FORM

Consumer health data privacy policy

In force from 2 October 2026. This page is written for the Washington My Health My Data Act, Nevada SB 370, Connecticut's consumer health data law and similar laws. Our full privacy policy applies too.

The consumer health data we collect

Most health information in FORM (sleep, battery, energy and stress check-ins, workouts, body weight, skin answers, photos, Apple Health) is kept only on your phone and is never collected by us. The only consumer health data that reaches our systems is your WHOOP data (recovery, heart rate variability, resting heart rate, sleep and strain), and only if you connect WHOOP. It passes through our server on its way to your phone and is not stored there.

Why we collect it and how we use it

Only to show your WHOOP night inside your FORM plan, on your phone. Never for advertising, marketing, profiling, selling or AI training.

Where it comes from

From WHOOP, after you sign in to WHOOP and allow FORM to read it.

Who we share it with

Nobody. Our server provider, Cloudflare, carries it as our processor under contract. We do not share it with your mates, the coach, advertisers or anyone else, and we never sell it. We will ask for your separate consent before any sharing, which we do not do today.

Consent

We ask for your consent on a screen that explains this before WHOOP is connected. Accepting any terms is not consent. You can withdraw it at any time with Disconnect in FORM, which also asks WHOOP to cancel our access.

Your rights

You can confirm whether we hold your consumer health data, see it, delete it, and withdraw consent. Because nothing is stored on our servers, everything we have is already on your phone: You, then Privacy and your data, lets you download it or delete it. You can also email us at the contact form at the bottom of this page. We answer within 45 days. If we refuse a request you can appeal by replying to our answer, and we will respond within 45 days. If you are still unhappy you can contact your state Attorney General (in Washington, atg.wa.gov).

Location

FORM does not collect your location and does not use geofencing.

Contact us

To see, correct or delete your data, ask a question, or make a complaint. It goes to the two of us on our private team board. Add an email or phone number if you want a reply; we use it only to answer you and delete the message after a year.