01Who We Are
Pump Assist is published by Dedalva LLC ("we", "us", or "our"). This Privacy Policy explains how we collect, use, store, and protect information when you use the Pump Assist mobile application ("App") on Android or iOS.
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at the address above.
02Scope
This Policy applies to all users of Pump Assist regardless of where you are located. We have written it to comply with:
- The EU General Data Protection Regulation (GDPR — Regulation 2016/679)
- The UK General Data Protection Regulation (UK GDPR) and UK Data Protection Act 2018
- The Australian Privacy Act 1988 and Australian Privacy Principles (APPs)
- Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws
- The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable US state privacy laws
03Information We Collect
3a. Information You Provide Directly
When you use Pump Assist, you enter information that is stored locally on your device only. This includes:
| Category | Examples | Sensitivity |
|---|---|---|
| Fitness & workout data | Exercise names, sets, reps, weights, session durations, personal records | Personal |
| Cardio session data | Activity type, distance, duration, pace, step count | Personal |
| Body measurements | Body weight entries | Personal |
| Schedule & routine data | Weekly workout schedules, pre-built and custom routines, workout splits | Personal |
| Exercise library | Custom exercises you create | Personal |
3b. Problem Reports (Voluntarily Submitted)
When you choose to submit a problem report via Settings → Help & Feedback → Report a Problem, the App compiles the following information into an email draft opened in your device's native mail app:
| Field | Source | Required |
|---|---|---|
| Description | You type it (up to 2,000 characters) | Yes |
| Category | You select: Bug / Confusing behavior / Suggestion | No |
| Screenshot | You attach from your photo library | No |
| App version | Attached automatically by the App | — |
| Device model | Attached automatically by the App | — |
| OS version | Attached automatically by the App | — |
The email draft opens in your mail app addressed to [email protected]. You can review all content before sending. Nothing is transmitted automatically — you tap Send yourself. Closing the mail app without sending transmits nothing.
Once sent, problem reports are received and stored by Dedalva LLC and are subject to your email provider's privacy practices in transit.
3c. Location Data (Cardio Tracking)
When you use the outdoor cardio tracking feature, the App requests permission to access your device's GPS location. This data is used solely to calculate distance, pace, and route during your cardio session and is stored locally on your device. Specifically:
- GPS route points are recorded during an active outdoor cardio session
- This data is never transmitted to us or any third party
- You may use equipment-only cardio modes (e.g. rowing machine, stationary bike) that do not require location access
- You can revoke location permission at any time through your device settings, which disables GPS tracking for future sessions
3d. Information Collected Automatically (Ads Flavor Only)
If you use the version of the App that includes advertising ("Ads" build), Google AdMob collects certain information automatically to serve advertisements. This may include:
- Device identifiers (Advertising ID / IDFA)
- IP address (approximate location)
- Device type, operating system version, and language
- App interaction data (ad impressions, clicks)
This data collection is subject to your consent, which is requested through a consent dialog (powered by Google's User Messaging Platform) when you first launch the Ads build. The No-Ads build of Pump Assist does not display advertising and does not enable this data collection.
3e. Information We Do Not Collect
We do not collect, transmit, or store any of your data on our servers. Specifically:
- We have no servers or cloud storage for user data
- We do not collect your email address, phone number, or other contact details
- We do not share your GPS route data or fitness records with any third party
- We do not collect financial or payment information
- We do not automatically collect crash reports, diagnostics, or analytics — no data leaves your device without your explicit action
- We do not create user accounts
04How We Use Your Information
Data You Enter (All Users)
Your workout, cardio, body measurement, and schedule data is used solely to operate the App on your device:
- Display your exercise library, workout history, and personal records
- Track progress across cardio sessions and strength training
- Calculate estimated session durations and calorie burn
- Show GPS route maps and pace statistics for outdoor cardio
- Schedule and display your weekly workout plan
- Send local push notifications for rest timers and inactivity reminders
Your data never leaves your device, except when you choose to send a problem report (see §3b) — in that case, only the content of that report is transmitted, via your own mail app, to Dedalva LLC.
Problem Report Data (When Voluntarily Submitted)
The information in a submitted problem report is used solely to investigate the issue described, improve the App, and respond to you. We do not use it for advertising, profiling, or any other purpose.
Advertising Data (Ads Flavor Only, with Consent)
If you consent to personalised advertising, AdMob uses the data listed in §3c to serve relevant ads. If you decline personalised advertising (or are outside a region where consent is required), non-personalised ads may still be shown; these use less data. You can withdraw your consent at any time (see §10).
05Legal Basis for Processing (GDPR & UK GDPR)
For users in the European Economic Area (EEA) and United Kingdom, we rely on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Storing workout, cardio & fitness data | Performance of a contract / legitimate interests (Art. 6(1)(b)/(f)) — necessary to provide the App's core functionality you have requested. |
| Accessing GPS location for outdoor cardio | Consent (Art. 6(1)(a)) — you grant location permission explicitly when enabling GPS tracking. |
| Storing body measurement & schedule data | Performance of a contract / legitimate interests (Art. 6(1)(b)/(f)) — necessary to provide the App's features. |
| Receiving and processing voluntarily submitted problem reports | Consent / legitimate interests (Art. 6(1)(a)/(f)) — you initiate the report and review its full content before sending; processing is necessary to investigate and resolve the reported issue. |
| Local rest timer & reminder notifications | Legitimate interests / consent (Art. 6(1)(f)/(a)) — timers are a core feature; you control notification permission. |
| Personalised advertising (Ads flavor) | Consent (Art. 6(1)(a)) — collected via the UMP consent dialog on first launch. |
| Non-personalised advertising (Ads flavor) | Legitimate interests (Art. 6(1)(f)) — limited, non-targeted advertising to support free access to the App. |
06Data Storage and Security
All data you enter into Pump Assist is stored exclusively on your device. We use the following security measures:
- OS-level data protection: The App's local database is stored within the App's sandboxed storage, which is protected by your device's built-in encryption (Android Full Disk Encryption / iOS Data Protection) when your device is locked.
