PRIVACY POLICY

In short

The Pusher is a training and nutrition app. To do its job it handles fitness data you log, health data you choose to share from Apple Health or a connected wearable, your location during outdoor sessions, photos and messages you post, and live video and audio when you join a live session. We use this to run the features you asked for and to keep the app working. We do not sell personal data, we do not run ads, and we never use health data for advertising.

What we collect and why

• Account. When you sign in with Apple or Google we receive a provider user ID, your email, and the name and picture you allow. Guests get a device-only identity with nothing sent to us until they sign in.
• Profile. Handle, display name, bio, avatar, optional sex, height, weight, age, activity level and goal (for calorie targets), timezone, and which apps and devices you use. Weight history if you log it.
• Training. Every workout you log or complete: exercise, reps, sets, weights, duration, effort, heart-rate summaries, program progress, streaks, points, challenges, rest days and personal records.
• Health data (with your permission). On iPhone and Apple Watch, if you allow it, we read from Apple Health: steps, active and resting energy, distance, flights climbed, exercise minutes, heart rate, resting and walking heart rate, heart-rate variability, VO₂ max, blood oxygen and respiratory rate, plus workouts recorded by other apps. If you connect Fitbit or Oura we read the activity, sleep, readiness and heart data those services make available. Health data is used only for the features that need it: tracking, coaching, recovery and effort scoring. It is never used for advertising or shared with advertisers, and it is not sold. You can turn access off at any time in iOS Settings or the wearable's app; we then stop reading, and you can delete what was stored.
• Location. During an outdoor run or walk we record GPS points to draw your route, distance and pace. Routes are stored with the session. We may derive an approximate city from your route or from your IP address to show where members are and to label sessions. You can opt out of location sharing in Settings; opted-out members have no city or route shown to others and we do not geocode their sessions.
• Food. Meals you log, photos of food you submit for calorie estimates, barcodes you scan, plates you save and shopping lists. Calorie and nutrient values are estimates.
• Photos and video. Profile pictures, workout and progress photos, crew photos and anything you post. Live sessions carry your camera and microphone to the other participants in that session in real time; we do not record live sessions unless a feature says so on screen.
• Messages and posts. Direct messages, group chats, crew walls, comments, reactions, feedback you send to the team and reports you make. Live sessions are not monitored in real time.
• Dexter conversations. What you say to Dexter, in text or voice, and the replies, so the conversation has memory and so your coaching can reflect your training and food data.
• Device and usage. App version, device type, operating system, push-notification token, crash and error reports, and in-app events such as screens opened and features used. If you arrive from one of our social links we set a first-party cookie for up to 30 days so we can tell which channel brought you.
• Contacts. We do not upload your address book. Inviting from contacts opens your phone's own Messages app; the numbers never reach us.

Who processes it for us

We share personal data only with providers that help run the app, under contracts that limit what they can do with it:

• Amazon Web Services (Canada region): database, file storage, hosting, authentication and push delivery.
• Apple and Google: sign-in, App Store and push notifications.
• Anthropic and Google (Gemini): AI models behind Dexter's coaching, program drafting, meal-photo estimates and plate creation. They receive the text and images needed for the request and, under our agreements, do not train on it.
• ElevenLabs: turns Dexter's replies and cooking cues into speech. Your text is sent; your voice is not, except for voice notes you record, which are transcribed by our speech-to-text provider.
• Open Food Facts and USDA FoodData: nutrition databases we query with the food name or barcode you enter.
• OpenStreetMap Nominatim: converts a route location into a city name, for members who have not opted out.
• Fitbit and Oura: only if you connect them; you can disconnect in Settings or in their apps.

Live video and audio travel through a media server we operate. We may also disclose data if the law requires it, to protect members' safety, or to a successor that takes over operating the Service under this policy.

What other members can see

Your handle, name, avatar, bio and the activity you post are visible to members according to your visibility setting. Public workouts, crew activity, boards and challenge standings show your name and results. Direct messages are visible only to their participants. Health measurements from Apple Health or a wearable are not shown to other members except as summaries you choose to share (for example an effort score on a shared run). Nothing you log is shared outside the app unless you tap Share.

Where it lives and how it is protected

Data is stored on Amazon Web Services in Canada, encrypted in transit and at rest. Access is limited to the people who operate the Service. No system is perfectly secure; if a breach affects you we will notify you and the relevant regulator as the law requires.

How long we keep it

For as long as your account exists, so your history, streaks and progress work. Live session media is not stored. Dexter conversations are kept so Dexter remembers you; you can clear them in Settings. Analytics events are kept in aggregate.

Deleting your account

Open Settings → Account → Danger Zone and confirm. The records under your account, including profile, workouts, health data we stored, food logs, routes, Dexter history and your connections, are deleted from our database right away and your handle is released. Photos you uploaded and copies of content you shared into other people's spaces (messages you sent, posts in a crew, a photo on a shared workout) are removed within 30 days. Aggregate statistics that no longer identify you are kept, and so are moderation reports about an account (reports you filed are kept without your name), so that deleting an account cannot erase a record of abuse. Your device's local copy clears the next time the app opens.

Your rights

Depending on where you live, you can ask for access to your data, correction, deletion, a portable copy, or object to some processing, and you can withdraw permissions such as Health or location at any time in your device settings. Email info@thepusherapp.com; we answer within 30 days. Members in Canada can also complain to the Office of the Privacy Commissioner; members in the EU or UK to their local authority; California residents have the rights described in the CCPA, and we do not sell or share personal data for cross-context advertising.

Children

The Pusher is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe a child has an account, contact us and we will delete it.

Changes

When this policy changes we update the date above; for material changes we tell signed-in members in the app. Continued use after a change means you accept it.

Contact

Questions or requests: info@thepusherapp.com. See also the Terms of Use.