Privacy Policy

1. Who we are

WOPER (woper.ai) is operated by MB "Treneris kalnuose", which is the data controller for the personal data described in this policy.

MB "Treneris kalnuose", company code 305416450, Aguonų g. 8A-7, LT-03213 Vilnius, Lithuania. Contact: hello@woper.ai.

WOPER is a wellness and training-load tool for Oura Ring users. It is not a medical device and does not diagnose, treat or prevent any disease.

2. What we collect

Waitlist and reservation. Your name (if you give it), email address, the plan you choose, your survey answers, and basic technical data such as device, browser, pages visited and the ad campaign that brought you to us.

Oura data, only if you connect your Oura account. This happens only with your explicit consent on Oura's own authorization (OAuth) screen. It can include personal info (age, sex, height, weight), daily sleep, readiness, activity, heart rate variability (HRV), resting heart rate, heart rate, workouts, SpO2 and stress data. We request only the data types needed to produce your recommendation.

Morning check-in. What you enter yourself: how you feel, yesterday's training and how hard it felt.

Payments, once paid plans launch. Payments are processed by Stripe. We never see or store your full card number.

3. How we use your data

• To produce your own daily training recommendation and to run and improve the service for you.
• To contact you about your reservation or account.
• To measure how our ads perform.

We never sell, rent or share your Oura data with third parties. We never use your Oura data to train, fine-tune or improve any AI or machine-learning model. Our recommendation engine is rule-based and does not send your Oura data to any large language model. We do not use Oura data for advertising or marketing targeting.

4. Legal basis (GDPR)

• Consent — for connecting Oura and for health-related data, which we process only with your explicit consent under Article 9(2)(a) GDPR.
• Contract — to provide the service you signed up for.
• Legitimate interest — for security and basic analytics.

You can withdraw your consent at any time. This does not affect processing that happened before you withdrew it.

5. Your Oura data

• You grant access through Oura's OAuth screen, and you can revoke it at any time in your Oura account or by contacting us.
• When you disconnect, we stop processing your Oura data immediately.
• When you ask us to delete your data, we delete all of it within 72 hours.
• We delete your Oura data when you cancel your WOPER subscription or close your account.
• We keep Oura data only as long as strictly necessary to provide the service.
• WOPER is an independent service. It is not affiliated with, endorsed by or sponsored by Oura.

6. Service providers

We use these processors under written agreements:

• Lovable and Supabase — hosting and database.
• Google Workspace — email and data processing.
• Stripe — payments, once paid plans launch.
• Meta — ad measurement on the landing page only. Meta never receives Oura data.

Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses where required.

7. Website analytics

Our website uses Lovable's built-in visitor analytics. It uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify you. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

It records the pages you visit, where you came from, your country, browser, operating system and device type, how long you stay, how fast pages load, errors, and which buttons and links are clicked. This is recorded for every visitor. Detailed data is kept for 90 days and daily summaries for one year.

For ad measurement we may also use Google Analytics and the Meta Pixel on the landing page. When active, these may set cookies or similar identifiers in your browser and send page-visit, sign-up and campaign data to Google and Meta.

8. How long we keep data

• Waitlist data: until you unsubscribe, or 24 months after our last contact with you.
• Account and Oura data: while your account is active, and deleted within 72 hours after a deletion request or disconnection.

9. Security

Your data is encrypted in transit and at rest. Access is limited to people who need it, and admin accounts are protected by multi-factor authentication.

10. Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time.

To use any of these rights, email hello@woper.ai. We reply within 30 days.

You can also complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).

11. Children

WOPER is not intended for anyone under 18, and we do not knowingly collect their data.

12. Changes to this policy

We will post any updates on this page and notify account holders of material changes.