Last updated: 17 August 2026
1. Who operates FistPump
FistPump is operated by Tuhkunen Oy (business ID 3431459-3), Kontiontie 3D 32, 02110 Espoo, Finland (“Tuhkunen”, “we”, “us”). For privacy questions or support, contact support@fistpumpapp.com.
This policy covers the FistPump iOS app, the informational website at fistpumpapp.com, and support communications.
2. The short version
FistPump is an offline workout logger. It has no FistPump account, sign-in, cloud sync, advertising, tracking, or automatic analytics. Workout data stays in the app's private storage on your device unless you explicitly export or share it.
The public website does not receive your workout database. Like most hosted websites, its hosting provider processes limited technical request data needed to deliver and protect the pages.
3. Data stored by the iOS app
You may enter exercise names, workout dates, weights, repetitions, RPE values, notes, preferences, and related workout records. FistPump stores this information in the app's private on-device container to provide logging, history, progress, backup, migration, and recovery features.
FistPump does not automatically transmit this information to Tuhkunen or a FistPump server. The app contains no third-party analytics, advertising, tracking, or account SDK.
4. Export, backup, migration, and recovery
FistPump lets you export CSV, a native JSON backup, redacted diagnostics, and retained recovery material through Apple's share sheet. Sharing occurs only after your action. The destination you select controls its own handling and retention of the shared copy.
The app may retain protected migration sources, import receipts, checksums, and recovery information inside its private container so an interrupted or incomplete migration can be retried safely. FistPump does not upload this information.
Normal iPhone, Finder, or iCloud backup behaviour may include the app container according to your Apple settings. Apple controls those backup services under its own terms and privacy information.
5. Retention and deletion
On-device workout and recovery data remains until you edit or delete it, use a supported restore operation, or remove the app. Removing FistPump ordinarily removes its private local container. It does not delete copies you previously exported to Files, email, another app, a computer, a backup service, or another destination.
FistPump has no server-side account or workout copy that Tuhkunen can delete or restore. Keep a private export or device backup before removing the app or replacing a device.
6. Support communications
When you contact support, you choose what information to send. We may process your name or email address, message, and attachments to answer the request, diagnose a problem, protect the service, comply with law, and establish or defend legal claims.
Depending on the request, the legal basis is performing or preparing to perform a contract, our legitimate interest in supporting and securing FistPump, or compliance with a legal obligation. We keep support records only as long as reasonably needed for those purposes. Please do not send raw workout history or device backups unless support has explained why they are required and agreed a suitable transfer method.
7. Website information
The FistPump website is informational. It does not use advertising, behavioural tracking, or marketing cookies, and we do not enable visitor analytics.
The website is hosted by Vercel. Vercel may process ordinary technical request data, such as an IP address, timestamp, browser or device information, requested page, and security signals, to deliver and protect the site. This processing is separate from the offline iOS app and does not include your workout database. More information is available in Vercel's Privacy Notice.
Our legal basis for this limited website processing is our legitimate interest in publishing and securing FistPump's public information and support pages. We do not create a separate visitor profile or retain a separate analytics history. Vercel's retention of service and security records is described in its Privacy Notice and applicable service documentation.
Where Vercel processes personal data for us outside the European Economic Area, transfer safeguards are described in Vercel's Data Processing Addendum.
8. Sharing and sale
We do not sell personal data or receive workout data automatically from the app. Data may be disclosed:
- to a destination you explicitly select when exporting or sharing;
- to service providers used for limited website hosting or support purposes;
- when required by law or reasonably necessary to protect legal rights; or
- as part of a corporate transaction, subject to applicable notice and safeguards.
Service providers may use information only for the relevant service and under applicable contractual and legal safeguards.
9. Children
FistPump is a general-audience workout-recording tool. It does not provide accounts, social communication, advertising, or automatic collection of workout data. A parent or guardian should supervise a child's use of exercise software and physical training as appropriate. We do not knowingly request unnecessary personal data from children through support.
10. Your choices and rights
You can view, edit, export, and delete workout records directly in the app. Because Tuhkunen does not receive the local workout database, we ordinarily cannot access, correct, delete, or restore it remotely.
For applicable rights concerning website or support records — including access, correction, deletion, restriction, objection, and portability — contact support@fistpumpapp.com. We may need enough information to verify the request and identify the relevant record. You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland or your local supervisory authority.
11. Security
FistPump uses the iOS app container and Apple data-protection facilities appropriate to the app's local files. We use reasonable technical and organisational measures for website and support data. No storage or transmission method can be guaranteed to be completely secure. Protect access to your device and store exports appropriately.
12. Changes
We may update this policy when FistPump's behaviour, legal requirements, or supporting services change. The date above will change when a revision is published. A future account, sync, analytics, advertising, or automatic network feature would require updated disclosures before collection begins.