Family Health
Privacy Policy
Effective and last updated: 22 August 2026
Family Health is a private household dashboard for two consenting adults. It combines authorised Oura and WHOOP data, shows trends, and can provide optional AI-generated wellness explanations. It is not a medical service.
1. Who operates Family Health
Family Health is operated by Raghav Datta in Abu Dhabi, United Arab Emirates. Questions, access requests, and deletion requests can be sent to raghavendradatta.p@gmail.com.
2. Information we process
With each participant's permission, Family Health can process:
- Oura data, including sleep, readiness, activity, heart rate, HRV, workouts, sessions, SpO2, and ring information.
- WHOOP data, including profile identifiers, cycles, sleep, recovery, and workouts.
- Derived summaries, averages, trends, and wellness observations created from that data.
- OAuth access and refresh tokens used to retrieve authorised provider data.
- Account and basic technical information needed to authenticate users, secure the service, diagnose errors, and operate backups.
Family Health does not receive or store an Oura or WHOOP account password. Provider access is granted through the provider's OAuth authorisation screen.
3. How we use information
We use the information only to:
- connect the authorised Oura and WHOOP accounts;
- import and normalise health and activity records;
- display personal and household dashboards and historical trends;
- create optional, high-level wellness explanations;
- maintain security, backups, reliability, and data integrity; and
- respond to access, correction, disconnection, or deletion requests.
We do not sell personal information. We do not use health data for advertising.
4. Household visibility and consent
The service uses one shared household account. Each participant can see both profiles. Each participant must explicitly agree to this shared visibility before connecting a provider account. A participant can withdraw permission by disconnecting the provider or requesting deletion.
5. Optional AI explanations
AI explanations run only when a signed-in user requests them. The service sends derived 14-day averages through OpenRouter to the selected model provider. The request excludes names, email addresses, provider account identifiers, raw sensor samples, and timestamps. Derived health summaries can still be sensitive, so this feature is optional. Requests are configured to reject model-provider routes that collect prompts where OpenRouter supports that control.
6. Service providers and disclosures
Information may be processed by:
- Oura and WHOOP when participants authorise access or when the service requests their data;
- our infrastructure and hosting providers, solely to run and back up Family Health;
- OpenRouter and a selected model provider when a user requests an AI explanation; and
- authorities or professional advisers when disclosure is legally required or needed to protect the service and its users.
We do not permit service providers to use Family Health data for our advertising.
7. Storage, security, and retention
Family Health uses HTTPS, authenticated access, encrypted OAuth tokens, restricted service networking, and controlled historical imports. No internet service can guarantee absolute security.
Active records are retained while the household uses the service or until deletion is requested. We aim to remove requested active data within 30 days. Routine database backups are retained for up to 14 days and then expire. Limited records may be kept longer when required by law or needed to investigate abuse or a security incident.
8. Choices and rights
A participant can:
- decline or revoke provider access through Oura or WHOOP;
- avoid the optional AI explanation feature;
- ask what personal information is held;
- request correction, export, restriction, or deletion where applicable; and
- withdraw consent for health-data processing.
Contact us at raghavendradatta.p@gmail.com to make a request. We may need to verify the requester's identity.
9. Children
Family Health is intended only for adults. It is not designed for anyone under 18.
10. Changes to this policy
We may update this policy when the service or its providers change. The effective date at the top of this page will show the latest revision.