Privacy policy

Last updated: November 30, 2025

Privacy matters, especially when it comes to health data. I'm Nick, the creator of fitIQ, and I'm a WHOOP user and fitIQ user myself. I treat your data as I would hope and expect mine to be treated elsewhere. The fitIQ Games is a public championship by its very nature, but that doesn't mean I take privacy lightly. If you have any concerns at all, please reach out.

What we collect

Personal information

When you enter the championship, we collect your email address (if you sign in with fitIQ) or your first and last name from WHOOP (if you enter with WHOOP only). Your password, if you create a fitIQ account, is encrypted and securely stored using industry best practices. Even if compromised, your original password cannot be recovered.

WHOOP data via API

To calculate your event scores and rankings, we access your 2025 WHOOP data through the WHOOP API. This includes metrics like recovery scores, HRV, resting heart rate, sleep data, strain, workouts, and other physiological measurements. We securely store an access token provided by WHOOP to sync your data, along with your WHOOP User ID (a non-identifying unique number). Your WHOOP credentials (email, password) are never shared with us.

What we do with your WHOOP data

We process your WHOOP data to calculate scores for each of the 28 championship events. These calculations involve analyzing your health metrics across 2025 to generate event-specific scores. Examples include:

  • Aggregated metrics: average RHR, average HRV, average recovery score, average sleep performance
  • Cumulative totals: total restorative sleep hours, total workout hours, total calories burned
  • Streaks and counts: longest green streak, most green days, consecutive 10+ strain days
  • Single achievements: highest single strain, biggest recovery improvement, longest workout duration

What's displayed publicly

Important: The fitIQ Games is a public competition. By entering, you consent to your scores and rankings being displayed on public leaderboards.

On leaderboards, we display:

  • Your chosen display name (either a generated pseudonym like "brave-elephant" or your real name from WHOOP, your choice)
  • Your avatar (a generated geometric pattern based on a unique seed)
  • Your calculated event scores (e.g., "158 green days", "62 bpm avg RHR")
  • Your rank/position in each event, competition, and overall standings
  • Your championship points earned across events

We do NOT display:

  • Raw WHOOP data or individual daily metrics
  • Your email address
  • Your WHOOP User ID
  • Any personal health information beyond the calculated event scores listed above

Think of it this way: we show the final score (e.g., "average RHR: 58 bpm") but not the raw data points that went into calculating it.

Pseudonym vs. real name

By default, we generate a unique pseudonym (like "brave-elephant") and avatar for you. This gives everyone a sense of anonymity and a bit of fun while competing. You can regenerate these as many times as you like.

If you prefer, you can choose to display your real name (from your WHOOP account or fitIQ account) on leaderboards instead. You can toggle between your pseudonym and real name at any time via your profile settings.

Leaderboard opt-outs & control

You have full control over which leaderboards you appear on. You can opt out of specific events, competitions, or the overall championship at any time. When you opt out:

  • You won't appear on those leaderboards
  • You won't be eligible to earn points or prizes for those events/competitions
  • We'll still sync your WHOOP data (in case you want to opt back in later)
  • Your calculated scores are still stored, just not publicly displayed

Changes to your leaderboard preferences may take a few minutes to take effect as rankings are recalculated.

Third-party data sharing

We do not sell or share your personal or health data with third parties. The only "sharing" that happens is what you explicitly consent to by entering the championship: your chosen display name and calculated event scores appearing on public leaderboards.

We use PostHog for basic website analytics (like page views and button clicks) to help improve the championship experience. PostHog does not have access to your WHOOP data or calculated health metrics.

Data retention

We store your WHOOP data and calculated scores for the duration of the championship (December 1-31, 2025). After the championship concludes, we may retain historical leaderboard data for archival purposes, but we'll likely delete or take offline the underlying WHOOP data at some point. We haven't decided on an exact timeline yet—this is our first year running the games!

If you disconnect your WHOOP account or delete your fitIQ account, your games entry persists (so your scores remain on leaderboards), but we'll stop syncing new data from WHOOP.

Data security

Your WHOOP data and personal information are encrypted and securely stored using industry-standard practices. We use Supabase (a secure, enterprise-grade database platform) to store all championship data. Access to this data is restricted and protected against unauthorized access.

Cookies

If you sign in to the fitIQ Games, we set a cookie containing details about your session so you can access the championship and your data. We also use PostHog for basic analytics, which may set cookies to track your session. No other third-party cookies are set.

Questions or concerns?

If you have any questions about this privacy policy or how your data is handled, please don't hesitate to reach out. I'm happy to clarify anything or address any concerns you might have.