8 Total
3 High severity
5 Medium severity
0 Low severity
Summary

This is WHOOP's Terms of Use, governing your use of the WHOOP fitness wearable, app, and membership subscription that continuously collects your biometric health data including heart rate, sleep patterns, and recovery metrics. The most important thing to know is that by using WHOOP, you agree to binding arbitration and waive your right to sue WHOOP in court or join a class action lawsuit, with only a 30-day window from account creation to opt out of this requirement. If you want to preserve your right to take WHOOP to court, you must send a written opt-out notice to legal@whoop.com within 30 days of creating your account.

Technical / Legal Breakdown

This document governs use of WHOOP's website, mobile application, wearable hardware, and subscription-based membership services, establishing a binding contract between users and WHOOP Inc. (a Delaware corporation headquartered in Boston, Massachusetts). The terms authorize WHOOP to collect biometric and health data including heart rate, sleep, strain, and recovery metrics continuously through the wearable device, and the agreement states that users grant WHOOP a broad, royalty-free, worldwide license to use user-generated content and feedback without compensation or attribution obligations. Notably, the terms include a mandatory binding arbitration clause with a class action waiver, a 30-day opt-out window for arbitration that begins at account creation, and a limitation of liability cap set to the greater of fees paid in the prior 12 months or $100, which is narrower than some consumer-facing subscription services and may face enforceability scrutiny in certain jurisdictions. The document engages CCPA and CPRA for California residents, GDPR for EU/EEA users, and given the continuous collection of physiological biometric data, the document's data practices may require evaluation under state biometric privacy laws such as Illinois BIPA and similar state-level frameworks; HIPAA likely does not apply as WHOOP is not a covered entity, though the sensitivity of health data collected warrants attention. The terms state that WHOOP reserves the right to modify the agreement with notice, and continued use constitutes acceptance, a mechanism that compliance teams should note alongside the auto-renewal subscription structure that requires affirmative cancellation to avoid recurring charges.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 3 provisions
Medium — 5 provisions

Monitoring

Whoop has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Biometric and Health Data Collection and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 06:44 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000739
Version ID CA-V-001363
SHA-256 a367e7cd54fdc9d56492f7fb156cc3a80a7980d41e41cd12438ca67db2412522
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans