Whoop outlines how they sell data starting half way on page 18

Over the past twelve months, we have disclosed the following categories of your Personal Data to service providers or other parties for the business purposes listed above: ● A. Personal identifiers. ● B. Customer records identified by state law. ● C. Protected classification characteristics under state or federal law. ● D. Commercial information. ● E. Wellness and exercise data. ● F. Internet or other similar network activity information. ● G. Geolocation data. ● H. Inferences drawn from other personal information. ● I. Age or date of birth. ● J. Special categories of data under the EU General Data Protection Regulation. ● K. Personal Data about children under the age of 16.

And the list goes on

/r/whoop Thread Link - hoop.com