Legal
Privacy Policy
Last updated: June 11, 2026
This document describes how PumpDeck ("the app"), operated by Kia Kaha Labs LLC ("we"), handles your data.
1. What we collect
You sign in with Apple or Google. Through that we receive your email address (or Apple's private relay address) — we never ask for or store a password.
When you use the app, you may add: a chosen display name, body weight and height, body measurements, progress photos, and your full workout history (exercises, sets, weights, reps, plans, templates, notes).
2. How it is stored
Your account and the data you create are stored in our database hosted on Supabase (US region). Data is transmitted over TLS and stored encrypted at rest. Photos and exercise media are stored in object storage with the same protections.
3. Who sees it
Your data is yours. We do not sell it, share it with advertisers, or use it to train any model. The only third party with technical access to it is our infrastructure provider (Supabase), who acts as a data processor under their published terms.
We don't show you ads or use cross-app tracking. We may use privacy-respecting, aggregate analytics to understand how the app is used and improve it — never to identify you personally or share your data with advertisers.
4. Your rights
You can export your exercises and workout history anytime from Settings → Data → Export, or email us for a full copy of everything we hold.
You can delete your account and every record we hold about you from Settings → Account → Manage Account → Delete account. This is immediate and permanent — it removes your data from this device and from our servers.
If you live in a region with formal data rights (GDPR, CCPA, etc.), you can also email us to exercise them.
5. Children
PumpDeck is not directed at children under 13 and we do not knowingly collect data from them.
6. Changes
If we materially change how we handle your data, we will update this document and notify you in-app the next time you launch.