PouchFit ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains what data PouchFit collects, how we use it, how it's stored, and what rights you have.
This policy mirrors the App Privacy disclosures we file with Apple for our App Store privacy label. If anything in this policy conflicts with our App Store privacy label, the App Store label is authoritative for what is collected.
By creating an account or using PouchFit, you agree to this policy. If you do not agree, please do not use the app.
PouchFit collects the minimum data needed for the app to work. The tables below show every data type we declare in our App Store privacy label.
| Data type | Purpose | Linked to you | Used for tracking |
|---|---|---|---|
| Name | App functionality | Yes | No |
| Email address | App functionality | Yes | No |
| User ID | App functionality | Yes | No |
| Purchase history | App functionality | Yes | No |
@privaterelay.appleid.com alias if you chose Apple's "Hide My Email" option.We do not collect location, health or fitness data, contacts, photos, browsing or search history, voice or audio data, financial information beyond purchase history, or anything else not listed above.
If you choose to sign in with Google, the Google Sign-In SDK embedded in PouchFit declares additional data collection per Google's own privacy practices. As required by Apple, this is disclosed in our App Store privacy label:
| Data type | Declared purpose | Linked | Tracking |
|---|---|---|---|
| Name | App functionality | Yes | No |
| Email address | App functionality | Yes | No |
| Phone number | App functionality | Yes | No |
| Coarse location | App functionality | Yes | No |
| User ID | App functionality, Analytics | Yes | No |
| Device ID | Analytics | Yes | No |
| Other usage data | Analytics | Yes | No |
| Other data types | App functionality, Analytics | Yes | No |
This data is collected and used by Google to provide and analyze the Google Sign-In service. PouchFit does not directly access or store most of it. After successful sign-in, PouchFit itself only receives your name, email, and User ID (as listed in Section 2.1) — the rest is handled inside Google's SDK.
If you sign in with Apple instead, none of the above applies. Apple's "Sign in with Apple" uses a native iOS framework that does not share data outside Apple's own systems.
For complete details on how Google handles data its SDK collects, see Google's Privacy Policy.
PouchFit declares "No" to tracking for every data type we collect. We do not link your data with third-party data for advertising or measurement, we do not share it with data brokers, and we do not participate in any ad networks. Under Apple's App Tracking Transparency framework, PouchFit does not request permission to track you.
We use the data we collect to:
We do not sell, rent, or trade your personal data.
| Data | Location |
|---|---|
| Name & email | Our secure cloud servers |
| Workout history & preferences | On your device (and iCloud if enabled) |
| Subscription status | Apple's servers (via StoreKit) |
| Authentication tokens | Apple's or Google's servers |
We use industry-standard security measures including encryption in transit (TLS) and secure cloud infrastructure. No system is 100% secure — we encourage you to use a device passcode and keep iOS up to date.
PouchFit uses the following third-party services:
If we add other third-party services in the future, we will update this policy and our App Store privacy label before doing so.
PouchFit does not track you across other apps or websites. We do not participate in ad networks, we have no ad SDKs, and we declare "No" to tracking for every data type in our App Store privacy label.
The Google Sign-In SDK declares "Analytics" use for some of its own internal data (see Section 2.2). This refers to Google's own service analytics, not cross-app advertising tracking. It is not considered tracking under Apple's App Tracking Transparency framework.
PouchFit is not directed at children under the age of 13 (or 16 in certain European jurisdictions). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us. We will promptly delete it.
During account creation, you may choose to receive marketing emails from PouchFit. This is optional and not required to use the app. We use a clear, unchecked opt-in checkbox — never pre-selected.
Marketing emails may include exercise tips, product updates, new feature announcements, motivational content, and promotional offers related to PouchFit.
You can stop receiving marketing emails at any time by:
Opt-out requests are processed within 10 business days. Even after opting out, you will continue to receive essential service-related communications (account security notices, subscription confirmations, policy updates).
All marketing emails from PouchFit comply with the CAN-SPAM Act. Every promotional email clearly identifies PouchFit as the sender, includes a valid physical mailing address, and contains a working unsubscribe mechanism.
