PPL – Push Pull Legs Privacy Policy

This Policy applies to all users of the App. The App is intended for users who are at least 16 years old. If you are under 16, do not use the App or provide any personal information.

For reference, the categories of personal information we collect are:

• Identifiers: email address, account name, date of birth, device identifiers
• Commercial information: subscription tier and transaction identifiers
• Internet or network activity: app usage events, crash logs, session data
• User-generated content: workout logs, exercise history, program preferences

We do not use your workout or fitness data for advertising, third-party data mining, or behavioral targeting.

We do not sell or share your personal information as defined under California law.

We may share your information with the following categories of third parties solely to operate the App. These providers act as data processors on our behalf.

• Cloud infrastructure: Supabase (database hosting and authentication). Data is stored on servers in the United States.
• Subscription management: RevenueCat, to manage in-app subscriptions and entitlements.
• Analytics: PostHog, for aggregated, pseudonymous usage analytics. PostHog does not receive your workout content or personally identifiable fitness data.
• Customer support tools: any support platform we use to respond to your requests.
• Legal and regulatory: we may disclose information when required by law, court order, or to protect the rights, property, or safety of users or the public.
• Business transfers: if the Company is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before such a transfer and before your information becomes subject to a different privacy policy.

All third-party service providers are contractually required to protect your information and use it only for the purposes for which it is disclosed.

Your workout logs — including exercises, weights, sets, and reps — are used exclusively to provide the App's core features: logging workouts and delivering progressive overload guidance. This data is:

• not shared with advertising networks or data brokers,
• not used to build advertising profiles,
• not disclosed to third parties for marketing or data-mining purposes.

We treat your fitness data as sensitive personal information and apply additional care to its storage, access controls, and retention. We do not use or disclose sensitive personal information for purposes other than those necessary to provide the App.

The App uses simple algorithmic logic to generate progressive overload recommendations based on your workout history. These recommendations do not produce legal or similarly significant effects on you.

We retain your personal information for as long as your account is active or as necessary to provide the App, resolve disputes, enforce our Terms, and comply with legal obligations.

To delete your account and data:

• Navigate to Settings → Account → Delete Account within the App, or
• Email us at support@pxplabs.comwith "Account Deletion" in the subject line and the email address associated with your account.

Upon a verified deletion request, we will delete your personal information from our active systems within 30 days, except where retention is required by law or necessary to complete pending transactions. Backup systems may retain data for a limited additional period before it is fully purged.

We use commercially reasonable administrative, technical, and organizational safeguards to protect your personal information, including encryption in transit (TLS), hashed passwords, and access controls on our database. No system is 100% secure, and we cannot guarantee the absolute security of your information.

If we discover a security incident affecting your personal information, we will investigate and notify affected users and regulators as required by applicable law.

The App uses PostHog for product analytics. PostHog collects pseudonymous event data (e.g., "user tapped Start Workout") to help us understand how the App is used and improve its features. This data is not linked to your name or email in a way that is shared with PostHog.

The App does not currently use advertising SDKs, third-party ad networks, or cross-app tracking. If this changes, we will update this Policy and, where required, including under Apple's App Tracking Transparency framework, request your permission before enabling tracking.

The App is not directed to anyone under the age of 16. We do not knowingly collect personal information from anyone under 16. If we become aware that a user under 16 has provided personal information, we will delete that information promptly. If you believe someone under 16 has used the App, please contact us at support@pxplabs.com.

Depending on where you live, you may have the following rights regarding your personal information:

All users:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Opt out of marketing emails at any time

California residents (CCPA/CPRA):

• Right to know what categories of personal information we collect and how we use or disclose it
• Right to delete your personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (we do not sell or share personal information)
• Right to non-discrimination for exercising your privacy rights

EU/UK/EEA residents (GDPR / UK GDPR):

• Right of access to your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time (without affecting prior processing)
• Right to lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@pxplabs.com. We will respond within the timeframe required by applicable law (generally 30–45 days). We may ask you to verify your identity before processing your request.

If you are located outside the United States, your information is transferred to and processed in the United States, where data protection laws may differ from those in your country. We take reasonable steps to ensure your information is handled in accordance with this Policy and applicable law.

For EU/UK users, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) where required.

The App is a mobile application and does not use browser cookies. The App uses local device storage (via MMKV) to store app state and preferences on your device. This data remains on your device and is not transmitted to us except as part of normal App functionality (such as syncing your workout logs to your account).

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated Policy in the App and updating the "Last Updated" date at the top. Where required by law, we will provide additional notice (such as an in-app notification or email). Continued use of the App after the effective date of any changes constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Pixel by Pixel Labs LLC
Chicago, Illinois, USA
support@pxplabs.com