Privacy Policy

daPumpClub is operated by Sean Keith in the United Kingdom. Sean Keith is responsible for the personal data processed through daPumpClub. For privacy questions or requests about your information, email contactus@dapumpclub.com.

The service currently offers free, code-gated early access. It does not process payments. Its primary focus is the UK, but access from outside the UK is possible. An early-access invitation is not permission to send you marketing.

daPumpClub is a UK-based fitness platform for adults aged 18 and over. We collect information you enter, information from integrations you choose to connect, and information generated when you use the service.

• Account and profile: email address, username, name, password verification details, age declaration, legal acceptance records, profile preferences, membership or feature eligibility and profile photos. Date of birth and other profile details are collected where you provide them.
• Training and health: programmes, exercises, workout results, check-ins, goals and progress, body measurements, injuries and training preferences you record.
• Nutrition: meal diaries, food quantities, nutrition targets, foods and recipes, ingredients, preparation steps, photos, dietary categories and allergen declarations you submit.
• Community and coaching: public content, ratings, endorsements and issue reports; coaching invitations and sharing choices; shared discussions, decisions and concerns; and private or personal programmes. Coach applications can include qualifications, certificates, insurance and verification information. Application evidence is private administrative material, distinct from a public coach profile.
• Connected services: Google sign-in identity details and authorised Withings connection details and body-measurement records. Each integration is explained below.
• Communications and security: support requests, communication preferences, notification subscriptions and delivery records, login and account-management records, request identifiers and security audit information. Network requests also expose technical information such as an IP address and browser information to the systems delivering the service.

• Account information supports registration, authentication, profile preferences, early-access and feature eligibility, account recovery and account closure.
• Workout, health, goal and nutrition records support your diaries, calculations, progress charts, programme tracking and the coaching features you use.
• Recipes, foods and community activity support publishing, searching, ratings, diary entries, issue reporting and moderation.
• Coach relationships and profile information support coach discovery and access to the client information covered by an active, consented relationship.
• Communication details support verification, recovery, invitations, service messages, support and notifications. Optional marketing communications follow your communication preferences.
• Technical and security information supports service operation, troubleshooting, abuse prevention and administrative accountability.

Optional integrations and AI features process the information needed for the feature you choose, as described below. Publishing content makes that content available to its public audience.

We use account details and the records needed to deliver the services you request to perform our agreement with you. Security and abuse-prevention processing supports our legitimate interests in protecting members and operating a reliable service. Where a legal obligation requires us to keep or disclose information, that obligation is the basis for that processing.

Optional sharing and integration choices are separate from accepting the Terms. Providing an email address for an account does not enrol you in marketing. Where consent is required, it must cover the specific purpose; you can withdraw that consent without changing the lawfulness of processing before withdrawal. Contact us if a control is unavailable or you need help exercising a choice.

Information that reveals health needs an additional condition under data-protection law. The health information section explains the distinction between the privacy notice, feature choices and consent. This notice does not turn an optional feature into a requirement or expand the information a coach can access.

When available in the service and enabled for your account, daPumpClub may collect a small, first-party set of authenticated functional events so we can understand whether important screens and training actions work, including after offline use. These events do not contain your name, email address, username, workout values, selected client, raw page address, advertising identifier, or a device or session identifier.

Pending events may be held in a separate protected browser queue for no more than seven days and are reduced by our server into privacy-controlled statistics rather than a per-user event history. They are not used for advertising, individual profiling, automated decisions, or coach assessment. You can object at any time by switching off Functional usage analytics in Profile. This stops new capture immediately and clears the local analytics queue. Security login and audit records are separate.

• Cloudflare: website and API delivery, database and media hosting, security services, web analytics and AI processing for enabled features.
• Google: optional sign-in and Google Maps location features, described separately below.
• Withings: measurement imports when you authorise a connection.
• Resend: email delivery, including recipient addresses and the content needed for account and service emails.
• Browser push services: notification delivery when you allow push notifications. We store the browser subscription endpoint and delivery keys needed to send notifications.
• Coaches, public readers and authorised administrators: the information relevant to the relationship, publication or administrative task, subject to the access controls described in this policy.

