Your training data should not become a surveillance business.

This policy explains how PullUp Pilot collects and uses information. Contact info@pulluppilot.com with a privacy request.

Information we collect

When you start or use a plan, we store your email address, current and goal pull-up counts, bodyweight, days available, equipment, time-zone offset, session prescriptions, completed repetitions, perceived difficulty, limiting factor, discomfort indication, progress forecasts, and adaptation history. We also keep cryptographic hashes of confirmation and access tokens, access-request times, email delivery state, and essential session-cookie data.

If you click an equipment link, we may record the product, time, referring page, whether it was an affiliate link, your internal program identifier when signed in, and coarse country information supplied by Cloudflare. We do not need precise location.

How we use it

To create, adapt, display, and email your training plan.
To authenticate your private progress page and prevent abuse.
To honor unsubscribes and support requests.
To understand whether optional equipment recommendations are useful and to account for affiliate commissions.
To maintain security, reliability, and aggregate service performance.

We do not sell personal information. We do not use training data to target third-party advertising.

Providers and disclosures

Cloudflare provides site hosting, security, and the database. Amazon Web Services Simple Email Service sends transactional and coaching email. Equipment merchants and affiliate networks receive information when you follow their links according to their own policies. We may disclose information where legally required or necessary to protect users and the service.

Cookies and private links

PullUp Pilot uses one strictly necessary, HttpOnly session cookie to keep you signed into your progress page. Private email links can also establish access. Do not forward those links.

Retention and control

Expired access credentials are routinely removed. Active training records remain available while the program is in use. We delete program records after 24 months without activity; unsubscribed email addresses may remain on a minimal suppression list so we do not email them again. You may ask us to access, correct, or delete your information by emailing the address above. We may need to verify that you control the associated email.

Security, age, and health information

We use access controls, encrypted transport, limited credentials, and token hashing, but no online system is risk-free. The service is intended for adults 18 and older. Please do not submit diagnoses, clinical notes, or other detailed health information; the discomfort field is only a conservative training signal.

International use and changes

The service is operated from the United States, and information may be processed there. We may update this policy as the product or law changes; the date at the top will change for material revisions.