Privacy and terms
Consumer Health Data Privacy Policy
For people who live in the United States: what health data UpBumbum keeps, where it stays and how you can see it, delete it and withdraw your consent.
Version 1, effective November 3, 2026.
On this page11
This policy is for people who live in the United States. It follows Washington law (My Health My Data Act, RCW 19.373) and Nevada law (NRS 603A.400 to 603A.550), and we apply it in every state. It adds to our Privacy Policy.
In short
- Today UpBumbum has no user accounts: your health data stays on your device, and we do not receive it.
- We ask for your consent before keeping health data, on its own screen. The box is never pre-checked.
- We do not sell health data, we do not use it for advertising and we do not share it with third parties.
- In the app, you can see, export and delete your data and withdraw your consent whenever you want.
1. Consumer health data the app keeps
These laws define consumer health data broadly. We treat all of the data below as consumer health data, even where a law might not.
| Category | What it includes | Where it is kept |
|---|---|---|
| Workout log | Sessions (start, end, time zone) and sets (exercise, weight, unit, reps, reps in reserve, type, seconds, meters, side and time) | Only on your device |
| Plan answers | What you want to see in the mirror and the parts of your legs you want to emphasize, where you train, training days and time, experience, whether you feel your glutes working, the areas you want to go easy on (knees, lower back, hips), your plan options and the exercises you asked not to see again | Only on your device |
| Where you felt it | Your answer after glute sets (glutes, thighs or lower back), the exercise and the time; only the 200 most recent | Only on your device |
| Body | Measurements (waist, hips and thigh) and weight, if you log them | Only on your device |
| Daily and cycle check-in | Energy and sleep and, with the cycle consent, period days and symptoms (reproductive health data) | Only on your device |
| Progress photos | The photos you choose, with the progress photos consent | Only on your device |
| Atelier | The body shape you build on the mannequin, your tape measurements (waist, hips and thigh) and the mannequin history, each one only with the consent for its purpose, and the goal you choose | Only on your device |
| What the app calculates | Your plan, the suggested weights and your progress | Only on your device |
| Consent records | What you accepted, the version, the language and the dates | Only on your device |
We do not collect your precise location or data from other apps and devices. The Atelier does not use photos, the camera or scans: you build the mannequin by hand, and the app never compares your body with anyone.
2. What we use it for
- To build and adjust your plan and show your progress.
- To split the sets of your plan by region and draw your Atelier mannequin, if you build it.
- To show today's options based on your cycle check-in. Your cycle never changes your plan on its own: you choose the workout version.
- To prove that you gave consent.
We do not use health data for advertising or marketing. For any other use, we would ask for your consent first.
3. Where it comes from
From you, when you type or tap in the app. We do not receive health data from other companies, data brokers, health apps (such as Apple Health or Health Connect), or smartwatches and fitness bands.
4. Who we share it with
- We do not sell consumer health data.
- We do not share it with third parties or with affiliates. It does not even reach us: it stays on your device.
- It only leaves your device in the files you export yourself (section 5). The "Report a problem" email carries only the error log (type of error, screen, app version and time), with no health data.
- Cloudflare delivers the pages of the site and the app and receives technical data from each request (such as the IP address), with no health data.
- If you send us an email, Cloudflare forwards it and Google hosts our inbox. Do not send health data by email.
- If we ever want to share health data for any other purpose, we will first ask for your separate consent.
5. Your rights and how to use them
You can confirm whether we collect, share or sell your health data, see that data, get a copy, delete it and withdraw your consent.
In the app, right away:
- See and copy: Profile > Privacy and data > Export history (CSV) or Export everything (JSON). The JSON file also has your plan answers, your date of birth and the text of each consent. Your Atelier comes out in Profile > My Atelier > Export my Atelier (file). Photos never go into these files.
- Delete: Profile > Privacy and data > Delete account and data > Delete everything. Just the Atelier: Profile > My Atelier > Delete my Atelier.
Because your health data does not reach us, we have no copy: seeing, exporting and deleting happen in the app. By email, write to privacy@upbumbum.com. We answer within 45 days, free of charge.
6. How to withdraw your consent
| Consent | How | What happens |
|---|---|---|
| Training data | Profile > Privacy and data > Training data > Withdraw | Everything on this device is deleted. Export first if you want a copy. |
| Cycle check-in | Profile > Privacy and data > Cycle check-in > Withdraw | Your daily check-ins are deleted, including energy and sleep. Your plan does not change. |
| Progress photos | Profile > Privacy and data > Progress photos > Withdraw | Your photos are deleted from this device. |
| Body shape (Atelier) | Profile > My Atelier > Privacy > Withdraw | The whole Atelier is deleted from this device: the mannequin, the goal, the tape measurements and the history. Your plan goes back to your goal. |
| Tape measurements (Atelier) | Profile > My Atelier > Privacy > Withdraw | Your tape measurements are deleted from the Atelier and from the mannequin history. |
| Mannequin history (Atelier) | Profile > My Atelier > Privacy > Withdraw | The mannequin history is deleted from this device. |
7. Other commitments
- No geofencing. We do not collect your precise location.
- The app and the site have no advertising, attribution or third-party analytics tools. No third party collects data about you through our app or site over time or across other websites and apps.
- No third-party AI service receives your data.
- If there is a breach of your health data, including sharing it without your authorization, we will notify you within 60 days, and the FTC when its Health Breach Notification Rule requires it (16 CFR Part 318).
8. Age
UpBumbum is made for women and is only for people 18 and older. See Adults only (18+).
9. Changes
Each version has a number and a date, at the top of this page. If a change needs your consent, the app asks you again before the change takes effect.
10. Contact
- Email: privacy@upbumbum.com
- Responsible party: UpBumbum; legal name and address still being defined.
Other documents
Privacy
What UpBumbum keeps, where it keeps it and how you see, export and delete it. Today, everything stays on your device.
Terms of use
The rules for using UpBumbum: who can use it, what the app is and is not, the risks of training and what belongs to whom.
Images and AI
Where UpBumbum may use images generated by artificial intelligence, what AI never does and how we label each image.
Adults only
Why UpBumbum is only for adults, how the app checks age and what to do if someone under 18 is using it.
Support
Short answers about UpBumbum and how to reach us.
Delete your account and data
How to delete everything UpBumbum keeps, in the app or without it, and what remains afterward.