Privacy Policy

Last updated: March 25, 2026

1. Introduction

MoralesLab ("we", "us", "our") operates personal health and wellness integrations for private, individual use. This policy describes how we collect, use, and protect data obtained through third-party APIs including WHOOP, and other connected health services.

2. Data We Collect

When you authorize a connection to a third-party service, we may collect:

• Physiological metrics: heart rate, heart rate variability (HRV), blood oxygen (SpO2), skin temperature, respiratory rate
• Activity data: strain scores, workout type and duration, calorie expenditure
• Sleep data: sleep stages, duration, efficiency, sleep needed
• Recovery data: recovery scores, resting heart rate
• Profile information: name, email, user ID as provided by the third-party service

3. How We Use Your Data

Data is used exclusively for:

• Personal health monitoring and trend analysis
• Generating AI-assisted health insights and recommendations
• Correlating metrics across data sources for a unified health view

We do not sell, share, or disclose your data to any third parties. All data processing occurs on privately hosted infrastructure.

4. Data Storage and Security

• All data is stored on privately owned and operated servers within our home network
• Data is encrypted in transit (TLS) and access is restricted to authenticated users only
• OAuth tokens are stored securely and refreshed automatically; we never store third-party passwords
• No data is transmitted to cloud services, advertisers, or analytics platforms

5. Data Retention

Health data is retained indefinitely for long-term trend analysis. You may request deletion of all stored data at any time by contacting us.

6. Third-Party Services

We integrate with third-party APIs (e.g., WHOOP) under their respective terms of service. We access only the data scopes you explicitly authorize and do not request more permissions than necessary.

7. Your Rights

You may at any time:

• Revoke API access through the third-party service's settings
• Request a copy of all stored data
• Request deletion of all stored data

8. Contact

For questions about this policy or your data, contact: ludmoral@gmail.com

9. Changes

We may update this policy from time to time. Changes will be reflected by the "Last updated" date above.