Last updated: May 26, 2026
Pump!Lab ("we", "our", "the app") is a workout tracking application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
If you subscribe to Pump!Lab Premium, your subscription is processed by Apple through standard StoreKit. We receive your subscription status (active, expired, refunded, trial) from Apple via App Store Server Notifications. We do not receive or store your payment method or financial details — these are handled entirely by Apple.
Your subscription status is stored on your user account so that premium features are available to you across your devices.
If you consent to Coach Max / Coach Maxine, your workout history, heart rate data (if available from Apple Health), muscle scores, profile data (gender, age, weight, height, fitness goals), and pump metrics may be sent to Google's Vertex AI service (via Firebase) to generate personalized training conversations.
Google does not use this data to train AI models. Logs may be retained transiently for safety and abuse review, then deleted. Google Cloud maintains industry-standard privacy and security protections.
You must explicitly consent before any data is sent, and you can revoke consent at any time in Settings.
Coach Max / Coach Maxine is a feature of Pump!Lab Premium for unlimited use. Free tier users may have up to 3 conversations per rolling 7-day period.
If you opt in to the Personalized Avatar feature, you may capture or upload a photo of your face. Your photo is sent once to Google Vertex AI (Gemini) to generate a personalized illustrated avatar. The original photo is not stored on Pump!Lab servers. Google may briefly retain the photo for safety review per Vertex AI commercial terms; it is not used to train AI models.
The data extracted from your photo to generate the avatar is biometric information and sensitive personal information under privacy laws including the California Consumer Privacy Act.
Your generated avatar is stored on your device by default. If you enable Avatar Sharing, your avatar is also stored on your Pump!Lab account so it can appear to other Pump!Lab users — next to your name on the Leaderboard, your posts in The Rack, and your messages in Chat — and sync across your devices. Disabling Avatar Sharing deletes the account-stored copy.
Personalized Avatar is restricted to users 18 and older. Biometric privacy laws place special requirements on collecting this data from minors, and we've chosen to limit the feature to adults. We collect your date of birth at opt-in to verify age. We do not retain DOB for users who do not opt in.
Personalized Avatar is not available to users in Illinois due to Illinois Biometric Information Privacy Act (BIPA) compliance.
You can revoke consent and delete your avatar at any time in Settings → Personalize Avatar. Deleting your avatar removes it from both your device and our servers (if previously uploaded for Avatar Sharing). You may also exercise your rights to know, delete, and limit the use of sensitive personal information by contacting us at info@pump-lab.com.
The Pump!Lab iOS app integrates with Apple HealthKit to read and write workout data and to read heart rate, resting heart rate, and HRV. This integration is entirely optional and requires your explicit permission. HealthKit data is processed locally on your device and is not sent to our servers, sold, or shared with third parties — unless you separately consent to Coach Max / Coach Maxine, in which case workout and heart rate data may be sent to Google Cloud's Vertex AI for processing (see Coach Max / Coach Maxine section above). We do not use HealthKit data for advertising or marketing purposes. You can revoke HealthKit access at any time in your device's Settings > Health > Data Access.
We use Google Firebase for cloud data storage and hosting. Firebase's privacy policy can be found at firebase.google.com/support/privacy.
We use Capgo (capgo.app) to deliver over-the-air updates of app content (JavaScript, HTML, CSS) to the iOS app. For this purpose, Capgo receives a per-install device identifier (stored on your device and not linked to your identity) along with app and OS version metadata. This data is used solely to route the correct update bundle to your device. Capgo's optional analytics telemetry is disabled.
Your data is retained as long as you use the app. You may request deletion of your account and all associated data at any time by contacting us at info@pump-lab.com.
Pump!Lab is not directed at children under 13. We do not knowingly collect data from children under 13.
The Personalized Avatar feature is restricted to users 18 years of age or older.
We may update this policy from time to time. Changes will be posted on this page with an updated date.
If you have questions about this privacy policy or your data, contact us at info@pump-lab.com.