What stays on your phone, and what does not.

Effective 16 August 2026 · Versione italiana

PUMP is a training app. This policy states which data stays on your device and which does not, because that is the only question that matters.

Health data stays on your device

PUMP reads weight, height, steps, calories, heart rate, sleep, distance and workouts recorded by other apps from Apple Health and Health Connect. That data stays on your phone. It is not sent to our servers, not used for profiling and never used for advertising.

PUMP writes nothing back to the Health app.

You can revoke that access at any time: on iPhone in Settings → Privacy & Security → Health, on Android in the Health Connect settings. The app keeps working without it.

There is exactly one exception, and you choose it every time: Karol. It is explained right below.

Karol, the assistant — and what leaves your phone when you use it

Karol is the feature that counts calories from a photo of your plate and answers your questions. To do that it sends what you give it to an external service — OpenRouter, which in turn queries the AI model. The feature cannot exist without that step: it does not run on the phone.

Before the first request the app asks what it may send, and the choice is yours:

Only what you type or photograph — the text of your message, or the picture of the plate. Nothing else.
Health context as well — weight, height, age, gender, steps, sleep and heart rate: this is what lets Karol actually answer “how is it going”. ⚠️ This is health data, and it goes to a third-party company.
Not now — and Karol does not start.

What never leaves, under either choice: your name, your email address and your date of birth. Photos and messages are not stored by us.

If you don't use Karol, none of this happens: the rest of the app works exactly the same without sending anything to anyone.

What is stored on our servers

If you create an account — it exists so you can find your things on another device — the following is stored on our servers, which are located in Europe:

your email address and your password, kept only as a cryptographic hash: we cannot read it;
the name you entered in your profile;
weight, height, date of birth and gender, if you entered them: they are used to compute your calorie needs and training loads;
your plans, sessions, sets, logged meals and water.

These are the things that must travel between your devices. Nothing else is uploaded. If you want to know which providers we use to store them, ask and we will tell you.

What we do not do

No advertising and no tracking: PUMP contains no ad SDKs and no third-party analytics.
We do not sell or share your data with anyone.
We do not use your data to train models.

When you publish a plan

If you choose to publish a plan in the showcase, its title, description, structure and your name as the author become public. Nothing else from your profile. You can withdraw it at any time: it leaves the showcase, and whoever already downloaded it keeps it.

Deleting your account

From “You” → Account you can delete your account. Deletion removes all of your data from our servers, including published plans, which leave the showcase. This cannot be undone.

Retention

Data is kept while your account exists. Deleting it removes the data. Health data read from the Health app lives only on your phone and is gone when you delete the app.

Children

PUMP is not intended for people under 13 and does not knowingly collect data from them.

Contact

For any question about this data, or to exercise your GDPR rights (access, rectification, erasure, portability): supporto@pumpapp.net.