Pump AI · Legal

Privacy Policy

Effective 10 June 2026 · Last updated 10 June 2026

Pump AI ("Pump AI", "we", "us") makes a mobile fitness app for iOS with an AI coach at its center: you chat with the coach, it tracks your workouts and personal records, and friends can compete on PRs. This policy explains exactly what data the app collects, how we use it, who else touches it (including the AI provider that generates your coaching replies), and the choices you have. Plain language, no fine print.

The short version: we collect the minimum we need to run your account, coach you, store your workouts and PRs, and sync them across your devices. When you chat with the coach, your messages and relevant training data are sent to our AI provider (Anthropic) to generate each reply — the coach is AI, it can be wrong, and it is not medical advice. Your camera frames and location stay on your phone, and your progress photos are encrypted on-device and never used to train AI models. We don't sell your data. You can delete your chat history, your data, and your account from inside the app at any time, and everything is gone within 30 days.

1. Who we are

Pump AI is operated by Ethen Amezquita, an independent developer based in the United States. You can reach us at ethen121@gmail.com.

2. What we collect

2.1 Account information

Email address — held by Firebase Authentication (provided by Google) when you sign in with Apple, Google, or email/password. It's used to identify your account and recover access. Our own servers identify you by an opaque Firebase user ID only; we do not store or process your email address.
Display name — provided by Apple or Google when you sign in. Optional.
Username and avatar color — chosen by you inside the app and shown to your friends.
A Firebase Authentication user ID — an opaque identifier Pump AI uses to link your account across sessions. This is the only user identifier our backend ever sees.

2.2 Workouts and personal records

Counts, durations, distances, and timestamps of workouts you complete (push-ups, planks, runs, rep-counter sessions, dice rolls, roulette picks).
Personal records (PRs) you set and any PRs you pin to your home screen.
Streak count and last-active date used to compute streak save logic.

2.3 Onboarding preferences

The choices you make during onboarding — your motivation, experience level, goal targets for push-ups / run distance / plank, preferred workout style, what you're chasing, weekly commitment, and preferred time of day for reminders. We use these to personalize your home screen, the workout roulette weighting, and the daily reminder notification time.

2.4 Social activity

Friend relationships (mutual follow lists) and pending invites.
Workouts you choose to share to the friends feed.
"Beat attempts" — when you attempt to beat a friend's PR.

2.5 AI coach chat

The coach is an AI. When you message it, your messages — together with relevant training data (such as your recent workouts, PRs, onboarding goals, and profile basics) — are sent to our AI provider, Anthropic, whose Claude models run the generation and return a reply. We do this so the coach can give answers grounded in what you're actually working toward.

Chat history — the conversation between you and the coach is stored in our database so the coach has context across sessions and so you can scroll back through it.
Context sent to the model — the subset of your training and profile data described above, sent with each request to generate a relevant reply.

AI output can be imperfect and is sometimes wrong. The coach is not a medical professional and does not provide medical advice, diagnosis, or treatment. Stop on sharp or persistent pain and see a qualified professional. Use your own judgment.

Anthropic processes your messages only to generate the response and does not use data sent through our API to train its models. See Anthropic's privacy policy.

2.6 Progress photos and weigh-ins

Optionally, you can log body weight ("weigh-ins") and save progress photos to track changes over time.

Weigh-ins — the weight values and dates you enter, used to chart your progress and give the coach context.
Progress photos — private to you and encrypted on your device with AES-256-GCM before being stored or synced. They are never used to train AI models. If a feature offers AI body analysis of a photo, that is strictly opt-in and the image is handled exactly as described in the in-app consent shown at the time.

2.7 Purchase information

Subscription status (active / cancelled / expired) and the product identifier you purchased. Payment itself is handled by Apple — Pump AI never sees your card number, billing address, or App Store ID password. Apple shares only a receipt with RevenueCat (our subscription processor), who passes the active-or-not signal back to the app.

2.8 Camera, motion, and location — on-device only

The data below is processed entirely on your phone and is never sent to our servers, Apple, or any third party.

Camera frames — the push-up counter, plank timer, and rep counter use Google ML Kit Pose Detection to recognize body landmarks from your front camera in real time. Frames are processed on-device and discarded immediately; nothing is uploaded, recorded, or stored.
Motion / pose landmarks — derived from the same frames, used only to count reps and detect form. Discarded after the session.
Coarse location — only when you start a Run-Walk session. Used to compute distance covered. The GPS trace is summarized to a single distance number and a session timestamp before being saved. Raw coordinates are never sent to our servers.

2.9 Apple HealthKit — only if you grant access

If you opt in to HealthKit integration:

We read: heart rate samples during workouts, used only to display live BPM in the app.
We write: completed workouts, distance, and steps so they appear in Apple Health alongside data from other apps.

HealthKit data is governed by Apple's own privacy framework. Pump AI does not transmit any HealthKit data to our servers or to third parties under any circumstances. You can revoke our access at any time in the iOS Health app under Sharing → Apps.

