Privacy policy

Last updated: November 9, 2026

This service (mcp.vkakar.com/whoop) lets you connect your WHOOP account to an AI assistant such as Claude so the assistant can read your WHOOP data when you ask it to. It is operated by Vikas Kakar (contact: vikaskakar2210@gmail.com).

What we access

With your permission, read-only access to your WHOOP profile (name, email, user ID), body measurements, cycles (strain), recovery, sleep and workouts. We never write to your WHOOP account.

What we store

• Your WHOOP user ID and email, to know whose data to fetch and whether you are allowed to connect.
• Your WHOOP OAuth tokens, encrypted at rest (AES-256-GCM).
• Short-lived access tokens we issue to your AI assistant, stored only as one-way hashes.

We do not store your health data. It is fetched from WHOOP on demand and passed directly to the assistant that requested it. We do not sell, share or use your data for advertising or training.

Where data goes

Data you request is sent to the AI assistant you connected (for example Claude by Anthropic) and is then subject to that assistant's privacy policy. Infrastructure is provided by Vercel (hosting) and Upstash (token storage).

Disconnecting

You can disconnect at any time, and we delete your stored tokens immediately:

• Ask the assistant to run the whoop_disconnect tool, which revokes our access with WHOOP and deletes your tokens; or
• remove the app from your WHOOP account settings; or
• email us and we will delete your data within 7 days.

Removing the connector in Claude alone stops Claude from calling the service; use one of the options above to also delete stored tokens.