Privacy Policy

Last updated: August 3, 2026

Scope

This policy describes the personal information processed by Delta's site, backend, authenticated tools, and user-authorized connectors. Delta is currently a limited personal-intelligence preview, not an advertising network or data broker.

Information Delta Processes

Account: email, profile name, account identifiers, and session metadata. Authentication credentials are handled by the authentication provider.
Access requests: name, email, an optional note, review state, and invitation history submitted for private-preview review.
User content: conversations, goals, preferences, and information you deliberately submit.
Derived information: summaries, trends, state, scenarios, and other outputs computed from authorized inputs.
Operations: limited request, error, security, and audit metadata needed to operate and protect Delta.
Connected services: data covered by the scopes you approve when linking a provider.

WHOOP Data

When you connect WHOOP, Delta may process:

Connection status, approved scopes, token expiry, and a provider account identifier
Recovery, HRV, resting heart rate, and supported recovery measurements
Sleep timing, stages, need, performance, consistency, and disturbances
Cycle timing, strain, heart-rate summaries, and energy expenditure
Workout timing, type, strain, heart-rate summaries, zones, and supported distance or elevation fields

Delta does not request WHOOP body-measurement scope for the current connector. WHOOP tokens stay server-side and are encrypted before storage. ChatGPT never receives those tokens or the internal WHOOP user identifier.

How Information Is Used

Authenticate you and operate the services you request
Normalize connected data into compact owner-scoped records
Answer an authorized ChatGPT tool request
Produce requested summaries, trends, and experimental intelligence
Protect, debug, and improve reliability without exposing credentials

Delta does not sell personal information or use WHOOP data for advertising.

Raw and Normalized WHOOP Records

WHOOP API responses are held in process only long enough to validate and normalize them. The current connector does not persist new raw provider response bodies, and a sync purges historical raw WHOOP rows for that owner. Delta stores only the normalized fields needed for the read tools and freshness evidence.

ChatGPT Custom App

If you connect Delta as a ChatGPT custom app, ChatGPT may request compact WHOOP summaries through Delta's read-only MCP tools. Requests are scoped to the authenticated Delta account. Tool responses omit OAuth credentials, account contact details, internal database identifiers, and raw provider payloads.

Service Providers

Delta relies on infrastructure and service providers for authentication and storage, application hosting, backend hosting, and AI or connected-service requests you initiate. Current providers include Supabase, Vercel, Render, OpenAI/ChatGPT, and WHOOP. Each provider processes information under its own terms and only for the relevant function.

Retention and Deletion

Encrypted WHOOP credentials are retained while the connection is active. Disconnecting revokes provider access and deletes those credentials. Normalized WHOOP history is retained for personal history and model reasoning until you explicitly select history deletion or make an applicable deletion request.

Provider cache and retention rules also apply. Delta is reviewing the current normalized-history retention against the WHOOP API Terms. Retention may be shortened and expired records may be deleted where provider permissions require it. Do not use Delta as a permanent WHOOP archive.

Other personal data is retained while needed to operate the requested feature, protect the service, or meet applicable obligations. Retention controls remain an active engineering area; unsupported deletion claims are not treated as completed controls.

Private-preview access requests are retained while needed to review and administer access, protect the service, or meet applicable obligations. Delta has not published a fixed automated retention period for these records. Correction or deletion requests are reviewed through the contact path and are not guaranteed to be instantaneous or fully automated.

Your Controls

Refresh, reauthorize, or disconnect WHOOP from the WHOOP integration page
Choose separately whether disconnecting also deletes normalized WHOOP history
Disconnect the Delta app from ChatGPT
Request access, export, correction, or deletion through the contact page

Account-wide automated export and deletion controls are not yet represented as complete. Contact eric@egeng.co for a manual request.

Security

Delta uses authenticated owner scoping, encrypted provider credentials, transport encryption, narrow tool responses, and tests for cross-user isolation. No online system is perfectly secure. Do not send secrets through conversation fields or support forms.

Health Information

Health and wellness data is sensitive. Delta is not a medical provider or medical device, and its outputs are not diagnosis or treatment. Use qualified professionals for medical decisions.

Children

Delta is not intended for children under 13 and does not knowingly seek their personal information.

Changes and Contact

This policy will be updated when Delta's data flows materially change. Questions and rights requests can be submitted at /contact or sent to eric@egeng.co.

Loading Delta...