Last reviewed 9 September 2026
Privacy notice
This launch draft explains the intended product behaviour. It must be reviewed with the confirmed operator details before public launch.
Screenshot and Apple Health imports
Activity screenshots are read locally in your browser and are not uploaded or saved. You check the extracted details before saving them as an activity. The Apple Shortcut sends only workout type, date, duration, distance, exercise calories, source label and an optional workout identifier. Connection keys are shown once and stored only as a secure hash. We do not request your Apple password, sleep, heart rate, recovery data or location routes. You can revoke Shortcut access in Settings.
Native health connections
If you choose Apple Health or Health Connect as your primary activity source, the mobile app requests read access to workouts or exercise sessions. It reads workout ID, activity type, start time, elapsed duration, optional distance, optional active calories and a short device or app label. It does not request health routes, heart rate, sleep, recovery or write access. Normalised activities are sent securely to your 100Club account. Provider cursors and failed normalised uploads remain in encrypted storage on your device. You can deny or revoke health access and continue with manual entry.
WHOOP private pilot
When you choose Connect WHOOP, we request workout and basic profile access. We retain your WHOOP member ID and encrypted access/refresh tokens to maintain the connection, not your WHOOP name or email. Scheduled checks read recent workouts without saving them. We retain check timestamps, your preferred sync button and hashed duplicate-exclusion choices. You can restore exclusions on Activities. These checks do not publish weekly results. Workouts are also retrieved on demand for the private preview and, when enabled for your account, current-week personal goal progress. They and their derived personal totals are not stored in our database, used for AI, or included in shared leaderboards, historical results or emails. Preview data is held temporarily in your browser and cleared when you leave the tab or page. Disconnect WHOOP in Settings to revoke access and remove the saved connection. You can also revoke access through WHOOP. For deletion or connection support, contact club100@betterneverstops.co.uk.
What we use
Account details, personal goals, activities, optional weight entries, community posts and support feedback.
What the club sees
Only the display name, accountability percentage, known exercise kcal and result status you choose to share. Raw weight and activity records remain private.
Your choices
You can use personal-only mode, disable club emails, export native data, leave the club or request deletion.
Retention
The proposed native lifecycle removes live personal records within seven days and expires backups within 30 days. Connector data follows its own stricter terms.
Support contact and confirmed controller details must be inserted through deployment configuration before public launch.