PRIVACY POLICY · EFFECTIVE JULY 23, 2026
This policy explains how AlderSignal, Inc. handles information in AlderYou, including optional WHOOP data and Fitbit or Pixel Watch data connected through Google Health.
We process account and profile details, goals, preferences, voluntary check-ins, feedback, private photos, wardrobe details, and actions you record. When you connect a supported tracker, we request only the permission categories shown on that provider’s consent screen.
For WHOOP, AlderYou can read recovery scores, sleep duration, physiological-cycle day strain, and recent workout summaries after you grant access on WHOOP’s consent screen. The offline permission lets AlderYou refresh that connection without asking you to sign in for every synchronization. AlderYou does not receive or store your WHOOP password.
For Fitbit and Pixel Watch, AlderYou can read activity and fitness summaries, sleep summaries, and workout sessions through the Google Health API after you grant access. AlderYou does not receive or store your Google or Fitbit password.
We use permitted summaries only to make workout demand, recovery timing, and outfit-practicality guidance more relevant. We do not use tracker data for advertising, credit, employment, insurance, medical diagnosis, or judgments about attractiveness.
Authorization tokens are encrypted at rest. AlderYou stores normalized daily planning summaries rather than a permanent copy of every raw tracker event. You can choose a 7-, 30-, or 90-day summary-retention period in Connected Health. Data is encrypted in transit, and member records are separated by authenticated account.
AlderYou’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data or transfer it for advertising.
Revoking access in your WHOOP or Google account also stops future imports. Disconnecting WHOOP in AlderYou calls WHOOP’s revocation endpoint before deleting AlderYou’s encrypted token and imported summaries. Disconnecting does not change records a provider independently retains under its own policy.
We use infrastructure and communication providers only to operate, secure, and support AlderYou. Access is limited to what is necessary for those services. We may disclose information when required by law, to protect people or the service, or as part of a business transaction with appropriate safeguards.
Questions, privacy requests, and deletion requests can be sent to support@aldersignal.com. AlderSignal, Inc. will verify account ownership before fulfilling a sensitive request.