Privacy Policy

1. Information We Collect

Information you provide

• Account details — the email address or phone number you use to sign in.
• Profile details — such as your name, height, weight, training experience, goals, and any social links you choose to add.
• Training data — the workouts, exercises, sets, reps, weights, and other logs you record in the app.
• Training limitations — limitations or injuries you choose to record so your program can work around them, including any notes you add.
• Support and feedback — bug reports, support messages, screenshots or technical context you choose to attach, and any information you include in them.
• Feature request activity — request titles, descriptions and categories; votes; reports and report details; author blocks; and moderation or participation-restriction records associated with your account.
• Waitlist signups — if you join the waitlist on getpumpd.com, the email address you submit, together with your browser's user-agent string.

Health and fitness data

The training information you log — your workouts, sets, reps, weights, body measurements, training experience, and goals — describes your physical condition and fitness activity. We treat it as health data and handle it accordingly. It is used to build and adapt your program, and it is never used for advertising or marketing.

PUMPD does not connect to Apple Health, Google Fit, or any other health platform, and does not read data from or write data to them.

What you send the AI coach

• Messages — the text you type or dictate to the coach, and the conversation history the coach uses for context.
• Photos — any images you choose to attach to a coach message. We request access to your photo library only when you open the attachment picker, and only the images you select are uploaded.
• Voice input — when you dictate a message, your speech is transcribed to text on your device using Apple’s on-device speech recognition. The audio recording is not uploaded to us or to any third party; only the resulting text is. We request microphone access for this and you can revoke it at any time in the iOS Settings app.

Information collected automatically

• Device and usage information — such as device model, operating-system version, app version, settings, and how you interact with features.
• Product analytics — events describing how you use the app (for example, that you viewed a screen, started a workout, or voted on a feature request), together with your app version and account identifier, collected through PostHog. We do not send your messages, photos, or the contents of your logs to PostHog, and we have disabled its location lookup and session recording.
• Diagnostics — crash reports, performance data, error logs, and technical device and app metadata collected through Sentry to keep the app stable. We do not attach screenshots or view-hierarchy snapshots to error reports.
• Session replays — Sentry may record a reconstruction of your in-app interactions to help us diagnose issues. We record a sample of sessions, plus sessions in which an error occurs. We configure Sentry to mask all text, images, and vector graphics in replays. A replay may still show which screens and features were used, their layout, and the timing of interactions. Replays are used only for debugging and support.

Biometric sign-in

If you enable Face ID, authentication happens entirely on your device through iOS. Apple does not share your face or fingerprint data with us — we receive only a success or failure result. We never collect, store, or transmit biometric identifiers.

Information from sign-in providers

If you sign in with Apple or Google, that provider sends us basic profile information — typically your name and email address or a unique identifier — so we can create and secure your account. We request only basic profile information; we do not request access to your contacts, mailbox, files, or other provider data. If you use Apple's "Hide My Email" feature, we receive a private relay address instead of your personal email.

Purchase information

When you buy a subscription, the purchase is processed by the Apple App Store and your subscription status is managed through RevenueCat. We receive confirmation of your subscription and its status; we do not receive or store your full payment card number.

2. How We Use Your Information

We use the information we collect to:

• provide the Service — generate and adapt your workout plans, calculate target weights and progression, and save your training history;
• operate the AI coach — send your messages, attached photos, and relevant profile and training context to an AI provider so it can generate a reply, and store the conversation so the coach has continuity;
• create and secure your account and authenticate you;
• process and manage subscriptions;
• respond to your support requests;
• operate the feature request board — review and publish requests, rank them by votes, provide roadmap updates, merge similar ideas, investigate reports, and moderate misuse;
• keep the Service safe, detect and prevent fraud and abuse, and debug problems;
• analyze usage to understand and improve the Service; and
• comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your health or fitness data for advertising or marketing.

3. AI Coach & Your Data

We send only what the coach needs to answer you. We do not intentionally add your account email address, phone number, or payment details to a coach request; information you include yourself in a message or a photo will be sent as part of that content.

Audio never leaves your device. When you dictate a message, iOS transcribes it on-device and only the resulting text is sent.

PUMPD does not use your data to train its own AI models, and we use OpenAI's API under business terms in which OpenAI does not use submitted content to train or improve its models without our express agreement. OpenAI may retain content for a limited period for abuse and safety monitoring under its own terms.

The coach can also keep a long-term memory. If you turn it on, we extract short factual notes from what you tell the coach — for example, a recurring limitation or a preference — and store them with your account so the coach remembers them across conversations. Memory stays off until you consent to it in the app, and you can view, edit, or delete individual memories, or turn the feature off, at any time.

