Privacy Policy

Pumpy is privacy-first and self-hosted. Your data lives on the operator’s own server, not a third-party cloud.

What we store

Account (email, auth), profile, plans, gyms, workouts and sets, body metrics, social preferences, and derived metrics — all on your instance.

What we don’t do

We don’t sell your data and include no third-party advertising or trackers by default.

Local storage

The app stores an offline cache (IndexedDB) on your device so workout logging works without a connection.

Your rights

Export all your data (JSON) or permanently delete your account anytime from Settings → Data.

Third parties

Only those you enable (e.g. an OAuth provider, Apple/Google Health, or your own AI-coach token holder).

Template only — not legal advice; review before any public deployment.