Skip to content
NAFA

Developer · Integration

WHOOP Data Integration

Last updated · July 10, 2026

NAFA (bundle me.fitarc.app) is a strength-training and nutrition app. Members can connect their WHOOP account to bring recovery, sleep, and strain into their daily training readiness. This page shows the exact in-app experience: where a member connects WHOOP, and every screen where WHOOP data is displayed and used.

Scopes we request

read:recoveryRecovery score, HRV, resting heart rate
read:sleepSleep duration and sleep performance
read:cyclesDaily strain
read:workoutWHOOP workouts, matched to logged NAFA sessions
read:profileWHOOP user id — connection identity
offlineRefresh tokens for background updates

How a member connects WHOOP

  1. Open Profile → Integrations. The member goes to Settings and taps the Integrations row.
  2. Tap Connect on the WHOOP row. This launches WHOOP's OAuth authorization; the member grants the scopes above.
  3. NAFA fetches the latest data. On return, NAFA pulls the most recent recovery, sleep, strain, and workouts from the WHOOP v2 API.
  4. WHOOP data appears in the app. It renders on the dashboard WHOOP card and feeds the member's daily readiness score.

The screens

Members reach the integration from Profile → Settings. The Integrations row (“Whoop · wearables”) opens the connection screen.
1 · Entry pointMembers reach the integration from Profile → Settings. The Integrations row (“Whoop · wearables”) opens the connection screen.
The WHOOP row is the OAuth entry point — tapping Connect starts WHOOP authorization; once linked it shows the connected account with a Disconnect control. (Captured before this build was provisioned with production credentials, so it reads “Coming soon”.)
2 · Connect WHOOPThe WHOOP row is the OAuth entry point — tapping Connect starts WHOOP authorization; once linked it shows the connected account with a Disconnect control. (Captured before this build was provisioned with production credentials, so it reads “Coming soon”.)
The dashboard WHOOP card shows data pulled via the API — Recovery 59% (HRV 72 ms · RHR 58 bpm), day Strain, and Sleep 7 h at 82% performance — clearly labeled as WHOOP.
3 · Live WHOOP dataThe dashboard WHOOP card shows data pulled via the API — Recovery 59% (HRV 72 ms · RHR 58 bpm), day Strain, and Sleep 7 h at 82% performance — clearly labeled as WHOOP.

How each metric is used

WHOOP dataScopeWhere it appearsHow it's used
Recovery, HRV, RHRread:recoveryDashboard WHOOP card · ReadinessDisplayed with attribution; blended into the daily readiness score
Sleep hours & performanceread:sleepDashboard WHOOP cardDisplayed; contributes to readiness
Day strainread:cyclesDashboard WHOOP cardDisplayed as training-load context
Workoutsread:workoutWorkout historyMatched to logged NAFA training sessions
Profile (user id)read:profileIntegrations screenConnection identity for connect / disconnect

Data handling

  • Member-only. WHOOP data is shown only to the member it belongs to — never sold, and never used for advertising.
  • Revocable. Members can disconnect WHOOP at any time (which revokes access) and can delete their account and data in-app.
  • Secure tokens. Access and refresh tokens are stored encrypted server-side and refreshed via the offline scope; raw tokens never reach the client.
  • Attributed. WHOOP-sourced metrics are labeled as WHOOP wherever they appear.