Privacy Policy

1. Information We Collect

Information you provide

• Account details — the email address or phone number you use to sign in.
• Profile details — such as your name, date of birth, sex, height, weight, training experience, goals, and any social links you choose to add.
• Training data — the workouts, exercises, sets, reps, weights, and other logs you record in the app.
• Support and feedback — bug reports, support messages, screenshots or technical context you choose to attach, and any information you include in them.
• Feature request activity — request titles, descriptions and categories; votes; reports and report details; author blocks; and moderation or participation-restriction records associated with your account.

Health and fitness data

The Service processes the fitness data you log. If you grant permission, the app may also read or write health and fitness information through Apple Health (HealthKit) — for example, workouts and body measurements — to personalize your training. We access Apple Health data only with your explicit permission, and you can revoke that permission at any time in the iOS Settings app.

Information collected automatically

• Device and usage information — such as device model, operating-system version, app version, settings, and how you interact with features.
• Diagnostics — crash reports, performance data, and error logs, collected through Sentry to keep the app stable.
• Session replays — Sentry may record a reconstruction of your in-app interactions to help us diagnose issues. Text inputs and sensitive fields are masked, and replays are used only for debugging and product improvement.

Information from sign-in providers

If you sign in with Apple or Google, that provider sends us basic profile information — typically your name and email address or a unique identifier — so we can create and secure your account. We request only basic profile information; we do not request access to your contacts, mailbox, files, or other provider data. If you use Apple's "Hide My Email" feature, we receive a private relay address instead of your personal email.

Purchase information

When you buy a subscription, the purchase is processed by the Apple App Store and your subscription status is managed through RevenueCat. We receive confirmation of your subscription and its status; we do not receive or store your full payment card number.

2. How We Use Your Information

We use the information we collect to:

• provide the Service — generate and adapt your workout plans, calculate target weights and progression, and save your training history;
• create and secure your account and authenticate you;
• process and manage subscriptions;
• respond to your support requests;
• operate the feature request board — review and publish requests, rank them by votes, provide roadmap updates, merge similar ideas, investigate reports, and moderate misuse;
• keep the Service safe, detect and prevent fraud and abuse, and debug problems;
• analyze usage to understand and improve the Service; and
• comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your health or fitness data — including any data obtained through Apple Health — for advertising or marketing.

3. Apple Health (HealthKit) Data

You can review and manage the health data the app can access at any time in Settings → Health → Data Access & Devices on your device.

4. How We Share Your Information

We do not sell your personal information. We share information only in these limited circumstances:

Feature request board

When a feature request is approved, its title, description, category, roadmap state, vote total, and public staff updates are visible to other signed-in users. Your account identity and contact details are not shown with the request unless you put identifying information in the request text yourself. Your reports, block choices, and internal moderation records are not shown to other users.

Service providers

We share information with vendors who process it on our behalf, under contracts that limit their use of it to providing services to us:

• Supabase — database, authentication, and secure hosting of your account and app data;
• RevenueCat — subscription management and receipt validation;
• Sentry — crash reporting, performance monitoring, and session replay;
• Apple and Google — sign-in; and Apple — payment processing for subscriptions.

Legal, safety, and business transfers

We may disclose information if required by law or valid legal process, to protect the rights, safety, or property of PUMPD, our users, or the public, or in connection with a merger, acquisition, financing, or sale of assets. We may also share information with your consent or at your direction.

5. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, feature requests you authored and your votes, reports, author blocks, and feature-board restriction record are deleted with the account. We also delete or de-identify other personal information within a reasonable period, except where we must retain limited information to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements. Residual copies may persist in backups for a limited time before being overwritten.

6. Your Choices

• Access and update — you can view and edit your profile and training data in the app.
• Feature request controls — you can remove your votes, report a request, block an author, and withdraw your own request while it remains unpublished.
• Delete your account — you can delete your account and associated data from within the app, or by contacting us. See /data-deletion for details.
• Apple Health — you can grant or revoke health-data permissions in the iOS Settings app.
• Notifications — you can control push notifications in your device settings.

7. Your U.S. State Privacy Rights

Depending on your state of residence — including California under the CCPA/CPRA and Texas under the Texas Data Privacy and Security Act — you may have the right to:

• confirm whether we process your personal information and access it;
• correct inaccurate personal information;
• delete your personal information;
• obtain a portable copy of it; and
• opt out of the sale of personal information or targeted advertising.

We do not sell personal information and we do not use it for targeted advertising, so there is nothing to opt out of. We will not discriminate against you for exercising your rights. To make a request, email us at support@getpumpd.com; we will verify your request through your account and respond within the time required by law. You may use an authorized agent to submit a request on your behalf. If we deny your request, you may appeal by replying to our response, and we will inform you of the outcome.

8. Data Security

We use administrative, technical, and organizational safeguards — including encryption in transit and access controls — designed to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children’s Privacy

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18, and never from children under 13. If you believe a child has provided us information, contact us at support@getpumpd.com and we will delete it.

10. U.S.-Only Service

PUMPD is intended for use in the United States, and your information is processed in the United States. If you access the Service from outside the United States, you do so on your own initiative and consent to the processing of your information in the United States.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

12. Contact Us

Questions about this Policy or your information? Contact AVAD Technologies LLC at support@getpumpd.com.