Privacy Policy

Last updated: July 29, 2026

Introduction

At Delta, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information when you use Delta applications, services, and user-authorized integrations. Please read this privacy policy carefully. If you do not agree with it, do not access the service or connect an external account.

Information We Collect

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, and password when you create an account
  • Health Information: Fitness goals, dietary preferences, sleep patterns, energy levels, stress ratings, and other wellness data you share through chat
  • Usage Data: Information about how you interact with our services, including conversation history
  • Device Information: Device type, operating system, and unique device identifiers
  • Goal Information: Personal wellness goals you set within the app

Information We Derive:

  • Daily Logs: Sleep hours, energy ratings, stress levels automatically parsed from chat
  • Trend Data: Direction and momentum of wellness metrics over time
  • Pattern Analysis: Correlations between activities and outcomes
  • Goal Progress: Tracking toward your stated objectives

Delta may store self-reported information, derived metrics, and data from a connected service when you expressly authorize that connection. Connected-service data is limited to the scopes you approve.

WHOOP Integration Data

If you choose to connect WHOOP, Delta may receive:

  • Connection information: A WHOOP account identifier, granted scopes, token expiry, and connection status
  • Recovery: Recovery score, heart rate variability, resting heart rate, calibration status, and supported device measurements
  • Sleep: Timing, stages, sleep need, respiratory rate, performance, consistency, efficiency, naps, and disturbances
  • Cycles: Timing, strain, energy expenditure, and heart-rate summaries
  • Workouts: Timing and type, strain, heart-rate summaries, energy, distance or elevation when available, and heart-rate-zone durations

Delta does not request WHOOP body-measurement scope for the initial connector. WHOOP OAuth credentials remain server-only and are never returned to ChatGPT or exposed in user-facing responses.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Personalize your experience and provide tailored health guidance
  • Calculate trend analysis and derivative metrics showing your progress
  • Generate personalized AI workout recommendations
  • Create exportable PDF, CSV, or JSON reports of your insights
  • Detect patterns and correlations in your wellness data
  • Communicate with you about updates, features, and support
  • Analyze usage patterns to improve our AI and recommendations
  • Protect against fraudulent or unauthorized activity
  • Synchronize and normalize data from services you explicitly connect
  • Return compact WHOOP summaries to a ChatGPT custom app only when you connect both services and request that data

Data Processing

Derivative Calculations: We process your data to calculate first-order trends (improving, declining, stable), stability metrics, recovery patterns, and composite wellness momentum. These calculations produce qualitative insights, not medical assessments.

AI-Powered Features: Workout recommendations are generated using AI based on your goals and history. Weekly assessments summarize your progress. All AI outputs include appropriate wellness disclaimers.

WHOOP Connector: WHOOP data is normalized into compact recovery, sleep, cycle, and workout records. Raw provider responses, if temporarily retained for reliability or schema debugging, are kept only as permitted by WHOOP's terms and cache controls. ChatGPT receives only fields required for a user-requested tool call, never WHOOP tokens, profile contact information, or raw provider payloads.

Data Export

You can export your data at any time in three formats:

  • PDF: Human-readable summary with trend indicators and insights
  • CSV: Derived metrics only (ratings, binary indicators)
  • JSON: Structured data for technical use

Exports may include connected-service data when you request it and provider terms permit it. OAuth credentials are never included.

Data Sharing and Disclosure

We do not sell your personal information or use WHOOP data for advertising. We may share information with service providers that operate Delta, with AI providers when needed to fulfill a request you initiate, and with ChatGPT when you explicitly connect Delta as a custom app and invoke a WHOOP data tool. We may also disclose information when legally required. We do not expose one user's WHOOP data to another user.

Data Security

We implement security measures to protect your data, including encryption in transit and at rest and secure authentication. Connected-provider credentials are encrypted and restricted to server-side integration code. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the right to:

  • Access, update, or delete your personal information
  • Export your data in a portable format
  • Opt out of marketing communications
  • Request restriction of processing
  • Withdraw consent at any time
  • Disconnect WHOOP and stop future synchronization
  • Disconnect the Delta custom app from ChatGPT

To exercise these rights, contact us at privacy@delta.health

Data Retention

We retain personal information only while needed to provide the service and as permitted by connected-provider terms. Disconnecting WHOOP stops future synchronization and revokes provider access when the connector is enabled. Provider data is deleted when required by provider terms, account deletion, or an applicable deletion request. Some information may be retained when legally required.

Children's Privacy

Our services are not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@delta.health or write to us at: Delta Health, Inc., Ann Arbor, Michigan.