Privacy Policy
Short version: we collect what Pumpkin Fit needs to work, we never sell it or use it for ads, your Apple Health data never appears to other people, and you can export or delete everything from Settings.
01Who we are
Pumpkin Fit is published by Void Meadow LLC, an Oregon limited liability company (“we”, “us”). This policy covers the Pumpkin Fit app for iPhone and Apple Watch, its widgets, and pumpkin.fit. We are the controller of the personal data described here.
Questions or requests: legal@pumpkin.fit.
02What you give us
Account — your name, email address and password. Passwords are stored only as a one-way hash. If you turn on Social, also your handle, bio and profile photo.
Training — workouts, workout templates, schedules, exercises, sets, reps, weights, times, distances, notes, skipped reasons and the progress and progression suggestions we calculate from them.
Food — your food log, custom foods, recipes and their steps and photos, saved meals, meal preps, grocery lists, meal types and nutrition targets.
Body — weigh-ins, body measurements (such as waist and body fat %), height, weight goals and progress photos.
Medications and shots — the names, doses and schedules you enter, the doses you log, injection sites and notes.
Photos and videos — food, recipe and progress photos, clips you record of your sets, and media you add to posts and stories.
Social (only if you turn it on) — your profile, posts, stories, comments, likes, follows, blocks, direct messages and attachments, and your privacy choices.
Messages to us — anything you send through Contact support or Send feedback, with your account email so we can reply.
03Apple Health
Apple Health is optional. If you connect it, Pumpkin Fit reads only the types you allow: sleep, cycle tracking, resting heart rate, heart rate variability, steps, active energy, body weight, waist, body fat %, and workouts from Apple Watch and other apps (with their heart rate and energy). It writes the types you allow: workouts and active energy, weigh-ins, body measurements and nutrition.
Cycle data stays on your iPhone and is never sent to our servers. Other readings are synced to your account so your insights work across your devices.
Health data is never used for advertising or marketing, never sold, never used to train AI models, and never shared with anyone except the service providers that store it for us. It is never shown to other Pumpkin Fit users through your profile, whatever your privacy settings. It only leaves your account when you choose to share it yourself, for example by posting a weight or measurement progress card to your story or feed, or sending one in a message or to another app.
You can change what Pumpkin Fit reads and writes in Settings › Apple Health, or in the Health app under Sharing › Apps › Pumpkin Fit.
04What stays on your device
Calendar — if you turn on calendar sync, Pumpkin Fit only adds, updates and removes its own events in the one calendar you pick. It never reads your other events, and nothing from your calendar is sent to us.
Reminders — if you send a grocery list to Reminders, Pumpkin Fit only writes to the list it created.
Camera and photo library — the camera is used only while you record a clip or take a photo. Pumpkin Fit can save images to your library when you ask it to; it does not read your library unless you pick a photo.
Notifications — reminders are scheduled on your device.
05What we do not collect
No location, precise or approximate (gyms you name are just names). No contacts. No microphone. No advertising identifiers, no tracking across other apps or websites, and no third-party analytics, advertising or crash-reporting tools in the app.
Our servers keep standard request logs (such as IP address and time) for a short period to keep the service secure and to debug problems.
06How we use it
To provide Pumpkin Fit: storing your log, syncing it between your iPhone, Apple Watch and widgets, and calculating your history, records, insights, patterns and progression suggestions from your own data.
To send the emails the service needs, such as verification codes, password resets and important account notices. We do not send marketing email unless you ask for it.
To verify App Store purchases, keep the service secure, prevent abuse, and meet legal obligations.
We do not make decisions about you that have legal or similarly significant effects based on automated processing, and we do not use your data to train AI models.
07Who sees it
Other people — nobody, unless you turn on Social. With Social on, each part of your profile and each item you share is visible only to the audience you choose (everyone, followers, specific people, or only you). Direct messages are visible to the people in the conversation. People you block can’t see your profile. Medication data is never shown on your profile.
Things you share — share cards, exports and copies you send go wherever you send them. If you turn on the stream overlay, anyone with your private overlay link can see the live workout details it shows until you turn it off or reset the link.
Service providers — DigitalOcean (servers and database, United States), Cloudflare (photo and video storage), Resend (email delivery) and Apple (App Store payments). They process data only on our instructions to run the service.
Food data — when you search for a food or scan a barcode, our servers may look it up with USDA FoodData Central or Open Food Facts. They receive the search text or barcode from our servers, not your identity.
Legal reasons — if required by law, to protect someone’s safety or our rights, or as part of a merger or sale, in which case the new owner must honor this policy.
We never sell your personal data or share it for cross-context behavioral advertising.
08Pro subscriptions
Purchases are handled by Apple. We receive the subscription details we need to unlock Pro (product, dates, renewal status and a transaction ID), never your payment card.
09How long we keep it
We keep your data while your account exists. When you delete your account, your data is removed from our live systems right away, stored photos and videos are deleted shortly after, and backups containing it expire within 30 days.
Turning off and deleting Social removes your profile, posts, stories, comments and messages, and keeps your training and food log. Data export files are deleted 7 days after they’re created.
10Your choices and rights
In the app you can download your data (Settings › Download my data), edit or delete anything you’ve logged, delete your Social profile, disconnect Apple Health, change who sees each part of your profile, and delete your account (Settings › Delete account).
Depending on where you live (including the EU, UK, Japan, California, Washington and other US states), you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent at any time. Email legal@pumpkin.fit. We’ll confirm it’s you and respond within 30 days (45 where state law allows). If we decline a request, you can appeal by replying to our answer, and you may complain to your local data protection authority. We will never treat you differently for using these rights.
11Legal bases (EEA and UK)
We process your data to perform our contract with you (providing Pumpkin Fit), with your consent (Apple Health and the health information you choose to log, which you can withdraw at any time), for our legitimate interests (keeping the service secure and improving it) and to meet legal obligations.
12Where it’s stored
Our servers are in the United States. If you use Pumpkin Fit from outside the US, your data is transferred there. Where the law requires, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.
13Security
Data is encrypted in transit, passwords are hashed, and stored data is encrypted at rest by our providers. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires, including under the FTC Health Breach Notification Rule.
14Consumer health data
Residents of Washington, Nevada, Connecticut and other states with consumer health data laws can read our Consumer Health Data Privacy Policy at https://voidmeadow.com/pumpkin-fit-health-data.html.
15Children
Pumpkin Fit is not for anyone under 16. If we learn we have data from someone under 16, we will delete it.
16Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.
17Contact
Void Meadow LLC, Oregon, USA · legal@pumpkin.fit