Privacy Policy

Introduction

Pump Logic ("we," "our," or "us") is operated by Eduard Rusu. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Pump Logic (the "App").

We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Email address - Used for authentication and communication
• Password - Stored securely as a hash (we never store plain text passwords)
• Username - Your unique identifier in the App
• Display name - How your name appears to others

Profile Information

You may optionally provide:

• First and last name
• Profile picture
• Bio (up to 500 characters)
• Date of birth
• Gender
• Location (city/country)
• Phone number
• Emergency contact information

Health and Fitness Data

To provide personalized fitness services, we collect:

• Physical metrics - Height, weight
• Fitness level - Beginner, intermediate, or advanced
• Fitness goals - Such as weight loss, muscle gain, endurance, strength, flexibility, or general fitness
• Medical conditions - Any conditions you choose to disclose for safety purposes
• Injuries - Current or past injuries, including severity and affected areas

Workout Data

When you use the App to track workouts, we collect:

• Workout sessions - Start time, end time, duration, status
• Exercises performed - Exercise names, sets, repetitions, weights used
• Rest periods - Time between sets
• Performance metrics - Calories burned (estimated), performance scores
• User feedback - Your ratings and comments on workouts

AI Interaction Data

When you use our AI Coach feature:

• Chat messages - Your conversations with the AI coach
• AI preferences - Your selected AI personality and interaction frequency
• Workout generation requests - Your preferences for AI-generated workouts

Device and Usage Data

We automatically collect:

• App preferences - Theme, language, units of measurement
• Usage patterns - How you interact with the App
• Error logs - Technical information to help us fix bugs

How We Use Your Information

We use the information we collect to:

1. Provide and maintain the App - Enable core functionality like workout tracking and progress monitoring
2. Personalize your experience - Tailor workout recommendations based on your goals and fitness level
3. Power AI features - Enable the AI Coach to provide relevant advice and generate personalized workouts
4. Enable social features - Display leaderboards and allow you to share achievements
5. Improve the App - Analyze usage patterns to enhance features and fix issues
6. Communicate with you - Send important updates, respond to inquiries, and provide support
7. Ensure safety - Detect and prevent fraud, abuse, or security issues

Third-Party Services

We use the following third-party services to operate the App:

Supabase

• Purpose: Database, authentication, and cloud storage
• Data shared: All account, profile, workout, and App data
• Data location: Secure cloud servers

OpenRouter API (AI Services)

• Purpose: Powers the AI Coach feature and workout generation
• Data shared: Only the text of your chat messages and workout preferences
• Data NOT shared: Your email, name, user ID, workout history, or any personal identifiers
• AI conversations are processed to generate responses and are not used to train AI models

RevenueCat

• Purpose: In-app purchases and subscription management
• Data shared: Purchase history, subscription status, transaction identifiers, device identifiers
• Data NOT shared: Your email, name, workout data, or chat conversations
• Data location: RevenueCat's secure cloud servers (US-based)
• RevenueCat processes payment transactions on behalf of Apple App Store and Google Play Store

Data Storage and Security

Cloud Storage

Your data is stored securely in our cloud database with:

• Encryption in transit - All data transmitted using TLS/HTTPS
• Encryption at rest - Database encryption for stored data
• Row Level Security - Database policies ensuring you can only access your own data
• Regular backups - To prevent data loss

Local Storage

For offline functionality, some data is stored on your device:

• Offline queue - Pending operations when you're offline
• Cached data - Recent data for faster App performance
• Preferences - Your App settings

Your Rights Under GDPR

As a user in the European Union, you have the following rights:

Right to Access

You can request a copy of all personal data we hold about you. Use the data export feature in the App (Settings > Privacy > Export My Data).

Right to Rectification

You can update or correct your personal information at any time through your profile settings.

Right to Erasure ("Right to be Forgotten")

You can request deletion of your account and all associated data:

1. Go to Settings > Account > Delete Account
2. Confirm your password
3. Your account enters a 30-day grace period
4. During this period, you can cancel the deletion request
5. After 30 days, all your data is permanently deleted

Right to Data Portability

You can export your data in standard formats (JSON, CSV, PDF, Excel) to transfer to another service.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time through the App settings.

Data Retention

• Active accounts: Data is retained while your account is active
• Default retention: 365 days for analytics data (configurable from 30 to 2555 days)
• Account deletion: All data permanently deleted 30 days after deletion request

Children's Privacy

Pump Logic is intended for users aged 13 years and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@pump-logic.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the App, updating the "Last Updated" date, and sending you an email notification for significant changes.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Data Protection Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority. In Romania, this is: