Privacy Policy

This policy describes how Woah ("the app") handles your data. The app is developed by Petter Höglander, an individual developer based in Sweden.

1. Data we access

Woah reads the following health signals from Apple Health — read-only, never written back:

• Sleep duration and sleep stages (REM, deep, light, awake)
• Heart rate variability (HRV)
• Resting heart rate
• Steps and active energy
• Breathing rate (respiratory rate)

This data is processed entirely on your device to compute your daily recovery score and Woah Score. It is never sold, used for advertising, or shared with any analytics providers.

2. AI-generated content

Woah generates personalized daily messages and insights using Anthropic's Claude AI. To do this, anonymous health summaries are transmitted to Anthropic's servers — for example: "Recovery score 72, sleep 7.5h, mild stress signal." Your name and identifiable biometrics are not included in these requests.

Anthropic processes these summaries to generate text and does not retain them for training. See Anthropic's Privacy Policy for their data practices.

3. Partner sharing

If you pair with a partner, a snapshot of the health metrics you explicitly choose to share (via your sharing settings) is stored in Apple's CloudKit. Only your paired partner can access this data. You can revoke access or disconnect at any time from the app.

4. Data stored on your device

The app stores the following locally using Apple's UserDefaults (encrypted by iOS data protection):

• Your display name and profile preferences (age, fitness level, goals)
• App settings and notification preferences
• Daily recovery score history and AI-generated content (cache)
• Manual stress ratings you enter

5. Product analytics

Woah uses PostHog for product analytics, hosted on servers in the European Union. We collect anonymous usage events — for example which screens are viewed and which features are used — to understand how the app is used and improve it.

• No health data is ever included in analytics events — no sleep, HRV, heart rate, steps, or scores
• No name, email, or other personal identifiers are collected
• You are identified only by a random identifier, not linked to your Apple ID or device
• No advertising identifier (IDFA) is used, and no session recordings are made

6. Feedback you send us

The app includes an optional feedback form. When you use it, the app opens your own email client with a message addressed to the developer — you choose what to write, can optionally attach a screenshot, and send it from your own email account. The app itself never reads or transmits this content; you send it directly, and we receive only what you choose to send. Any feedback is used solely to respond to you and improve the app.

7. What we do not do

• We do not sell your data to any third party
• We do not use your health data for advertising
• We do not share your health data with analytics platforms
• We do not transmit your name or body measurements to any server
• HealthKit data is never used for advertising or tracking

8. Children

Woah is not intended for users under 13 years of age. We do not knowingly collect data from children.

9. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, and delete your personal data. Since most data lives on your device:

• Access and portability: Export your health data via the Apple Health app
• Deletion: Use Profile → Delete my data inside the app to permanently erase your profile, recovery history, partner connections, and all synced data from your device and iCloud. Deleting the app also removes all local data. To request deletion of anonymous analytics or subscription records, contact us
• Complaints: You have the right to lodge a complaint with your local data protection authority

10. Data retention

• Health data: controlled by Apple Health — Woah does not store raw HealthKit data independently
• AI-generated content: cached locally for up to 24 hours, then regenerated
• Partner data: removed from CloudKit when you revoke partner access
• All local data: deleted when you delete the app

11. Third-party services

• Anthropic (claude.ai): AI text generation — privacy policy
• Apple CloudKit: Partner data sync — Apple's privacy policy applies
• PostHog (EU): Anonymous product analytics — privacy policy
• RevenueCat: Subscription management — receives purchase receipts and a random user identifier, never health data — privacy policy

12. Changes to this policy

We may update this policy as the app evolves. The date at the top of this page reflects the most recent revision. Continued use of the app after changes constitutes acceptance.

Questions? Contact us at petter.hoglander@gmail.com