Legal
Privacy Policy
Effective date: 30 September 2026
1. Who we are
PRUV APP LTD (company no. 17467942, registered in England and Wales) is the data controller for the PRUV app and pruvapp.com. "We", "us" and "our" mean PRUV APP LTD.
Registered office: Leicester
Contact: info@pruvapp.com
Registered with the Information Commissioner's Office: ZC254210
2. What we collect
Your account
- Email address and password. Your password is handled by our authentication provider and stored in hashed form; we never see it.
- Name, username and, if you add one, a profile picture.
Your body and goals (you choose whether to provide these)
- Date of birth, sex/gender, height, body weight and weigh-in history, target weight, activity level and fitness goal.
Your training
- Workouts you log: exercises, sets, reps, weights, set types, duration, notes, workout templates and training programmes.
- Personal records, which the app works out from your workouts.
Beta programme (while PRUV is in beta)
- Your acceptance of the beta NDA: the name you typed, the version you accepted, your confirmation that you are 18 or over, and when you accepted it.
- Feedback answers you choose to send us.
Bug reports and feature requests
- What you write when you report a problem or suggest a feature, and which version of the app you were using.
Technical data
- Crash reports and error logs from the app (device model, operating system, app version and what went wrong), sent through Sentry.
- On the website only: pages visited and basic device and browser information, through analytics cookies if you accept them (see section 9).
What we do NOT collect
- No location or GPS data.
- No data from Apple Health, Google Health Connect or wearables.
- No advertising identifiers, and no ads in the app.
- No payment details.
3. Data that stays on your phone
Progress photos never leave your device. They are stored only in the app's storage on your phone, and we cannot see, access or back them up. If you delete the app or change phones, they are lost.
4. Health data
Your body measurements and training history can reveal information about your health. UK law treats this as special category data, so we only process it with your explicit consent.
You can withdraw this consent at any time by emailing info@pruvapp.com. If you do, we will delete your body and training data. You can keep your account, but you won't be able to log workouts, because storing them is what the app does. You can also withdraw consent by deleting your account (section 8).
5. How we use your data and why we're allowed to
| What we do | Legal basis |
|---|---|
| Run your account, save and sync your workouts, show your progress and records | Contract: providing the app you signed up for |
| Process body and training data | Explicit consent (health data) |
| Fix crashes and bugs | Legitimate interests: keeping the app working |
| Run the beta: NDA and feedback | Legitimate interests: building a better app with testers |
| Bug reports and feature requests, kept for up to 2 years (including after an account is deleted) | Legitimate interests: fixing and improving the app |
| Keep NDA records after an account is deleted | Legitimate interests: establishing and defending legal claims |
| Website analytics | Consent (cookie banner) |
| Waitlist and product-update emails | Consent: you can unsubscribe at any time |
We do not use your data for advertising, and we do not make automated decisions about you that have legal or similar effects.
6. Who we share it with
We do not sell, rent or trade your personal or fitness data, and we never share it with advertisers or data brokers.
We use these service providers to run PRUV. They process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Appwrite | App database, account login, file storage (profile pictures) | EU (Frankfurt) |
| Sentry | Crash and error reports | EU (Germany) |
| Resend | Emailing you a copy of the beta NDA you accepted | May process data in the US |
| Lovable / Supabase | Website hosting and the waitlist | May process data in the US |
| Google Analytics | Website analytics, only if you accept cookies | US |
| Apple App Store / Google Play | App distribution | — |
We may also disclose data if the law requires it, or to a buyer if the business is sold, under the same protections.
7. International transfers
Your app data is stored in the EU, which the UK recognises as giving adequate protection. Where a provider processes data in the US, the transfer is protected by the UK–US Data Bridge (for certified companies), a UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU standard contractual clauses.
8. How long we keep it, and deleting your account
We keep your data while your account is open.
To delete your account in the app: Profile → Settings (gear icon) → Delete account, then confirm. This permanently deletes your account, profile, profile picture, workouts, templates, programmes, weigh-ins and personal records.
If you can't access the app, email info@pruvapp.com from your account's email address. Email requests can take up to 30 days. Full instructions: pruvapp.com/delete-account
What we keep after deletion:
- Bug reports and feature requests you sent us, so we can finish the work they describe. We keep them for up to 2 years from when you sent them, then delete them. After your account is deleted they are no longer linked to an account, but they may still contain anything you wrote in them. If you want one deleted sooner, email us.
- Your beta NDA acceptance record, because it is a legal agreement. We keep it for 6 years after the beta ends, and then delete it.
Crash reports are kept by Sentry for up to 90 days.
9. Cookies (website)
The website uses necessary cookies to remember your cookie choice. Analytics cookies (Google Analytics and Lovable) are used only if you accept them. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. The app itself does not use cookies for tracking.
10. Keeping your data safe
Data travels between the app and our servers over encrypted connections (HTTPS/TLS). Each person's data is permission-locked to their own account. No system is completely secure, so please tell us straight away if you suspect a problem.
11. Your rights
Under UK GDPR you have the right to:
- access your data and get a copy of it;
- correct it (most of it you can edit in the app);
- delete it;
- restrict or object to how we use it;
- data portability: receive your workout data in a machine-readable format (email us and we will send it);
- withdraw consent at any time.
Email info@pruvapp.com. This is free, and we will reply within one month. For complex requests the law allows up to two more months, and we will tell you if we need them.
If you're unhappy with how we've handled your data, email us first. We will acknowledge your complaint within 30 days and tell you what we're doing about it.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We'd appreciate the chance to sort it out first.
12. Age
PRUV is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think someone under 18 has an account, email us and we will delete it.
13. Changes to this policy
If we make a significant change, we will tell you in the app or by email before it takes effect, and update the date at the top of this page.
14. Contact
PRUV APP LTD, registered in England and Wales, company no. 17467942
Email: info@pruvapp.com