PRIVACY POLICY

Last updated: October 31, 2026

Introduction

Pull25 is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our application. By using Pull25, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect your email address, bodyweight, display name, and training preferences. If you sign in with Google, we receive your name and email from Google's OAuth service.

Session & Workout Data

We store your workout sessions, including sets completed, reps, assistance weight, timestamps, and progression data. This data is necessary to provide the core training experience.

Device & Usage Data

For visits originating from our guides, we collect first-party usage events such as guide views, app opens, and whether a workout was started or completed. A random browser identifier connects these events for up to 30 days; event records are retained for up to 90 days. These events do not include your email, bodyweight, repetitions, or workout details. We respect browser Do Not Track and Global Privacy Control signals. Clearing browser storage resets this attribution. Counts describe browsers rather than identified people.

Guest Users

If you use Pull25 as a guest, all your data is stored locally in your browser's localStorage. Guest workout details remain on your device. Minimal guide-attribution events described above may be sent to our servers. Guest data may be lost if you clear your browser data.

Optional Google Analytics

If you choose Allow analytics, we use Google Analytics to understand page visits, traffic sources, and engagement. Google receives browser and device information and processes your IP address to derive approximate location. Analytics cookies distinguish browsers and are configured to expire after 90 days. Google Analytics is not loaded before you opt in. We honor Do Not Track and Global Privacy Control signals.

We do not send your name, email, account ID, bodyweight, sets, repetitions, assistance settings, or workout history to Google Analytics. Authentication links, URL query strings, and fragments are excluded. Automatic form tracking and advertising personalization are disabled. The separate first-party guide attribution described above is independent of this optional Google Analytics choice.

You can change your choice at any time below. Turning analytics off stops future collection in this browser and clears its Google Analytics cookies; it does not delete data previously processed by Google. See Google’s privacy policy for more information.

How We Use Your Information

  • • To provide the progressive overload training experience
  • • To sync your data across devices when signed in
  • • To send account-related emails (no marketing without your consent)
  • • To improve the app via anonymized usage data

We do not sell or share your personal data with third parties for marketing purposes.

Data Storage and Security

For authenticated users, your data is securely stored using industry-standard cloud infrastructure with server-side authorization that restricts workout access to your account. All data is encrypted in transit using TLS. Passwords are hashed and never stored in plain text.

Guest workout details are stored in your browser's localStorage. The separate guide-usage events described above may be transmitted.

Third-Party Services

Pull25 uses the following third-party services:

  • • Cloud Infrastructure — for authentication, database, and backend services
  • • Google Analytics - for optional website usage measurement
  • • Google OAuth — for optional sign-in with Google
  • • Stripe — for payment processing (Pro subscriptions)

We do not store payment card information. Each of these services has their own privacy policies governing their handling of your data.

Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at support@pull25.com. We will process deletion requests within 30 days.

Children's Privacy

Pull25 is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately so we can remove it.

Your Rights

You have the right to:

  • • Access your personal data stored in our systems
  • • Correct any inaccurate information
  • • Delete your account and all associated data
  • • Restrict processing of your data
  • • Export your workout history data

To exercise any of these rights, contact us at support@pull25.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "last updated" date at the top of this page. Material changes will be communicated via email or in-app notice. Your continued use of Pull25 after changes constitutes acceptance of the updated policy.

Contact Us