Version 1 · 10 October 2026
This policy applies to applications operated by ZC-8 that connect to third-party services (such as WHOOP) on your behalf. It describes what these applications collect, why, how it is kept, and your rights.
Only the data you explicitly authorise through the third-party service's own consent flow (OAuth). For WHOOP this may include cycles, sleep, recovery, workouts, basic profile and body measurements. The application reads nothing beyond the scopes you grant and writes nothing to your third-party account.
Solely to provide you with the service you requested, on your own data. No advertising, no commercial profiling, no sale or sharing with third parties. Your data is not used to train AI models.
On servers operated by ZC-8 in the United States, encrypted in transit (TLS), with access restricted to you and to ZC-8's technical operator through authenticated accounts. Access tokens for third-party services are stored with restricted permissions and are never shared.
As long as you keep the connection active. You can revoke it at any time from your third-party account (for WHOOP, in its app or website); the application then stops reading immediately. On request, data already collected is deleted within 30 days.
Access, rectification, portability and deletion of your data. To exercise a right or ask a question: kodrik@gmail.com.
These applications are not intended for minors. No third party takes part in the processing other than the hosting providers ZC-8 relies on and the service providing the data. Any change to this policy is dated and published at this address.