This policy covers the League of Pumps mobile application ("the App") and this website. Please read it carefully. If you have questions, email [email protected].

1. Who we are

League of Pumps is operated from Amsterdam, Netherlands. References to "we", "us", or "our" throughout this document refer to the League of Pumps team. You can reach us at [email protected].

2. What data we collect and why

Account information

When you create an account, we collect your email address and display name. If you sign in with Google, we also receive a profile photo URL and your Google account identifier. This data is used to identify your account, send transactional emails (such as email verification), and display your profile within the App.

Camera and pose data

The App uses your device camera to perform real-time pose detection. Video frames are processed locally on your device using an on-device machine learning model. We do not transmit, store, or retain any raw video footage or images captured by your camera. The only data sent to our servers is the derived workout output: the number of completed reps, form scores, and timestamps.

Workout data

We store the workout records you generate: exercise type, rep count, form score per rep, set duration, and the date and time of each session. This data is used to display your workout history, calculate your leaderboard standing, and improve the form-detection models over time (in aggregate, anonymised form).

Device information

We collect limited device information — including device model and operating system version — for the purpose of diagnosing crashes and compatibility issues. We do not use this data for advertising.

Beta subscriber list

If you submit your email address via the website sign-up form, we store your name and email address to contact you about beta access and app updates. You can ask to be removed at any time by emailing [email protected].

3. How we use your data

We do not sell your personal data. We do not use your data for behavioural advertising.

4. Third-party services

We use a small number of third-party services to operate the App and website:

We do not share your personal data with any other third parties beyond what is described above.

5. Data storage and retention

Your data is stored on servers located in Germany (Contabo GmbH infrastructure). Data is retained for as long as your account is active. If you delete your account, your personal data and workout records are deleted within 30 days. Anonymised, aggregated statistics may be retained indefinitely.

6. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. Children

The App is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately at [email protected].

8. Security

We use industry-standard security practices: encrypted data transmission (TLS), hashed passwords, access-controlled infrastructure, and row-level security on our database. No system is perfectly secure. If you suspect a breach involving your account, contact us at [email protected].

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. For material changes, we will notify you by email or via an in-app notice before the change takes effect.

10. Contact

For any privacy-related questions or requests, contact us at:
[email protected]