Depending on your location, you may have some or all of the following rights regarding your personal data:
Under the GDPR, you also have the right to object to or restrict processing, request data portability in a structured machine-readable format, and lodge a complaint with your local data protection authority.
Legal basis for processing under GDPR:
| Purpose | Legal basis |
|---|---|
| Providing the Service | Performance of a contract (Art. 6(1)(b)) |
| Account management | Performance of a contract (Art. 6(1)(b)) |
| Marketing emails | Consent (Art. 6(1)(a)) |
| Service improvement | Legitimate interest (Art. 6(1)(f)) |
California residents have the right to know what personal data we collect, request deletion of personal data, opt out of the sale of personal data (PouchFit does not sell personal data), and non-discrimination for exercising privacy rights.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have rights to information, access, correction, erasure, and to lodge complaints with the National Privacy Commission.
Contact us at hello@pouchfitapp.com. We respond within 30 days (or sooner if required by applicable law). We may need to verify your identity before processing your request.
PouchFit is available internationally. If you use PouchFit from outside the country where our servers are located, your account information (name and email) may be transferred to and processed in a different jurisdiction. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable law.
You can request full deletion of your account and all associated personal data by:
Upon receiving a deletion request, we will permanently erase your name, email address, and any associated records from our servers within 30 days.
Workout history, preferences, and any other on-device data are stored locally on your device. Uninstalling PouchFit removes them.
We may update this Privacy Policy from time to time. When we make material changes, we will:
Continued use of PouchFit after changes become effective constitutes your acceptance of the revised policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
📧 Email: hello@pouchfitapp.com
🥔 App: PouchFit — Move while you scroll
🌏 Response time: Within 30 days
This section explains how Apple and Google sign-in work in PouchFit, and exactly what each provider shares with us. It is incorporated by reference into the Privacy Policy above.
PouchFit uses two third-party authentication providers: Sign in with Apple and Google Sign-In. We do not store passwords. Authentication is handled entirely by Apple or Google. You can sign in with either provider; we do not require both and we do not link accounts across providers.
Sign in with Apple is a native iOS framework (no third-party SDK). When you tap Sign in with Apple, Apple shares with us:
@privaterelay.appleid.com address if you chose "Hide My Email" during sign-up.When you tap Sign in with Google, PouchFit directly receives:
We request only the basic email and profile scopes. We do not access your contacts, calendar, Drive files, photos, or any other Google data.
The Google Sign-In SDK itself collects additional data internally per Google's own privacy practices, as disclosed in Section 2.2. That data is handled by Google, not by PouchFit.
From both providers, we store only:
We do not store passwords, profile pictures, or authentication tokens long-term. Tokens issued by Apple or Google are used only to verify your identity during a session.
If you used "Hide My Email" during Apple sign-up, the email address we have on file is an Apple-controlled relay alias that looks like x7y9k2@privaterelay.appleid.com. This alias is unique to PouchFit.
Emails we send to this address — including transactional emails (security notices, subscription confirmations) and marketing emails (if you opted in) — are forwarded by Apple to your real inbox. We never see your real Apple ID email.
You can revoke email forwarding at any time in your Apple ID settings. Doing so permanently breaks our ability to email you but does not delete your PouchFit account.
You can disconnect PouchFit from your Apple or Google account at any time directly from the provider's settings:
Revoking access at the provider level prevents future sign-ins but does not automatically delete your PouchFit account or the data we have on our servers. To fully delete your account, follow the steps in Section 11.
When you delete your PouchFit account, we permanently remove from our servers within 30 days:
We do not retain authentication tokens or credentials after deletion. If you later sign in again with the same Apple ID or Google account, a fresh PouchFit account will be created.
Use of PouchFit on iOS is also governed by Apple's Standard End User License Agreement.
Apple, Apple ID, "Sign in with Apple," StoreKit, and ActivityKit are trademarks of Apple Inc. Google and "Sign in with Google" are trademarks of Google LLC. PouchFit is not affiliated with Apple Inc. or Google LLC.