Privacy Policy

Last updated: March 11, 2026

Overview

Ascent (ascent.matthewjamesschmidt.com) is a personal health dashboard built by Matthew James Schmidt. It displays health and fitness data retrieved from the Whoop API. This privacy policy explains what data is collected, how it is used, and your rights.

Data We Access

Ascent connects to the Whoop API using OAuth 2.0 to access the following data from each user's Whoop account:

  • Profile information (name)
  • Body measurements (height, weight, max heart rate)
  • Recovery scores (recovery %, HRV, resting heart rate, SpO2, skin temperature)
  • Sleep data (duration, stages, efficiency, respiratory rate)
  • Strain and cycle data (daily strain, calories, heart rate)
  • Workout data (activity type, duration, strain, heart rate zones, distance)

How Data Is Used

  • The public dashboard displays the site owner's health data for personal/portfolio purposes.
  • Signed-in users can create or join teams (2-8 people) to compare Whoop data with others.
  • Health data is synced daily from the Whoop API and stored in a secure database.
  • Team data is only visible to members of that team.
  • No health data is shared with third parties, sold, or used for advertising.

Accounts & Authentication

  • Sign in uses Whoop OAuth 2.0 — no passwords are stored.
  • A session cookie (ascent_session) is set for 30 days to keep you signed in.
  • OAuth tokens are stored securely in the database, never exposed to the browser.
  • You can sign out at any time, which clears your session cookie.

Data We Do Not Collect

  • We do not use analytics or tracking scripts.
  • We do not store Whoop credentials on the client side.
  • We do not share data between teams or with external services.

Third-Party Services

Data Retention

Health data is stored in a secure PostgreSQL database (Neon) to enable team comparisons and historical trends. You can leave a team at any time. Contact us to request deletion of your account and associated data.

Your Rights

If you have questions about this privacy policy or the data displayed on this site, please contact Matthew James Schmidt via the links on matthewjamesschmidt.com.

Changes

This privacy policy may be updated from time to time. Changes will be reflected on this page with an updated date.