What stays on your phone, and what does not.

Effective 16 August 2026 · Versione italiana

PUMP is a training app. This policy states which data stays on your device and which does not, because that is the only question that matters.

Health data stays on your device

PUMP reads weight, height, steps, calories, heart rate, sleep, distance and workouts recorded by other apps from Apple Health and Health Connect. That data stays on your phone. It is not sent to our servers, not used for profiling and never used for advertising.

PUMP writes nothing back to the Health app.

You can revoke that access at any time: on iPhone in Settings → Privacy & Security → Health, on Android in the Health Connect settings. The app keeps working without it.

There is exactly one exception, and you choose it every time: Karol. It is explained right below.

Karol, the assistant — and what leaves your phone when you use it

Karol is the PUMP assistant: it answers your questions about training and food, and from a photo of your plate it estimates what is on it and how much it weighs. It is a Gold feature. To do that it sends what you give it to an external service — OpenRouter, which in turn queries the AI model. The feature cannot exist without that step: it does not run on the phone.

Before the first request the app asks what it may send, and the choice is yours:

Only what you type or photograph — the text of your message, or the picture of the plate. Nothing else.
Health context as well — the name you entered in your profile, weight, height, age in years, gender, and that day's data: steps, active energy, exercise minutes, distance, sleep and resting heart rate. This is what lets Karol actually answer “how is it going”, and call you by name. ⚠️ This is health data, and it goes to a third-party company.
Not now — and Karol does not start.

What never leaves, under either choice: your email address and your date of birth — what goes out is your age in years, not the day. If you pick “only what you type or photograph”, nothing leaves the database: not even your name. Photos, messages and answers are not stored by us: they cross our servers and end up in no table and in no log. The conversation lives in the app only for as long as you keep it open.

If you don't use Karol, none of this happens: the rest of the app works exactly the same without sending anything to anyone.

What is stored on our servers

If you create an account — it exists so you can find your things on another device — the following is stored on our servers, which are located in Europe:

your email address and your password, kept only as a cryptographic hash: we cannot read it;
the name you entered in your profile;
weight, height, date of birth and gender, if you entered them: they are used to compute your calorie needs and training loads;
your plans, sessions, sets, logged meals and water.

These are the things that must travel between your devices. Nothing else is uploaded. If you want to know which providers we use to store them, ask and we will tell you.

If you sign in with Google or Apple

The sign-in sheet belongs to the system, not to us: the password of your Google or Apple account never passes through PUMP and we do not receive it in any form.

What the provider hands us is your email address and your name, plus the identifier that provider recognises you by, which is what links you back to your account next time. Nothing else: no address book, no contacts, no photos, no data from your profile on those services. They are the same two fields you would give us by registering with an email address and a password.

What we do not do

No advertising and no tracking: PUMP contains no ad SDKs and no third-party analytics.
We do not sell or share your data with anyone.
We do not use your data to train models.

When you publish a plan

If you choose to publish a plan in the showcase, its title, description, structure and your name as the author become public. Nothing else from your profile. You can withdraw it at any time: it leaves the showcase, and whoever already downloaded it keeps it.

Deleting your account

From “You” → Account you can delete your account. Deletion removes all of your data from our servers, including published plans, which leave the showcase. This cannot be undone. The step by step is in Deleting your account.

Retention

Data is kept while your account exists. Deleting it removes the data. Health data read from the Health app lives only on your phone and is gone when you delete the app.

Children

PUMP is not intended for people under 13 and does not knowingly collect data from them.

Contact

For any question about this data, or to exercise your GDPR rights (access, rectification, erasure, portability): supporto@pumpapp.net.