Conversations are stored in your account so the coach keeps context between sessions. You can delete a conversation in the app, and all conversations are deleted when you delete your account.

4. How We Share Your Information

We do not sell your personal information. We share information only in these limited circumstances:

Feature request board

When a feature request is approved, its title, description, category, roadmap state, vote total, and public staff updates are visible to other signed-in users. Your account identity and contact details are not shown with the request unless you put identifying information in the request text yourself. Your reports, block choices, and internal moderation records are not shown to other users.

Service providers

We share information with vendors who process it on our behalf, under contracts that limit their use of it to providing services to us:

• Supabase — database, authentication, and secure hosting of your account and app data in the United States;
• OpenAI — the AI provider whose models generate your coaching replies, as described in Section 3;
• PostHog — product analytics, as described in Section 1, hosted in the United States;
• RevenueCat — subscription management and receipt validation;
• Sentry — crash reporting, performance monitoring, error logs, and masked session replay, hosted in the United States;
• Apple and Google — sign-in; and Apple — payment processing for subscriptions.

Legal, safety, and business transfers

We may disclose information if required by law or valid legal process, to protect the rights, safety, or property of PUMPD, our users, or the public, or in connection with a merger, acquisition, financing, or sale of assets. We may also share information with your consent or at your direction.

5. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, feature requests you authored and your votes, reports, author blocks, and feature-board restriction record are deleted with the account. We also delete or de-identify other personal information within a reasonable period, except where we must retain limited information to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. Residual copies may persist in backups for a limited time before being overwritten. When you delete your account, we take reasonable steps to have applicable service providers delete data associated with it; some diagnostic data also expires on its own short schedule — for example, Sentry retains diagnostics for approximately 30 days.

6. Your Choices

• Access and update — you can view and edit your profile and training data in the app.
• Coach conversations — you can delete an AI coach conversation in the app. You can also use the app without the coach.
• Coach memory — long-term memory stays off until you turn it on, and you can view, edit, or delete stored memories, or disable the feature, at any time in the app.
• Feature request controls — you can remove your votes, report a request, block an author, and withdraw your own request while it remains unpublished.
• Delete your account — you can delete your account and associated data from within the app, or by contacting us. See /data-deletion for details.
• Microphone and photos — voice input and photo attachments are optional. You can grant or revoke either permission at any time in the iOS Settings app.
• Reminders — workout reminders are scheduled locally on your device, and you can control them in your device settings.
• Waitlist email — every email we send includes an unsubscribe link.

7. Your U.S. State Privacy Rights

Residents of states with applicable consumer privacy laws may exercise some or all of the rights below, subject to the scope, exceptions, and procedures in the law that applies to them. You may have additional rights under your state's law, including:

• confirm whether we process your personal information and access it;
• correct inaccurate personal information;
• delete your personal information;
• obtain a portable copy of it; and
• opt out of the sale of personal information or targeted advertising.

We do not sell personal information and we do not use it for targeted advertising; if that ever changes, we will provide any legally required notice and controls before the change takes effect. We will not discriminate against you for exercising your rights. To make a request, email us at support@getpumpd.com; we will verify your request through your account and respond within the time required by law. You may use an authorized agent to submit a request on your behalf. If we deny your request, you may appeal by replying to our response, and we will inform you of the outcome.

Washington, Nevada, and Connecticut health data rights

Washington's My Health My Data Act, Nevada's SB 370, and Connecticut's Data Privacy Act give residents of those states additional, specific rights over consumer health data. Those rights, and the health data we collect, are described in our Consumer Health Data Privacy Policy at /consumer-health-data.

8. Data Security

We use administrative, technical, and organizational safeguards — including encryption in transit and access controls — designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children’s Privacy

The Service is intended for individuals 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18, including children under 13 as defined by the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected personal information from someone under 18, we will promptly delete it. If you believe a child or teen has provided us information, contact us at support@getpumpd.com.

10. U.S.-Only Service

PUMPD is operated from the United States and intended for use in the United States, and our core systems store your information in the United States. Some of our service providers may process or transiently store information in other countries where they or their subprocessors operate. If you access the Service from outside the United States, you do so on your own initiative and consent to your information being processed in the United States and those locations.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. We will provide notice or ask for consent when required by applicable law.

12. Contact Us

Questions about this Policy or your information? Contact AVAD Technologies LLC at support@getpumpd.com, or write to us at 5900 Balcones Dr, Ste 100, Austin, TX 78731.