Privacy Policy

Ring Widget is an Android app that draws your WHOOP strain, recovery, and sleep as rings on your home screen. It is an independent project, not built, endorsed, or reviewed by WHOOP.

You supply your own WHOOP API credentials from the WHOOP developer dashboard. The app uses them to read your data on your behalf, the same way you would reading it yourself.

Nothing.

We run no servers, no databases, and no analytics. There is no account to create with us, no crash reporting, and no third-party SDKs bundled into the app. No information about you or your device is ever sent to us or to anyone other than WHOOP.

• Your API credentials — the client ID and secret you create on the WHOOP developer dashboard
• OAuth tokens — the access and refresh tokens WHOOP issues after you sign in
• Your latest metrics — the most recent strain, recovery, and sleep values, so the widget has something to draw between refreshes

All of it is encrypted at rest with a key held in the Android Keystore, which is tied to your device hardware. The app is excluded from Android cloud backup and device-to-device transfer, so none of this is copied off the phone.

When you sign in, WHOOP asks you to approve read-only access. Ring Widget requests only what it draws:

Ring Widget never requests write access, and it does not request read:profile. It has no reason to know your name or email, so it does not ask for them.

Ring Widget can show a live heart rate while you train, read over Bluetooth from your WHOOP band using the standard Heart Rate Service that any fitness device broadcasts.

• Readings are used to update the on-screen display and nothing else
• They are not written to storage, and not sent anywhere
• Bluetooth is only used while a session is running

Inside the app

• Sign out to delete the stored tokens
• Erase credentials and tokens to remove everything the app holds, including your client ID and secret

From WHOOP

You can revoke Ring Widget's access at any time from your WHOOP account settings, or delete the app you created on the developer dashboard. Either one cuts off access immediately, whether or not the app is still installed.

Uninstalling

Removing the app deletes everything it stored. Nothing survives it, because nothing was kept anywhere else. Your WHOOP account and its data are untouched.

Stored data lives on your phone until you erase it or uninstall the app. Metrics are overwritten each time the widget refreshes, so the app holds your current values rather than a history. We retain nothing, having never received anything.

Ring Widget is not intended for children under 13, and requires a WHOOP account to be useful at all. We do not knowingly collect information from children — though as above, we do not collect information from anyone.

Your data originates with WHOOP and is governed by their terms while it is with them. Worth reading: WHOOP Privacy Policy.

If the app changes what it reads or stores, this page changes with it and the date at the top moves. There is no mailing list to notify, so the date is the honest signal — check it if you care.