Privacy Policy
Last updated: 27th June 2025
The Simple Version
We only collect what we need to make FistPump work for you. We don't sell your data, share it with advertisers, or use it for anything other than improving your gym tracking experience.
What We Collect
When You Use FistPump Without Signing Up
- Workout data: Exercise names, reps, weights, RPE, and notes you enter
- App usage: Which features you use to improve the app
- Device info: Basic info like your device type and app version for bug fixes
This data stays on your device only.
When You Create an Account
- Email address: To sync your data and send important updates
- Password: Stored securely
- Workout data: Same as above, but now synced to our secure servers
We Don't Collect
- Your real name (unless you put it in notes)
- Your location
- Your contacts
- Your photos
- Your other apps
- Anything from your camera or microphone
How We Use Your Data
To make the app work:
- Store your workout history
- Sync data between your devices
- Show your progress over time
To improve FistPump:
- Fix bugs and crashes
- Understand which features are most useful
- Make the app faster and better
To communicate with you:
- Send important app updates
- Respond to your support requests
- Share new features
Your Rights (GDPR & More)
You control your data:
- See it: Download all your data anytime from the app
- Fix it: Edit or delete any workout entries
- Move it: Export your data to use elsewhere
- Delete it: Remove your account and all data permanently
Just contact us at support@fistpumpapp.com to exercise these rights.
Data Security
- We use secure, reputable cloud providers
- Regular security audits and updates
- No data is stored on unsecured servers
Data Sharing
We never sell your data.
We only share data when:
- You explicitly ask us to (like data export)
- Required by law (court orders, etc.)
- To protect our rights or safety (fraud prevention)
We use some trusted services:
- Cloud hosting for data storage
- Analytics to understand app usage
- Email service for communications
These services have strict privacy agreements with us.
International Users
If you're outside the US, your data may be transferred to and processed in the United States where servers may be located. We ensure the same privacy protections apply regardless of location.
Children's Privacy
FistPump is not intended for children under 13. We don't knowingly collect data from children. If we discover we have, we'll delete it immediately.
Data Retention
- Active users: We keep your data as long as your account is active
- Inactive users: If you don't use FistPump for 3 years, we'll email you before deleting your account
- Deleted accounts: Data is permanently deleted within 30 days
- Backups: May retain data in backups for up to 90 days for security purposes
Changes to This Policy
We'll update this policy occasionally to reflect new features or legal requirements.
Contact Us
Questions about privacy?
- Email: support@fistpumpapp.com
- Website: fistpumpapp.com/privacy
Data Protection Officer (for EU users):
- Email: support@fistpumpapp.com
Cookie Policy (Website)
- Essential cookies: Make the website work (login, preferences, security)
- Analytics cookies: Help us understand how people use our website (anonymized)
- Marketing cookies: We don't use these
You can disable non-essential cookies in your browser settings anytime.
This policy applies to the FistPump mobile app and fistpumpapp.com website.