Privacy Policy

Last updated 8 October 2026

WHO WE ARE

Pump It Up is based in the United Kingdom. We are the "data controller" for the personal information described here, which means we decide how and why it's used.

Questions or requests about your data: [email protected]. If we appoint a representative in the UK or EU, their details will be listed here.

THE SHORT VERSION

We use your information to build and run your training and nutrition plan, and to run your account. We never sell your personal information or share it for advertising. Your health information is only used with your explicit consent, and you can see, download or delete your data at any time.

WHAT WE COLLECT

Information you give us: your name, email address and password (or your Apple or Google sign-in); your quiz answers, such as your goals, training experience, available days and equipment, muscle focus, diet preference and activity level.

Health and body information: your age, sex, height, weight, target weight and, if you choose to add them later, workouts, food logs, body measurements, progress photos and anything you tell us about injuries. In many countries this counts as sensitive or "special category" data, so we only use it with your explicit consent.

Information collected automatically: basic device and app information (device type, operating system, app version, language), crash reports and how the app is used, so we can fix problems and improve it. We do not collect your precise location.

Information from others: if you sign in with Apple or Google, they share your name and email address (or an anonymous relay email if you choose that with Apple). If you connect Apple Health or Google Health Connect in future, we only read the data you allow.

APPLE HEALTH AND GOOGLE HEALTH CONNECT

If you choose to connect Apple Health (HealthKit) or Google Health Connect, your phone asks you which types of data to share, and you can change this at any time in your phone's settings. We only read the types you allow, such as steps, active energy, workouts, heart rate, sleep, weight and body measurements, and we only write data (such as finished workouts) if you allow it.

We use this data only to show your progress and personalise your plan and targets inside Pump It Up. We never use it for advertising or marketing, never sell it, and never share it with third parties except the service providers who store it for us. Our use of data from Google Health Connect follows Google's Health Connect permissions policy, including its Limited Use requirements.

Disconnecting stops new data being read. You can also ask us to delete any health data we have stored.

HOW WE USE IT

To build your personal plan (workouts, sets, reps, calories, macros and goal estimates) and adjust it as you progress.

To run your account: signing in, saving your plan, keeping your data in sync and providing support.

To keep the app safe, working and improving: fixing bugs, preventing abuse and understanding which features help people.

To contact you about your account, changes to these terms, and, only if you opt in, tips and news. You can opt out of non-essential messages at any time.

Your plan is created automatically from your answers. It does not make any decision with legal or similarly significant effects about you, and you can change your answers or ask us about it at any time.

OUR LEGAL REASONS (UK, EU AND SIMILAR LAWS)

Contract: to provide the app and your plan when you create an account.

Explicit consent: to use your health and body information. You give this in the app and can withdraw it at any time; this stops us using that information from then on, but the app may no longer be able to build a personal plan.

Legitimate interests: to keep the app secure, fix problems and improve it, in ways you would reasonably expect and that do not override your rights.

Legal obligations: where the law requires us to keep or share information.

WHO WE SHARE IT WITH

We never sell your personal information and never share it for targeted advertising.

Service providers who run the app for us, under contracts that only let them use your data to provide their service to us and require them to protect it: our database and hosting provider (Supabase), sign-in providers (Apple and Google), crash reporting and analytics tools, and email delivery. A current list is available on request.

App stores: Apple and Google process purchases and subscriptions under their own privacy policies.

Legal reasons: if required by law, court order or a valid request from authorities, or to protect the rights, safety and property of our users, the public or us.

Business changes: if Pump It Up is sold or merged, your information may transfer to the new owner, who must keep protecting it under this policy. We will tell you before that happens.

INTERNATIONAL TRANSFERS

Our service providers may store or process data in countries other than yours, including the UK, the European Economic Area and the United States. When we transfer personal information out of the UK or EEA, we use approved safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, or rely on an adequacy decision.

HOW LONG WE KEEP IT

We keep your information while your account is open. If you delete your account, we delete your personal information within 30 days, except where the law requires us to keep something for longer (for example purchase records for tax). Backups are overwritten within 90 days.

Answers you enter before creating an account stay only on your device until you sign up or delete the app.

HOW WE PROTECT IT

We use encryption in transit, access controls so each account can only reach its own data, and reputable providers with strong security. No system is completely secure, so please use a strong, unique password. If a breach affects your data, we will tell you and the relevant authorities as the law requires.

YOUR RIGHTS

Depending on where you live, you can: access the data we hold about you; correct it; delete it; download it in a portable format; object to or restrict how we use it; and withdraw consent at any time. Most of this can be done in the app, or email us.

UK and EU: you can also complain to your data protection authority, such as the Information Commissioner's Office (ico.org.uk) in the UK. We would appreciate the chance to help first.

California and other US states: you have the right to know what we collect and why, to delete and correct it, and to opt out of the "sale" or "sharing" of personal information or its use for targeted advertising. We do not sell or share personal information in those ways, and we only use sensitive information to provide the app. We will not treat you differently for using your rights. You can use an authorised agent.

Canada, Australia, Brazil and elsewhere: you have similar rights to access, correct and delete your information, and to complain to your local privacy regulator.

We respond within one month (or the time your local law sets). We may need to confirm your identity first.

CHILDREN

Pump It Up is not for children under 13, and we do not knowingly collect information from them. If you are under the age of digital consent where you live (for example 16 in some EU countries), you need a parent or guardian's permission to use the app. If we learn that we have collected information from a child without the required permission, we will delete it. Parents can contact us at any time.

CHANGES TO THIS POLICY

We may update this policy as the app grows (for example when we add food logging, progress photos or an AI coach). We will show the date it was last updated and tell you in the app before any important change takes effect. Where the law requires it, we will ask for your consent again.

CONTACT

Pump It Up, United Kingdom. Email: [email protected].