2.10 Diagnostic data

Pump AI does not integrate Firebase Analytics, Firebase Crashlytics, or any third-party analytics SDK. The only diagnostic information that leaves your device is generic HTTP request metadata (timestamp, endpoint, HTTP status) that our backend logs as part of normal operation — we never log request bodies that contain user data.

3. How we use your data

To deliver the service — store your workouts, sync across devices, count reps, time planks, weight the workout roulette toward exercises you said you care about.
To run the AI coach — send your messages and relevant training data to Anthropic's Claude models so the coach can generate a reply, and store your chat history so it has context next time.
To personalize — adjust the home screen, greeting, tool ordering, and goal targets based on your onboarding picks.
To enable social features — show your username and shared workouts to friends you've added.
To send reminders — schedule one local notification per day at the time-of-day you selected during onboarding. These are scheduled on your phone — we don't run a push-notification server.
To process subscriptions — verify your purchase via RevenueCat and unlock premium features.
To respond to support requests — when you email us.

We do not use your data for advertising, and we do not profile you. We do send chat messages and relevant training data to Anthropic to generate coaching replies (see section 2.5), but neither we nor Anthropic use your data to train AI models, and your progress photos are never sent to any AI model except through the explicit, opt-in body-analysis consent described in section 2.6.

4. Who else touches your data

We use the following sub-processors. Each one only receives the minimum they need to do their job.

Google / Firebase (United States) — Firebase Authentication holds your sign-in credentials and issues the ID tokens our backend verifies. See Firebase's privacy practices.
Anthropic (United States) — provides the Claude AI models that power the coach. Receives your chat messages and the relevant training/profile context our backend sends with each request, and returns the generated reply. Anthropic does not use data sent through our API to train its models. See Anthropic's privacy policy.
Railway (United States) — hosts the Pump AI backend server and PostgreSQL database where your workouts, PRs, onboarding picks, chat history, weigh-ins, encrypted progress photos, and friend relationships are stored. See Railway's privacy policy.
RevenueCat (United States) — processes App Store purchase receipts and tracks subscription status. Receives a hashed user ID and the receipt; does not receive your email or workouts. See RevenueCat's privacy policy.
Apple — processes all payments through the App Store and (when you choose it) provides Sign in with Apple. We never see your payment information. See Apple's privacy policy.
Google ML Kit — pose detection model runs entirely on-device. Nothing is transmitted to Google by the app's use of ML Kit.

We do not sell or rent your data to anyone, ever, full stop. We have not received any government request for user data; if we ever do, we will challenge requests that are not legally compelled and notify affected users when permitted.

5. Where data is stored and how long we keep it

Account, workout, chat-history, weigh-in, and encrypted progress-photo data lives in our PostgreSQL database hosted by Railway in the United States.
Authentication data lives with Firebase / Google.
Chat messages are processed transiently by Anthropic to generate each reply; Anthropic does not use them to train its models.
Purchase data lives with RevenueCat and Apple.
We keep your account data for as long as your account is active.
If you delete your account inside the app, every row associated with your user is hard-deleted from the database immediately, and the Firebase Auth account is deleted within the same request. Backups roll off within 30 days, after which no copy of your data remains in our systems.

6. Security

All connections between the app and our backend use HTTPS / TLS. Every request is authenticated against a short-lived Firebase ID token that expires hourly. Database access is restricted to the production backend process and rotated credentials. We do not store your password — sign-in is handled entirely by Firebase Auth or Apple / Google providers. No system is perfectly secure, but we follow industry-standard practice.

7. Your rights and choices

7.1 Inside the app

Delete your account — Settings → Delete Account. Removes all of your data immediately and signs you out.
Delete your chat history — clear your conversation with the coach without deleting the rest of your account.
Disable sharing — Settings toggle for "share workout on finish" stops new workouts from being posted to the feed.
Revoke HealthKit access — iOS Health app → Sharing → Apps → Pump AI.
Disable notifications — iOS Settings → Notifications → Pump AI.
Sign out — Settings → Sign Out (does not delete data; sign back in to restore).

7.2 By emailing us

Email ethen121@gmail.com for any of the following. We respond within 30 days.

A copy of all data we hold about you.
Correction of data you can't change inside the app.
Export of your workout history as JSON.
Restriction or objection to specific processing.

7.3 Region-specific rights

If you're in the EEA, UK, or Switzerland: you have the rights listed under GDPR — access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local data-protection authority.

If you're in California: under the CCPA / CPRA you have the right to know what we collect, the right to delete, the right to correct, and the right to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information.

To exercise any of these rights, email us. We will not discriminate against you for exercising them.

8. Children

Pump AI is not directed to children under 13 (under 16 in the EEA). We do not knowingly collect data from children. If you believe a child has signed up, email us and we will delete the account.

9. International transfers

Our servers and sub-processors are based in the United States. If you use Pump AI from outside the U.S., your data will be processed in the U.S. We rely on Standard Contractual Clauses or equivalent safeguards offered by our sub-processors where required.

10. Changes to this policy

If we change this policy, we'll update the "Last updated" date at the top. For material changes (new data categories, new sub-processors, new purposes), we'll notify you inside the app before the change takes effect.

11. Contact

Privacy questions, data requests, or anything else — email ethen121@gmail.com. We read every message.