Is NOOP private? How NOOP handles your health data

Yes. NOOP is offline by default: it has no server, no account and no tracking, and your strap data, imports and scores stay in one database on your own device. The only thing it does by itself is a once-a-day check for new versions, which sends no health data and can be turned off. Everything else that could send data (backups, exports, the AI Coach) is off until you set it up.

NOOP's privacy at a glance

• NOOP account: None
• Cloud sync: None
• Analytics or tracking: None
• Where data lives: On your device
• Talks to WHOOP's servers: Never
• On by default: Daily update check

NOOP's developers describe the app as offline by default: the path from your strap to your scores (Bluetooth, decoding, the local database, the calculations) has no network code at all. "Offline" doesn't mean the app never makes a request, though, so the rest of this page lists exactly when one can happen.

What stays on your device

Everything NOOP knows about you lives in a single database file inside the app's private storage, which other apps can't read:

• Strap data: heart rate, beat-to-beat (R-R) intervals, blood oxygen readings, skin temperature, breathing, motion, battery and strap events.
• Your scores: Charge, Effort, Rest, HRV, sleep stages, and everything NOOP calculates from them.
• Your imports: WHOOP, Apple Health, Health Connect and nutrition history.
• Things you enter: your profile, mood check-ins, journal notes and settings.

Old raw Bluetooth frames are kept only as a short-term buffer and cleaned out over time; the decoded data is what's kept.

When can data leave your device?

These are every case where NOOP itself connects to the internet, with what's sent and how to control it:

And the things you do yourself:

• Backups and exports you save or share go wherever you put them.
• Sharing a strap log for a bug report sends that log to wherever you share it.
• Apple Health and Health Connect exports hand data to those services on your device; what happens next follows their settings.
• Workout route maps on iPhone and Mac use Apple's map view, which can download map tiles for the area shown. The route itself is drawn on your device.

The update check is a normal web request, so GitHub sees your IP address, just as it would if you opened the releases page in a browser. If you'd rather it didn't, switch it off; the manual Check for updates button stays available.

How to keep NOOP fully offline

1. Turn off the automatic update check

   Open Settings → About and turn off Check automatically. NOOP then makes no update request at all unless you tap Check for updates.

2. Leave the AI Coach unconfigured

   Don't add an AI provider key or a custom server. Without one, the Coach makes no requests.

3. Don't set up self-hosted push (Android)

   It's off by default and only works once you enter your own server address and token.

4. Remember platform services

   Maps, Apple Health, Health Connect and your sideloading app have their own network settings, separate from NOOP.

What NOOP never collects

• No NOOP account or login. There's nothing to sign up for.
• No telemetry, analytics or crash reporting, and no third-party tracking code.
• No advertising identifiers.
• No cloud sync or remote backup run by NOOP.
• No WHOOP credentials. NOOP never logs in to WHOOP or reads from WHOOP's servers.

Every permission, explained

You can review or revoke any of these at any time in your device's settings.

Is your NOOP data encrypted?

NOOP doesn't add its own encryption to its database. Instead it relies on the protection your device already has:

• Device encryption: FileVault on Mac, and the built-in data protection on iPhone and Android, keep the file unreadable while the device is locked or switched off.
• App sandboxing: the database sits in NOOP's private storage, where other apps can't read it.

What that doesn't cover: someone using your unlocked device, and backups and exports, which are plain files anyone can open. Keep them somewhere you trust.

The AI Coach and your data

The AI Coach lets you ask questions about your data in plain language. It's built to share as little as possible:

• Off until you set it up with your own key for Anthropic, OpenAI or Google Gemini, or a server of your own, such as Ollama or LM Studio.
• What's sent: your question and the conversation. Short summaries of recent metrics and workouts are included only if you turn on data consent, which is off by default.
• What's never attached automatically: raw heart-rate streams, Bluetooth data and device identifiers.
• No middleman: requests go straight from your device to the provider you chose, whose own privacy policy applies. With a model on your own computer, nothing leaves your network.

The strap log

When something goes wrong, NOOP's developers ask for the strap log. It's kept in memory on your device and only leaves when you share it yourself. It records connection steps and command names, and the strap's Bluetooth name. It does not contain heart-rate numbers, R-R intervals, blood oxygen, temperature or any account details.

Is NOOP safe to install?

NOOP's full source code is public on GitHub, so anyone can check what it does. Your device will still warn you when you install it, because the developers publish anonymously without a paid Google or Apple developer account:

• Android flags it as an app from an unknown developer (Play Protect).
• iPhone needs your own Apple ID to sign it through SideStore or AltStore.
• Mac blocks it once because it isn't notarized. The Mac app is sandboxed.

Those warnings are about the missing signature, not about anything found in the app. The real risk is a fake copy: only download NOOP from its official releases, or through the buttons on this site, which point there.

How to delete your NOOP data

• Android: uninstall NOOP. Its data goes with it.
• iPhone: delete the app (Remove App → Delete App). Its data goes with it.
• Mac: delete the app, then remove the NOOP folder (com.noopapp.noop) from ~/Library/Containers.
• Your backups and exports stay wherever you saved them, so delete those too.

Data you sent to Apple Health or Health Connect stays there until you delete it in those apps.

Frequently asked questions