We may disclose information when required by law or necessary to investigate abuse, protect accounts or handle legal claims. Providers may operate internationally and process information outside the UK. You can ask us which recipients, processing locations and transfer safeguards apply to your information, and how to obtain information about any applicable safeguards.

Information we access. Google sign-in is optional. Google's sign-in service is loaded when you choose to continue with Google. After you approve sign-in, we receive your Google account identifier, verified email address and, when provided, your name. We do not import your Google profile image, receive your Google password, or request access to Gmail messages, Google Drive files, Calendar entries or other Google account content.

How we use it. We verify Google's sign-in response and use your account identifier to recognise your linked daPumpClub account. Your email identifies the connection and can be used for account registration; your name can prefill registration details that you can review. These details support sign-in, account management and account security. Linking Google to an existing account requires you to sign in to that account first.

Storage and protection. We store your linked Google account identifier and provider email in our server-side account database hosted through Cloudflare. Account details you confirm during registration are stored with your daPumpClub account. Stored Google account identifiers and email addresses are encrypted, as are selected account identity details. Connections to our public service use HTTPS, and authenticated access and administrative permissions restrict access to account information. This does not mean that every fitness record or note is encrypted in the same way.

Sharing and permitted use. Our hosting provider processes stored information to operate the service. We use Google sign-in information for the account features described above, not to sell it or serve personalised advertising. Information may also be handled where necessary to investigate security incidents or comply with the law. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

Disconnecting and deleting. In Profile > Sign-in methods, you can disconnect Google. Set a password first if Google is your only sign-in method. Disconnecting removes the stored Google sign-in connection, including its identifier and provider email; it does not delete your daPumpClub account or the account details you previously confirmed. You can also review third-party connections in your Google Account. To close your daPumpClub account and request erasure of retained personal data, use Delete account in Profile or contact us. The response period, lawful retention exceptions and backup handling are explained under Your rights. Google sign-in connection data is retained while the connection remains active, unless removed through account erasure.

Google processes its own sign-in interactions under its Privacy Policy.

Gym and location search use Google Maps. When you use these features, your searches and map interactions are processed by Google under its Privacy Policy. We also contact Google to display details of a previously selected Google gym. We retain the gym's Google place ID; Google-supplied gym details are retrieved for display.

Coaches choose their public city separately. Their coverage pin is rounded to an approximate area before it is saved. We use that area and travel radius to match nearby searches. Public results show coaching mode, city and coverage matches, without the saved pin, radius or exact distance. Search locations are rounded before being sent to our coach directory. Choose a public landmark for coverage, never a home address.

If you connect Withings, we retain the authorised connection credentials and provider identifiers needed to import supported body measurements, such as weight and body composition, together with dates and import records. We use these measurements for your body tracking and progress features. Connection credentials are protected with encryption. You can disconnect the integration to stop future imports; disconnecting does not automatically erase measurements already saved to your diary. Account erasure requests cover retained personal records, subject to the exceptions below.

My Body brings together supported weight, body-fat percentage and muscle-percentage readings from your existing measurement history, including authorised Withings imports. My Progress provides a short summary and a link to My Body. Units, dates and source information help you compare readings. These views do not automatically share detailed measurements with a coach.

Enabled AI coaching features send selected goal progress, saved targets or nutrition-diary evidence to Cloudflare's AI service to produce insights. Generated assessments and related usage records may be saved so they can be displayed again. These features are not medical advice.

Programme generation can process the requirements you submit. Coaching endorsement or publication reviews can process the material submitted for that review. Different AI features have different inputs and controls: a choice to use one feature does not enable every AI use of your records. Nutrition AI has its own consent and withdrawal controls; eligibility and availability can differ by feature. Contact us to question an automated assessment or request review of a publication decision.

When you submit food or recipe content for publication checks, the submitted nutrition and recipe information may be processed by AI and reviewed by authorised moderators. Review results help identify issues with public content.