- Location data isolation: GPS route points are stored only within the App's local database and are not accessible to other apps.
Because data is stored locally, the security of your information also depends on your device's own security features (screen lock, OS updates, etc.). We recommend keeping your device operating system and the App up to date.
07Data Sharing and Third Parties
We do not sell, rent, or share your personal data with third parties for their own purposes, except as described below.
Google AdMob (Ads Flavor Only, with Consent)
The Ads build of the App includes Google AdMob. When you consent to advertising, Google may collect and process data as described in the Google Privacy Policy. Google acts as an independent data controller for the data it collects via AdMob. We have no access to, and are not responsible for, the data Google collects for advertising purposes.
- Google's privacy policy: policies.google.com/privacy
- Google's data safety information: support.google.com/admob/answer/6128543
Legal Disclosures
We may disclose information if required to do so by law, regulation, court order, or other legal process, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of Dedalva LLC, our users, or the public.
Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of our assets, user data (which, as noted, is stored on your device rather than our servers) would not be transferred, as we do not hold it.
08Data Retention
Because all data is stored on your device:
- Your data persists until you delete the App or manually clear App data through your device settings.
- Uninstalling the App on Android deletes the local database. On iOS, App data is also deleted on uninstall.
- Device backups: Some device backup systems (iCloud on iOS, Google One on Android) may back up App data as part of a general device backup. You can manage backup settings through your device's operating system.
- We do not retain workout, fitness, or location data on our servers because we do not receive it.
- Problem reports you voluntarily submit by email are retained as correspondence for as long as necessary to resolve the reported issue, then deleted. To request early deletion of a submitted report, contact us at [email protected].
09International Data Transfers
Your personal fitness, workout, and location data does not leave your device and is therefore not subject to international transfer. Problem reports you voluntarily submit are sent via email (Gmail) and may be processed in the United States or other countries where Google operates data centres.
AdMob data (Ads flavor only, with consent) may be transferred to and processed in the United States and other countries where Google operates data centres. Google relies on Standard Contractual Clauses and other transfer mechanisms approved under GDPR for these transfers. See Google's Privacy & Terms for details.
10Your Rights
Regardless of where you are located, you may contact us at [email protected] with any privacy concerns. Your specific rights depend on your jurisdiction:
EU / EEA (GDPR) and United Kingdom (UK GDPR)
You have the right to:
- Access — obtain a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure ("right to be forgotten") — request deletion of your data
- Restriction — ask us to restrict processing in certain circumstances
- Data portability — receive your data in a structured, commonly used format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent (including GPS location and personalised advertising), withdraw it at any time without affecting the lawfulness of prior processing
- Lodge a complaint — with your national supervisory authority (e.g. the ICO in the UK, or your EU Member State's data protection authority)
Because your data is stored on your device, most of these rights can be exercised directly within the App (editing or deleting records) or through your device settings (revoking location or notification permissions, uninstalling the App). For requests relating to AdMob data, please refer to Google's privacy controls.
To withdraw consent for GPS tracking: Go to your device Settings → Apps → Pump Assist → Permissions → Location → Deny.
To withdraw consent for personalised advertising: Open the App → Settings → Privacy Settings (Ads build only), or reinstall the App, which resets the consent state.
California (CCPA / CPRA)
California residents have the right to:
- Know what personal information we collect, use, disclose, or sell
- Delete personal information we have collected (note: we hold none on our servers)
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information — we do not sell or share personal information for cross-context behavioural advertising outside of AdMob, which is subject to your consent
- Non-discrimination for exercising your rights
To exercise these rights, contact us at [email protected]. We will respond within 45 days.
Canada (PIPEDA)
We collect only the minimum personal information needed to operate the App. You have the right to:
- Access your personal information held by us
- Withdraw consent to the collection or use of your personal information at any time (subject to legal or contractual restrictions and reasonable notice)
- Challenge our compliance with PIPEDA by contacting us, and if not resolved, by filing a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca)
Australia (Privacy Act 1988 / Australian Privacy Principles)
Under the APPs you have the right to:
- Access the personal information we hold about you (APP 12)
- Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (APP 13)
- Know why a request for access or correction is refused
Because we hold no personal information on our servers, these rights are most practically exercised directly on your device. You may also contact us at [email protected]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (www.oaic.gov.au).
11Children's Privacy
Pump Assist is not directed at children under the age of 13 (or under 16 where required by local law, including in the EU and UK). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has entered information into the App, you can delete the App or clear its data to remove all locally stored information. Please also contact us at [email protected].
12Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes that affect how we handle your data, we will provide notice within the App.
Your continued use of Pump Assist after changes become effective constitutes your acceptance of the revised Policy.
13Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:
We aim to respond to all privacy enquiries within 30 days. EU/UK users with unresolved concerns may also contact their national data protection authority.