Last updated 11 September 2026.
HemoClaw is a personal tool. I built it for myself, it runs on my own computer, and it has one user. It is not a commercial product, it is not offered for sale, and there is no company behind it. This page exists because the WHOOP developer platform requires every application to publish a privacy policy, and because anyone I ever grant access to deserves a straight answer about where their data goes.
What it accesses
With your explicit consent through WHOOP's own authorization screen, HemoClaw can read:
- Recovery data: recovery score, heart rate variability, resting heart rate, blood oxygen, skin temperature
- Sleep data: duration, stages, performance, efficiency, consistency, respiratory rate
- Cycle data: daily strain, average and maximum heart rate, energy expenditure
- Workout data: activity type, strain, heart rate, distance
- Profile and body measurements: name, email, height, weight, maximum heart rate
It requests read access only. It cannot create, change, or delete anything in your WHOOP account.
Where the data goes
HemoClaw has no server, no hosted backend, and no account system. It runs locally and fetches data from WHOOP only at the moment a question is asked.
- It is not copied to any service I operate. HemoClaw keeps no database of WHOOP data, writes no logs of it, and stores none of it on disk.
- It is not sold, rented, shared, or disclosed to anyone, and it is not used for advertising, profiling, or analytics of any kind.
- It is sent to Anthropic. The purpose of the tool is to let me ask questions about my own health data in Claude, so the data that answers a given question is included in that request to Anthropic's API and processed under Anthropic's privacy policy. I am naming this plainly because it is the one place the data leaves my machine, and no honest policy would leave it out.
Credentials
The WHOOP access and refresh tokens are held in the macOS login keychain on my computer, encrypted at rest by the operating system. They are never written into the project folder, never committed to source control, and never transmitted anywhere except to WHOOP when refreshing a token.
Other data in the tool
HemoClaw also reads my own bloodwork history from a private database I control. That data is mine, it comes from my own lab results, and it is subject to the same handling described above.
Retention and revoking access
Because nothing is stored, there is nothing to retain and nothing to delete. You can withdraw access at any time from your WHOOP account's connected-apps settings, or by contacting me. Revoking access immediately and permanently ends the tool's ability to read anything.
Children
HemoClaw is not directed at anyone under 18 and is not made available to them.
Changes
If this policy changes, the date at the top of this page changes with it.
Contact
Charlie Barmore · charlie@cbarmorecpa.com · Augusta, Georgia, USA
HemoClaw is an independent personal project. It is not affiliated with, endorsed by, or sponsored by WHOOP.