Privacy Policy
Last updated: May 2026
1. Overview
WhenPeak ("we", "us", "our") is committed to protecting your privacy. This Policy explains what data we collect, how we use it, and your rights over it.
We collect the minimum data necessary to provide performance predictions. We do not sell your data. We do not use it for advertising.
2. Data We Collect
Self-reported sleep data:
When you use WhenPeak (via the app, API, or ChatGPT integration), you may provide:
- Sleep and wake times
- Self-reported sleep quality
- Exercise timing
- Optional: sleep fragmentation details (latency, awakenings)
This data is used solely to generate your performance prediction.
Wearable data (optional, with explicit consent):
If you connect Apple Health, Oura, WHOOP, or similar services, we receive sleep, HRV, and exercise data from those platforms. You can disconnect at any time.
Usage data:
We collect standard technical data including API request logs, timestamps, and error logs for service reliability purposes. This data does not include personal identifiers.
Account data:
If you create an account, we store your email address and account preferences.
3. How We Use Your Data
We use your data to:
- Generate personalised cognitive performance predictions
- Improve prediction accuracy over time using your historical baseline
- Maintain and improve the Service
- Communicate with you about your account (if applicable)
We do not use your data for advertising, profiling for third-party purposes, or any purpose not listed here.
4. Data Storage and Security
Your data is stored securely using industry-standard encryption at rest and in transit. We use reputable, GDPR-compliant infrastructure providers.
Self-reported data submitted without an account is processed in real time and not retained beyond the session unless you have an active account.
5. Data Sharing
We do not sell, rent, or trade your personal data.
We may share data with:
- Service providers who process data on our behalf (infrastructure, analytics) under strict data processing agreements
- Legal authorities if required by law
We do not share your health or sleep data with third parties for commercial purposes.
6. Third-Party Integrations
If you use WhenPeak through ChatGPT or another third-party platform, that platform's privacy policy also applies to data processed by them. We only receive the data you explicitly provide during those interactions.
Connecting Apple Health, Oura, or WHOOP is governed by those services' own privacy policies. You can revoke access at any time.
7. Your Rights
Under UK GDPR and applicable data protection law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data in a portable format
- Withdraw consent at any time
- Object to processing
To exercise any of these rights, contact us at hello@whenpeak.com. We will respond within 30 days.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
Self-reported session data without an account is not retained beyond the session.
9. Children
WhenPeak is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided data to us, contact us at hello@whenpeak.com.
10. Changes to This Policy
We may update this Policy. We will notify users of material changes and update the date above. Continued use of the Service after changes constitutes acceptance.
11. Contact
Data Controller: WhenPeak
Contact: hello@whenpeak.com
For complaints, you may also contact the UK Information Commissioner's Office (ICO) at ico.org.uk.