Privacy Policy
Last updated: August 2026
This site ("the Leaderboard") is a private, internal tool built for a 6-person company fitness challenge. It is not a public product and is not available to anyone outside this group. This page explains what data the Leaderboard collects, why, and how it's used.
What data we collect
- Whoop data (only for participants who choose to connect their Whoop account): recovery score, sleep performance, daily strain, and workout details (sport type, duration, strain, heart rate). We also store the OAuth access/refresh tokens Whoop issues so we can keep syncing this data.
- Weekly weigh-in data: the weight or body-fat percentage number each participant manually enters, used to calculate progress toward their personal challenge goal.
- Contact details, only if provided, used solely to send the weekly reminder to log a weigh-in: name, email address, Microsoft Teams handle, and/or WhatsApp number.
How it's used
All data is used exclusively to calculate and display the internal leaderboard for this challenge, and to send weekly reminder nudges to log a weigh-in. Whoop data (recovery, sleep, strain, workouts) is shown only as an informational "effort" indicator alongside each person's rank — it does not affect the ranking itself, which is based only on manually logged weigh-ins against each person's agreed baseline and goal.
We do not sell, advertise with, or share this data with any third party for marketing purposes. Data is never shown to anyone outside the 6 participants and the challenge organizer.
Where data is stored
Data is stored in a Supabase (Postgres) database and this website is hosted on Vercel. Weekly reminders, if enabled, are sent via Resend (email), a Microsoft Teams workflow webhook (channel message), and/or Twilio (WhatsApp) — only the minimum contact detail needed for each enabled channel is passed to that service.
Your choices
- Connecting a Whoop account is entirely optional and can be revoked at any time from your Whoop account's connected-apps settings — this immediately stops any further data sync.
- You can ask the challenge organizer to remove your data (participant profile, weigh-ins, and synced Whoop data) at any time; this is a permanent deletion.
Data retention
Data is kept for the duration of the challenge and deleted once the challenge concludes and results have been shared, unless a participant asks for earlier removal.
Contact
Questions about this policy or your data can be directed to the challenge organizer at yash@boldfit.in.