Privacy Policy

daPumpClub is operated by Sean Keith in the United Kingdom. Sean Keith is responsible for the personal data processed through daPumpClub. For privacy questions or requests about your information, email [email protected].

daPumpClub is a UK-based fitness platform for adults aged 18 and over. We collect information you enter, information from integrations you choose to connect, and information generated when you use the service.

• Account and profile: email address, username, name, password verification details, age declaration, legal acceptance records, profile preferences, subscription status and profile photos. Date of birth and other profile details are collected where you provide them.
• Training and health: programmes, exercises, workout results, check-ins, goals and progress, body measurements, injuries and training preferences you record.
• Nutrition: meal diaries, food quantities, nutrition targets, foods and recipes, ingredients, preparation steps, photos, dietary categories and allergen declarations you submit.
• Community and coaching: public content you publish, ratings, issue reports, coach profiles and coaching relationships you establish.
• Connected services: Google sign-in identity details and authorised Withings connection details and body-measurement records. Each integration is explained below.
• Communications and security: support requests, communication preferences, notification subscriptions and delivery records, login and account-management records, request identifiers and security audit information. Network requests also expose technical information such as an IP address and browser information to the systems delivering the service.

• Account information supports registration, authentication, profile preferences, subscription eligibility, account recovery and account closure.
• Workout, health, goal and nutrition records support your diaries, calculations, progress charts, programme tracking and the coaching features you use.
• Recipes, foods and community activity support publishing, searching, ratings, diary entries, issue reporting and moderation.
• Coach relationships and profile information support coach discovery and access to the client information covered by an active, consented relationship.
• Communication details support verification, recovery, invitations, service messages, support and notifications. Optional marketing communications follow your communication preferences.
• Technical and security information supports service operation, troubleshooting, abuse prevention and administrative accountability.

Optional integrations and AI features process the information needed for the feature you choose, as described below. Publishing content makes that content available to its public audience.

When enabled for your account, daPumpClub may collect a small, first-party set of authenticated functional events so we can understand whether important screens and training actions work, including after offline use. These events do not contain your name, email address, username, workout values, selected client, raw page address, advertising identifier, or a device or session identifier.

Pending events may be held in a separate protected browser queue for no more than seven days and are reduced by our server into privacy-controlled statistics rather than a per-user event history. They are not used for advertising, individual profiling, automated decisions, or coach assessment. You can object at any time by switching off Functional usage analytics in Profile. This stops new capture immediately and clears the local analytics queue. Security login and audit records are separate.

• Cloudflare: website and API delivery, database and media hosting, security services, web analytics and AI processing for enabled features.
• Google: optional sign-in and Google Maps location features, described separately below.
• Withings: measurement imports when you authorise a connection.
• Resend: email delivery, including recipient addresses and the content needed for account and service emails.
• Browser push services: notification delivery when you allow push notifications. We store the browser subscription endpoint and delivery keys needed to send notifications.
• Coaches, public readers and authorised administrators: the information relevant to the relationship, publication or administrative task, subject to the access controls described in this policy.

We may disclose information when required by law or necessary to investigate abuse, protect accounts or handle legal claims. Providers may operate internationally and process information outside the UK. Contact us for information about the providers and international processing applicable to your data.

Information we access. Google sign-in is optional. Google's sign-in service is loaded when you choose to continue with Google. After you approve sign-in, we receive your Google account identifier, verified email address and, when provided, your name. We do not import your Google profile image, receive your Google password, or request access to Gmail messages, Google Drive files, Calendar entries or other Google account content.

How we use it. We verify Google's sign-in response and use your account identifier to recognise your linked daPumpClub account. Your email identifies the connection and can be used for account registration; your name can prefill registration details that you can review. These details support sign-in, account management and account security. Linking Google to an existing account requires you to sign in to that account first.

Storage and protection. We store your linked Google account identifier and provider email in our server-side account database hosted through Cloudflare. Account details you confirm during registration are stored with your daPumpClub account. Stored Google account identifiers and email addresses are encrypted, as are selected account identity details. Connections to our public service use HTTPS, and authenticated access and administrative permissions restrict access to account information. This does not mean that every fitness record or note is encrypted in the same way.

Sharing and permitted use. Our hosting provider processes stored information to operate the service. We use Google sign-in information for the account features described above, not to sell it or serve personalised advertising. Information may also be handled where necessary to investigate security incidents or comply with the law. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

Disconnecting and deleting. In Profile > Sign-in methods, you can disconnect Google. Set a password first if Google is your only sign-in method. Disconnecting removes the stored Google sign-in connection, including its identifier and provider email; it does not delete your daPumpClub account or the account details you previously confirmed. You can also review third-party connections in your Google Account. To close your daPumpClub account and request erasure of retained personal data, use Delete account in Profile or contact us. The response period, lawful retention exceptions and backup handling are explained under Your rights. Google sign-in connection data is retained while the connection remains active, unless removed through account erasure.

