Privacy and terms
Privacy Policy
What UpBumbum keeps, where it keeps it and how you see, export and delete it. Today, everything stays on your device.
Version 1, effective November 3, 2026.
On this page16
In short
- UpBumbum works entirely on your device. Today there are no accounts: your workouts, answers, measurements, your Atelier mannequin and your photos stay in your browser's storage and do not reach us.
- Before it keeps training data, cycle check-ins, photos or your body shape in the Atelier, the app asks for your consent on its own screen. The box is never pre-checked.
- We do not sell data, and we do not use data for advertising. The app and the site have no advertising, attribution or third-party analytics tools.
- In Profile, you can export and delete your data and withdraw each consent whenever you want.
- UpBumbum is made for women and is only for people 18 and older.
1. Who we are
UpBumbum is a strength training app for legs and glutes. This policy applies to the app, at app.upbumbum.com, and to the website upbumbum.com.
UpBumbum is the controller under the LGPD (Brazil's data protection law): it decides how data is processed. Our legal name, CNPJ (Brazilian company registration number), address and the name of the person in charge of data protection (encarregado, under Brazil's LGPD) are still being defined and will be added to this page as soon as they exist. Until then, send any request about data to privacy@upbumbum.com.
UpBumbum is not a medical device and does not diagnose, treat, cure or prevent any condition. For medical advice, consult a health professional.
2. What stays on your device
Everything below stays in your browser's storage, on the device you use. None of it reaches us. The app does not use cookies.
| Data | What it is | When it is saved |
|---|---|---|
| Date of birth | Day, month and year. Used only to confirm that you are 18 or older. It goes in the "Export everything (JSON)" file, if you export it. | During setup |
| Plan answers | What you want to see in the mirror and the parts of your legs you want to emphasize, where you train, how many days and how long per workout, how much strength training you have done, whether you feel your glutes working, the areas you want to go easy on, your plan options, such as "More glutes, less thighs", the exercises you asked not to see again, the day your program started and the time you signed up. If you used an earlier version of the app, also what you had at home (such as your heaviest dumbbell) and the weights from your strength test. | During setup and when you change your plan |
| Workout log | Sessions (start, end, time zone, plan week and day) and sets (exercise, weight, unit, reps, reps in reserve, type, seconds, meters, side and time). Changing a set saves a new entry; earlier entries stay until you delete everything. | With every set |
| Where you felt it | Your answer (glutes, thighs or lower back), the exercise and the time. Only the 200 most recent. | If you answer, after glute sets |
| Body measurements | Waist, hips and thigh, with the unit. | Only if you log them |
| Body weight | Day, value and unit. It stays hidden until you turn on "Show body weight in Progress". | Only if you log it |
| Daily check-in | Energy and sleep and, with the cycle consent, period days and symptoms. | Only if you log it |
| Progress photos | The photos you choose. The app redraws each photo at a smaller size (720 pixels on the longest side), and the copy does not carry the hidden data from the original file, such as location and camera. | Only with the progress photos consent |
| Consent records | Which consent, the version, the language, the exact text you accepted, the date and, if you withdraw, the date you withdrew. Withdrawing the training data consent deletes everything on the device, including these records. | With every consent |
| Settings | Language, units, theme, text size, keep screen on, vibration and what the app shows or asks. | When you change them |
| Plan activity | Pauses, challenges, celebrations already shown, today's workout version and the workout in progress. | While you use the app |
| Device code | A random code that tells this device apart in the workout log. It stays on the device; it only leaves inside the "Export everything (JSON)" file, if you export it. | The first time you open the app |
| Error log | When something gets stuck: the type of error, the screen, the app version and the time. Only the last 50. Never the error message or anything you typed. You can see and delete it in Profile > About > Report a problem. | On its own, when an error happens |
| Age lock | Only if the date entered shows you are under 18: the day the lock ends. | Only in that case |
Without an account, we have no copy of any of this. If you clear your browser data or switch devices, what was stored there is lost. Your browser can also delete data from sites you have not opened in a while. On iPhone, Safari deletes what a site has stored after 7 days of Safari use without opening that site; an app added to the Home Screen has its own day count and does not lose its data this way (WebKit, March 24, 2020). That is why we ask you to add the app to your Home Screen and, from time to time, tap "Export everything (JSON)" and keep the file: on a new device, "Import history" reads that file (how to do it). The "Export history (CSV)" spreadsheet cannot be imported back into the app.
Atelier
In the Atelier, you build a 3D mannequin that looks like your body and choose your goal, and the app splits the sets of your plan by region. Everything in the Atelier stays on your device: it never goes to your account, to a share card or to any analytics, and it only leaves if you export the Atelier file yourself (section 5). The app does not use photos, the camera or scans to build the mannequin, and it never compares your body with anyone.