When you select the voice control, the selected text is sent to Cloudflare's text-to-speech service to produce audio. This can include coaching text containing health or goal information. Voice is optional and can be disabled in Profile. The speech request disables AI Gateway content logging; we record usage quantities for feature limits. This statement does not describe the retention rules of every other AI feature.

Avoid putting contact details or information about other people into free-text content submitted to AI features.

Published recipes include your public username, ingredients, instructions, photos and other publication details. Published foods and coach profiles expose the details included in their public listing. Public content can be viewed and copied by others. Keep personal contact details and private health information out of public descriptions and images.

Making a recipe private or deleting it removes it from public browsing. Meals already saved to another person's diary can retain their nutrition snapshot; we cannot recall copies others have made.

Authorised administrators may access information needed for account support, security, publication review, coaching verification and other permitted management tasks. An endorsement or discussion can identify someone through its content even if the displayed author label is generic.

A coaching invitation identifies the coach and asks you to agree to the training-sharing scope. The current scope covers profile information, programme history, workout summaries, training progress and goals marked for summaries. It excludes your nutrition diary, private notes and detailed health information. It does not give a coach unrestricted access to all your records.

You can end the relationship and stop platform sharing in My Coaching. Coach access requires an active, consented relationship. After it ends, you can retain the shared history available to you, while the coach loses platform access to that client relationship. Ending sharing is separate from deleting records or requesting erasure, and cannot recall copies already taken outside the platform. Coaches remain responsible for complying with applicable privacy duties for records they separately hold.

A coach can publish a personal programme privately for one client with an active, consented relationship. It is tagged as personal and cannot be made public or reassigned to another client. Withdrawal or the end of the relationship prevents new selection through that sharing relationship. Existing programme instances and recorded training history retain their saved versions; publishing a programme does not automatically replace a member's active programme.

Sharing training summaries does not include permission to share progress photos or introduce additional categories of health information. Any expansion needs a separate explanation and appropriate choice.

My Body tracking is optional. When enabled, you can record dated body composition and tape measurements, including separate left and right measurements, notes and your measuring timezone. These records can reveal health information. Before accepting a new manual check-in, My Body asks for your specific body-tracking consent. You can withdraw this in its privacy controls to stop new manual check-ins; existing readings remain available for export and deletion. Withings imports have separate connection controls. You can use workouts and programmes without either form of body tracking.

Progress photos require a separate optional consent. We process the images you select with their date taken, front/side/back view, optional notes and optional check-in link. Dates taken and upload dates are kept separately. The upload service validates and re-encodes supported still images, resizes without cropping, removes embedded metadata including location information, and stores only the processed image in private Cloudflare object storage. No automated body-shape, identity, health or attractiveness assessment is performed on these photos, and they are not used for advertising or marketing.

Photos are private to you unless you explicitly share an individual photo with an active coach relationship. Ordinary coaching or training-sharing consent does not include these photos or the new tape-measurement records. Photo sharing requires a separate confirmation and stops for new reads when you revoke that grant, withdraw photo consent or the relationship is no longer active. A coach may already have seen or downloaded a shared image; revocation cannot recall copies they retained. Share only what you want that coach to see.

You can delete individual photos, withdraw photo consent to remove all progress photos, and download a My Body export containing the available measurements and saved images. Deletion immediately removes access in the service and queues private object deletion; storage failures leave a deletion record so removal can be retried. Photo notes and check-in links are cleared on removal. Minimal consent, action and deletion records remain subject to the retention and rights provisions below. Account closure blocks photo access and starts media cleanup. Backup and other retained-copy handling remains part of our account-erasure process; deletion is not a promise that a recipient's downloaded copy can be remotely erased.

My Body history, new check-ins and photo access require an online connection. Photos are not placed in the app's offline cache or an offline upload queue. Selected unsaved files and form entries stay in the current browser tab until you clear them, sign out or close the tab. Exports are private files on your device: store and share them carefully.

