceptions

• The rights are stated for residents of California; the sentence describes what the CCPA provides rather than a separate WHOOP promise.
• Access can be limited for certain sensitive information, and deletion requests need to be honored only in limited circumstances.

Not stated here

• The section does not say which categories of sensitive information are withheld or which circumstances excuse a deletion request.
• The Privacy Principles earlier on the page say WHOOP will delete personal data if asked without stating these limits.

Cross-references

• contrast (model-proposed): WHOOP says it will delete your personal data, or give you access to it, if you ask — The Privacy Principles say WHOOP will delete personal data if asked, without stating exceptions, while the CCPA section says the CCPA limits the circumstances in which businesses must comply with a deletion request. The page does not say whether WHOOP applies those limits to its deletion promise.

Account & Service Control · Procedure

Send privacy rights requests or questions to privacy@whoop.com or the data management page

For privacy rights requests or questions about your privacy rights, WHOOP asks you to email privacy@whoop.com, and it provides a link for more on data management.

Supporting quotations

For privacy rights requests or questions about your privacy rights, please email us at

Not stated here

• The section does not set a response time or describe verification.

Account & Service Control · User right or choice

Depending on your state, you may withdraw consent to future collection, use or sharing of consumer health data

WHOOP says that, depending on your state of residence, you may have certain rights. One is the right to withdraw consent, to the extent WHOOP relies on your consent for collecting, using or sharing your consumer health data, from future collection, use or sharing.

Supporting quotations

Depending on your state residency, you may have certain rights to:

Withdraw consent. To the extent we rely upon your consent for our collection, use or sharing of your consumer health data, you have the right to withdraw such consent from future collection, use or sharing.

Qualifications & exceptions

• Which rights you have depends on your state residency.
• Withdrawal applies to the extent WHOOP relies on your consent and only to future collection, use or sharing.

Not stated here

• The notice does not say in which states each right applies.

Account & Service Control · User right or choice

You may confirm what WHOOP collected, shared or sold, access your data, and get a list of recipients

WHOOP lists an access and confirm right. You have the right to ask WHOOP to confirm whether it has collected, shared or sold your consumer health data, the right to access the consumer health data it has collected from or about you, and the right to access a list of all third parties it has shared your consumer health data with.

Supporting quotations

Access and confirm. You have the right to ask us to confirm whether we have collected, shared or sold your consumer health data. You have the right to access the consumer health data that we have collected from or about you. You also have a right to access a list of all third parties we have shared your consumer health data with.

Qualifications & exceptions

• This right, like the others, applies depending on your state residency.

Account & Service Control · User right or choice

You may ask WHOOP to correct inaccuracies in or delete your consumer health data

WHOOP lists a correction right, to ask it to correct inaccuracies in your consumer health data, and a deletion right, to ask it to delete your consumer health data.

Supporting quotations

Correction. You have the right to ask us to correct inaccuracies in your consumer health data.

Deletion. You have the right to ask us to delete your consumer health data.

Qualifications & exceptions

• These rights apply depending on your state residency.

Not stated here

• The notice does not state exceptions or timing for correction or deletion, and its retention section says data may be kept as required by applicable law.

Account & Service Control · User right or choice

If WHOOP denies a right you try to use, you may appeal and then complain to a regulator

WHOOP says you have the right to appeal its denial of a right you have attempted to exercise, and that it will provide details on how to appeal in connection with the denial. If your appeal is denied, you may issue a complaint to the appropriate regulatory enforcement authorities.

Supporting quotations

Appeal. You have the right to appeal our denying a right you have attempted to exercise. We will provide details on how to appeal our denial in connection with such action. If your appeal is denied, you may issue a complaint with appropriate regulatory enforcement authorities.

Qualifications & exceptions

• The appeal details are to be given when a right is denied; they are not set out in this Notice.

Not stated here

• The Notice does not describe the appeal process, deadlines or the regulators concerned.

Account & Service Control · Procedure

Request access, correction or deletion of consumer health data through Data Management or privacy@whoop.com

To request access to, or correction or deletion of, consumer health data collected through your use of the Services, WHOOP asks you to use the Data Management feature on the WHOOP Privacy Center at privacy.whoop.com, or to email privacy@whoop.com.

Supporting quotations

To request access to, or correction or deletion of consumer health data collected via your use of the Services, please either (i) use the “Data Management” feature available on the WHOOP Privacy Center at: privacy.whoop.com; or (ii) email us at privacy@whoop.com.

Not stated here

• Verification steps and response times are not described.

Account & Service Control · Company commitment

WHOOP says it will not discriminate against you for exercising these rights

WHOOP says it will not discriminate against you for exercising the rights described in the Notice.

Supporting quotations

We will not discriminate against you for exercising your rights described above.

Qualifications & exceptions

• The commitment is about the rights described in this Notice.

Not stated here

• The Notice does not define what counts as discrimination.

Account & Service Control · Procedure

Contact WHOOP's privacy team at privacy@whoop.com or by mail to its Boston legal department

For questions about this Notice or its privacy practices, WHOOP says you may contact the WHOOP Privacy Team by email at privacy@whoop.com or by mail to Whoop, Inc., Attn: Legal Department, One Kenmore Square, #601, Boston, MA 02215.

Supporting quotations

If you have any questions about this Notice or our privacy practices, you may contact us at:

WHOOP Privacy Team Email: privacy@whoop.com Whoop, Inc., Attn: Legal Department, One Kenmore Square, #601 Boston, MA 02215