Pump⚡︎Lab Privacy Policy

Last updated: March 21, 2026

Overview

Pump!Lab ("we", "our", "the app") is a workout tracking application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

• Account information: Your chosen display name, email address, and optional password (stored as a one-way hash).
• Workout data: Exercises, sets, reps, weights, cardio activities, and related workout metrics you enter.
• App preferences: Settings such as text size, unit preferences, and display options.
• Apple Health data (iOS only): With your permission, the app reads and writes workout data (exercise type, duration, calories burned, distance) to Apple HealthKit. The app also reads (but does not write) heart rate, resting heart rate, and heart rate variability (HRV) from Apple Health. Heart rate data is used to display workout intensity zones and recovery readiness. This data stays on your device and in Apple Health — it is not uploaded to our servers. However, if you consent to the AI Coach feature, workout and heart rate data may be sent to Google Cloud for processing (see AI Coach section below).
• Location data (iOS only): With your permission, the app accesses your location during outdoor workouts (running, cycling, hiking) to track distance and route. Location data is used only during active workout tracking and is not stored on our servers.
• Motion data (iOS only): With your permission, the app accesses motion sensors to track steps and distance during treadmill workouts. This data is not stored on our servers.

How Data Is Stored

• Locally on your device: Workout data and preferences are stored in your browser's local storage for offline access.
• Cloud sync: Data is synced to Google Firebase (Firestore) to enable access across devices and group features. Data is transmitted over encrypted (HTTPS) connections.

How We Use Your Data

• To provide and improve the workout tracking service.
• To sync your data across your devices.
• To enable group and social features (leaderboards, shared workouts) with users you choose to connect with.
• To send password reset emails if you request one.

AI Coach (Coach Max)

If you consent to the AI Coach feature, your workout history, heart rate data (if available from Apple Health), muscle scores, profile data (gender, age, weight, height, fitness goals), and pump metrics may be sent to Google Cloud's Vertex AI service to generate personalized fitness advice.

Google does not use your data to train AI models. Google may temporarily log interactions for abuse detection, after which logs are deleted. No permanent records of your conversations are stored by Google. Google Cloud maintains industry-standard privacy and security protections governing how your data is processed. You must explicitly consent before any data is sent, and you can revoke consent at any time.

Data We Do NOT Collect

• We do not collect your phone number or real name (unless you choose to use it as your display name).
• We do not use advertising or ad tracking.
• We do not sell, share, or transfer your personal data to third parties for marketing purposes.
• We do not use analytics tracking services.

Apple HealthKit (iOS App)

The Pump!Lab iOS app integrates with Apple HealthKit to read and write workout data and to read heart rate, resting heart rate, and HRV. This integration is entirely optional and requires your explicit permission. HealthKit data is processed locally on your device and is not sent to our servers, sold, or shared with third parties — unless you separately consent to the AI Coach feature, in which case workout and heart rate data may be sent to Google Cloud's Vertex AI for processing (see AI Coach section above). We do not use HealthKit data for advertising or marketing purposes. You can revoke HealthKit access at any time in your device's Settings > Health > Data Access.

Third-Party Services

We use Google Firebase for cloud data storage and hosting. Firebase's privacy policy can be found at firebase.google.com/support/privacy.

Data Retention & Deletion

Your data is retained as long as you use the app. You may request deletion of your account and all associated data at any time by contacting us at info@pump-lab.com.

Children's Privacy

The app is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact Us

If you have questions about this privacy policy or your data, contact us at info@pump-lab.com.