Effective date: July 10, 2026

Privacy Policy

dpump is a workout planning and workout tracking app by Mark Drewry.

Data dpump Collects

dpump collects account and workout-planning data needed to provide the app:

name, email address, and user ID from account sign-in
workout schedules, workout definitions, exercise names, set targets, completed sets, weights, reps, run or climb notes, effort ratings, and workout history
app preferences, onboarding state, and active workout state

If Google sign-in remains enabled, the GoogleSignIn SDK privacy manifest also declares linked phone number, coarse location, device ID, other usage data, and other data types for app functionality and analytics. dpump does not use this data for tracking.

How Data Is Used

dpump uses collected data to:

create and manage user accounts
save and sync workout plans and workout history
restore local app state and active workouts
support Home Screen widgets and Live Activities for planner and in-progress workout state
provide account deletion and sign-out flows

dpump does not sell personal data and does not use workout, health, or fitness data for advertising or cross-app tracking.

Google Sign-In Data

If a user chooses Google Sign-In, dpump uses Google account information only to create or resume the user's dpump account and maintain account-scoped planner sync. dpump does not sell Google user data, use Google user data for advertising, or transfer Google user data except as needed to provide authentication, account management, app functionality, or comply with law.

Storage And Sync

dpump stores planner data locally on the device using protected app storage. Signed-in users sync planner data with Supabase so their schedules, workout definitions, completed sessions, exercise results, profile handle, friend requests, and friendship records can be restored for their account.

Users can choose a searchable dpump handle and share an invite link. When users add a friend, dpump uses the searched handle, display name text, or exact fallback email address to look for an existing dpump account and create or manage the friend request. Email fallback always shows a generic result so it does not reveal whether an address has a dpump account. Accepted friends can view each other's saved schedules and recent completed sessions, and can import a shared schedule plus referenced workout definitions into their own account. Friend relationships and shared schedule views are used for app functionality and are not used for advertising or tracking.

In-progress workout state and a compact snapshot of today's planner may be mirrored to app group storage used by the WidgetKit extension so Home Screen widgets, Live Activities, lock-screen controls, and the app can operate on the same current workout information.

Account Deletion

Users can delete their account in the app at Settings > Profile > Delete Account. Account deletion removes the Supabase Auth account for the signed-in user, cascades remote planner data owned by that user, clears local account-scoped files and preferences from the device, and returns the app to the signed-out state. dpump also asks Google to disconnect Google authorization when available. Apple users can separately stop using their Apple ID with dpump from Apple ID settings; the app shows those steps after deletion.

Third-Party Services

dpump uses:

Supabase for authentication, account deletion, and account-scoped planner sync
Sign in with Apple for Apple account sign-in
Google Sign-In for Google account sign-in, if enabled in the submitted app

Contact

For privacy or support requests, use the public dpump support page at https://dpump.fit/support/.