We use browser storage and a service worker to maintain your sign-in, preferences, cached application files, offline records and pending changes. This allows supported diary and goal changes to sync when connectivity returns. These records remain on the device and can contain personal fitness information. Use a trusted device and sign out on shared devices. Clearing browser data can remove unsynchronised changes. Closing your account cannot remotely erase copies on a device that remains offline.

Cloudflare Web Analytics provides website usage information. It is separate from the optional first-party functional usage analytics described above. Google's services process their own browser interactions when you use sign-in or Maps.

We retain account, diary, measurement, goal and related records while needed to provide your account and the features you use, unless you delete supported records or request erasure. Disconnecting an integration stops its future use but does not automatically delete information already imported or confirmed as account details.

Security, moderation, support and delivery records may be retained where needed for a specific investigation, legal obligation or legal claim. The relevant criteria include whether the account or relationship is active, whether a complaint or dispute remains open, the applicable legal requirement and whether another person's record can instead be preserved through redaction. A shared discussion, public-content licence or account closure does not by itself justify keeping all personal information indefinitely. Some cached and queued records have shorter feature-specific lifetimes; for example, pending functional analytics events are held for no more than seven days.

Account closure and erasure requests are explained below. Backup copies are handled separately from active service data and must not be restored into ordinary use without reapplying deletions.

Body composition, injuries, health-related goals and information inferred from records can reveal health information. We use the records for the requested tracking, calculations and separately chosen features described above. Accepting the Terms or acknowledging this Privacy Policy is not explicit consent to every use of health information, AI processing or coaching disclosure.

Where a feature requests explicit health-data consent, its separate notice must describe the information, purpose and withdrawal route. Existing feature controls do not imply that a coach receives detailed health records or that a future photo feature is enabled. Contact us about the processing condition and controls applicable to a health-related feature, or to withdraw a consent you have given. daPumpClub is not a medical service and does not provide diagnosis or treatment.

Protecting your identity. We protect your stored account email, username, name and date of birth with encryption. This adds a layer of protection for the personal details that identify you.

We also protect selected personal details used in invitations, connected accounts, coach profiles and messages. We use these details when needed to provide your account, profile and communications. Information you choose to share publicly, such as your public coach profile, remains visible to its intended audience.

This added encryption protects selected personal details. It does not cover every training record, health measurement or note you enter.

We use technical and organisational measures to protect your information. No online platform can guarantee absolute security.

You can contact us to request access, correction, erasure or restriction of your personal data, to object to processing, or to request portability where applicable. You may also complain to the UK Information Commissioner's Office.

You can make a rights request by email without signing in or reactivating a closed account. We may ask for proportionate information to verify identity. We will respond without undue delay, normally within one calendar month. If a permitted extension is needed, we will explain the reason and timing within the applicable initial response period.

To close your account through the app and record an erasure request, use Delete account in Profile and confirm your password. Google-only members can first set a password using email recovery in Sign-in methods; email remains an alternative for privacy requests. Closure ends account access and removes public profile and recipe access. Closure, disconnecting an integration and completion of erasure are different actions: closure does not mean every retained record has already been erased.

We must assess an erasure request and explain any lawful reason to retain particular information, including a relevant legal obligation or legal claim. Preserving another person's records may require redaction. An unresolved internal retention decision is not itself a legal exception. Backup handling must keep erased data out of ordinary use and reapply the relevant restrictions or deletions before a restore is used; contact us for the position applicable to your request.

Email contactus@dapumpclub.com to raise a privacy complaint, whether or not you have an active account. Describe what happened, the information or service involved and how we can respond. Do not send a password or unnecessary health records.

We will acknowledge a privacy complaint within 30 days, investigate appropriately, keep you informed and communicate the outcome without undue delay. This acknowledgement period is separate from the response period for exercising your data rights. You can also contact the ICO; contacting us does not remove that right.

If you have any questions about this Privacy Policy or your data, please contact:

We show the version and date of this notice. For material changes we will explain what changes and provide notice through the app or an account email where appropriate. A revised notice does not itself authorise a new purpose, replace a required consent or make private records public. Where fresh consent is required, it must be obtained before the relevant processing begins.