Google processes its own sign-in interactions under its Privacy Policy.

Gym and location search use Google Maps. When you use these features, your searches and map interactions are processed by Google under its Privacy Policy. We also contact Google to display details of a previously selected Google gym. We retain the gym's Google place ID; Google-supplied gym details are retrieved for display.

Coaches choose their public city separately. Their coverage pin is rounded to an approximate area before it is saved. We use that area and travel radius to match nearby searches. Public results show coaching mode, city and coverage matches, without the saved pin, radius or exact distance. Search locations are rounded before being sent to our coach directory. Choose a public landmark for coverage, never a home address.

If you connect Withings, we retain the authorised connection credentials and provider identifiers needed to import supported body measurements, such as weight and body composition, together with dates and import records. We use these measurements for your body tracking and progress features. Connection credentials are protected with encryption. You can disconnect the integration to stop future imports; disconnecting does not automatically erase measurements already saved to your diary. Account erasure requests cover retained personal records, subject to the exceptions below.

Enabled AI coaching features send selected goal progress, saved targets or nutrition-diary evidence to Cloudflare's AI service to produce insights. Generated assessments and related usage records may be saved so they can be displayed again. These features are not medical advice.

When you submit food or recipe content for publication checks, the submitted nutrition and recipe information may be processed by AI and reviewed by authorised moderators. Review results help identify issues with public content.

When you select the voice control, the selected text is sent to Cloudflare's text-to-speech service to produce audio. This can include coaching text containing health or goal information. Voice is optional and can be disabled in Profile. The speech request disables AI Gateway content logging; we record usage quantities for feature limits. This statement does not describe the retention rules of every other AI feature.

Avoid putting contact details or information about other people into free-text content submitted to AI features.

Published recipes include your public username, ingredients, instructions, photos and other publication details. Published foods and coach profiles expose the details included in their public listing. Public content can be viewed and copied by others. Keep personal contact details and private health information out of public descriptions and images.

Making a recipe private or deleting it removes it from public browsing. Meals already saved to another person's diary can retain their nutrition snapshot; we cannot recall copies others have made.

Coach access to client records is limited to the scope of an active, consented assignment. Authorised administrators may access information needed for account support, security, publication review and other permitted management tasks.

We use browser storage and a service worker to maintain your sign-in, preferences, cached application files, offline records and pending changes. This allows supported diary and goal changes to sync when connectivity returns. These records remain on the device and can contain personal fitness information. Use a trusted device and sign out on shared devices. Clearing browser data can remove unsynchronised changes. Closing your account cannot remotely erase copies on a device that remains offline.

Cloudflare Web Analytics provides website usage information. It is separate from the optional first-party functional usage analytics described above. Google's services process their own browser interactions when you use sign-in or Maps.

We retain account, diary, measurement, goal and related records while needed to provide your account and the features you use, unless you delete supported records or request erasure. Disconnecting an integration stops its future use but does not automatically delete information already imported or confirmed as account details.

Security, moderation, support and delivery records may be retained for the purposes they document, including abuse investigation and legal obligations. Retention depends on the purpose, continuing operational need and applicable legal requirements. Some cached and queued records have shorter feature-specific lifetimes; for example, pending functional analytics events are held for no more than seven days.

Account closure and erasure requests are explained below. Backup copies are handled separately from active service data and must not be restored into ordinary use without reapplying deletions.

Fitness and health-related information you provide is used solely to support your training experience within the platform. While we take reasonable steps to protect your information, daPumpClub is not a medical service and does not provide medical advice.

Protecting your identity. We protect your stored account email, username, name and date of birth with encryption. This adds a layer of protection for the personal details that identify you.

We also protect selected personal details used in invitations, connected accounts, coach profiles and messages. We use these details when needed to provide your account, profile and communications. Information you choose to share publicly, such as your public coach profile, remains visible to its intended audience.

This added encryption protects selected personal details. It does not cover every training record, health measurement or note you enter.

We use technical and organisational measures to protect your information. No online platform can guarantee absolute security.

To close your account and request personal-data erasure, use Delete account in Profile. You must confirm your current password; Google-only members can first set a password through the email recovery action in Sign-in methods. Account access ends immediately, public profile and recipe access is removed, and we record an erasure request. We will respond without undue delay, normally within one calendar month. Some information may be retained where legally required or necessary for legal claims; we will explain any applicable exception. Backup copies are put beyond use pending their normal expiry and deletion is reapplied if a backup is restored.

You can contact us to request access, correction, erasure or restriction of your personal data, to object to processing, or to request portability where applicable. You may also complain to the UK Information Commissioner's Office.

If you have any questions about this Privacy Policy or your data, please contact:

We may update this policy as the service changes. We show the update date and will provide additional notice or seek consent where required before using information for a new purpose.