Privacy Policy

Last updated: March 8, 2026

Overview

Ascent (ascent.matthewjamesschmidt.com) is a personal health dashboard built by Matthew James Schmidt. It displays health and fitness data retrieved from the Whoop API. This privacy policy explains what data is collected, how it is used, and your rights.

Data We Access

Ascent connects to the Whoop API using OAuth 2.0 to access the following data from the site owner's Whoop account only:

  • Profile information (name)
  • Body measurements (height, weight, max heart rate)
  • Recovery scores (recovery %, HRV, resting heart rate, SpO2, skin temperature)
  • Sleep data (duration, stages, efficiency, respiratory rate)
  • Strain and cycle data (daily strain, calories, heart rate)
  • Workout data (activity type, duration, strain, heart rate zones, distance)

How Data Is Used

  • Health data is displayed publicly on this dashboard for personal/portfolio purposes.
  • Data is fetched from the Whoop API on each page load and cached for up to 5 minutes.
  • No health data is stored in a database or persisted beyond the server cache.
  • No health data is shared with third parties, sold, or used for advertising.

Data We Do Not Collect

  • We do not collect any data from visitors to this site.
  • We do not use cookies, analytics, or tracking scripts.
  • We do not access any Whoop account other than the site owner's.
  • We do not store Whoop credentials on the client side.

Authentication

Whoop API access is authenticated via OAuth 2.0. Access tokens are short-lived (1 hour) and refresh tokens are stored securely as server-side environment variables. No authentication credentials are exposed to the browser or any client-side code.

Third-Party Services

Data Retention

No health data is permanently stored. Data is fetched in real-time from the Whoop API and cached in server memory for up to 5 minutes. When the cache expires, fresh data is fetched from Whoop.

Your Rights

If you have questions about this privacy policy or the data displayed on this site, please contact Matthew James Schmidt via the links on matthewjamesschmidt.com.

Changes

This privacy policy may be updated from time to time. Changes will be reflected on this page with an updated date.