| Data | What it is | When it is saved |
|---|---|---|
| Body shape | Your body today as you build it on the mannequin: the starting shape and the adjustment of each part, such as hip width, waist height and projection. | Only with the body shape consent |
| Goal | Up to two wishes and how much glute you want to build. With the mannequin, also the same body with the muscle you want to build: the difference from your body today is the fine-tuning that goes into your plan. If you change your goal while a plan is in progress, the app keeps the week the new goal starts and the previous goal. | When you build the mannequin or change your goal |
| Tape measurements | Waist, hips and thigh, with the unit. They calibrate the proportions of the mannequin; for now, the thigh is kept but does not calibrate it yet. | Only with the measurements consent |
| Mannequin history | The mannequin from each check-in, with the day and, with the measurements consent, the tape measurements. At most one check-in every 4 weeks, and only the 13 most recent. | Only with the history consent |
| Atelier preferences | Using the 2D map instead of the 3D mannequin, the day you postponed the check-in invitation and whether you already closed the notice that the Atelier does not come through the account. | When you change them |
3. What we use it for
| What for | Which data | Where |
|---|---|---|
| Build and adjust your plan | Plan answers, workout log, where you felt it, daily check-in | On your device |
| Split the sets of your plan by region and draw your mannequin | Body shape, goal, tape measurements and history from the Atelier | On your device |
| Show your progress | Workout log and, if you log them, measurements, weight and photos | On your device |
| Confirm that you are 18 or older | Date of birth and age lock | On your device |
| Prove your consents | Consent records | On your device |
| Find and fix problems in the app | Error log | On your device; in our email inbox, only if you send it |
| Reply when you write to us | Your email address and your message | In our email inbox (section 6) |
The app builds your plan on your device, with fixed, written rules. No artificial intelligence (AI) builds or changes your plan.
4. Your consents, word for word
Training data, weight, measurements and what your cycle shows about your health are sensitive data. That is why, before keeping them, the app asks for your consent on its own screen, with a box you check yourself. This is the exact text of each one, the same as on the screen and in the saved consent record.
Training data (at the end of setup)
I agree that the app stores and uses my training data (my answers, including areas I want to go easy on, workouts, sets, weights and, if I add them, body measurements) to build and adjust my plan. This data stays on this phone. I can export it, delete it or withdraw this consent anytime in Profile.
Without it, the app cannot keep your workouts. Body weight and the daily check-in, if you log them, are kept with this data: withdrawing this consent also deletes your weight, your measurements and everything else on the device.
Cycle check-in (only if you turn it on)
I agree that the app stores my cycle check-ins (period days and symptoms) to show me today's options. They stay on this phone and never change my plan on their own. I can turn this off and delete them anytime in Profile.
The app never predicts ovulation or fertile days.
Progress photos (only if you turn them on)
I agree that the app stores my progress photos only on this device so I can compare them. They are never uploaded, synced or shared. I can delete them and turn this off anytime.
Atelier (only if you build the mannequin)
Your body shape and tape measurements get the same care. Before the mannequin, a screen of its own shows one box for each purpose, and nothing is checked for you. Without the first one, the mannequin does not open; the other two are optional.
I agree that the app uses the body shape I build on the mannequin to split the sets of my plan by region. The shape stays on this device and never goes to my account; with an account, the workouts I do go to it.
Optional: I agree that the app uses the tape measurements I enter (waist, hips, thigh) to calibrate the mannequin. They stay on this device.
Optional: I agree that the app keeps a private history of my mannequin, at most one update every 4 weeks. It stays on this device and never goes on a share card.
Later, you can turn each purpose on or withdraw it in Profile > My Atelier > Privacy. Withdrawing a purpose deletes its data from this device. Withdrawing the body shape purpose deletes the whole Atelier, and your plan goes back to your goal.
5. What leaves your device
Nothing leaves on its own. Only what you send yourself goes out:
- the files you export in Profile > Privacy and data: "Export history (CSV)" has every set, your measurements, weight, check-ins, challenges, pauses, where you felt it, your consents (version and dates) and today's workout version; "Export everything (JSON)" has the same, plus your plan answers, your date of birth, the text of each consent and the full workout log, with the device code, so you can import it on another device;
- the Atelier file, when you tap "Export my Atelier (file)": your body shape, goal, tape measurements, mannequin history and Atelier consents;
- the image of a workout card, when you save it or send it through your device's share menu (the card never includes progress photos or anything from the Atelier);
- the emails you send us, including the one from "Report a problem", which carries the error log you read before you send it.
Progress photos never go into any file. Each file stays with you, wherever you choose to keep it.
6. The site, page delivery and email
- Page delivery. The site and the app are delivered through Cloudflare's network. To send each page and protect against abuse, Cloudflare receives your IP address, which browser you use and the address you requested. It can also ask your browser to report connection failures (Network Error Logging). We do not keep a record of your visits, and we only see totals from Cloudflare, such as the number of requests per day.
- No cookies and no trackers. We checked on November 1, 2026: the site and the app do not set cookies. Fonts and drawings come from our own domain, and the pages' security policy blocks scripts from other sites. Cloudflare may insert its own measurement script (Web Analytics) into the pages; the security policy blocks that script, and it does not run.
- Landing page. When you arrive through a link with campaign parameters (utm_), the page only passes those parameters on to the link to the app. Nothing is stored.
- Email. When you write to one of our upbumbum.com addresses, Cloudflare forwards the message to the inbox our team reads, at Google (Gmail). We use your email address and your message only to reply and resolve your request, and we keep the conversation for as long as that request requires. You can ask us to delete the conversation. Do not send health data or photos by email. "Report a problem" opens your email app with the error log in the message: the app sends nothing, and you decide whether to send it.
7. Who we share data with
| Who | What | What for |
|---|---|---|
| Cloudflare | IP address and technical data from each request; the emails you send us, on their way to our inbox | Deliver the site and the app, protect against abuse and forward email |
| The emails you send us | Host our email inbox | |
| Advertisers, data brokers and social networks | Nothing | Never |
| Third-party AI services | Nothing | Never |
Cloudflare and Google process data in several countries, including the United States. Your training data, measurements, weight, cycle data, photos and your Atelier do not go to either of them: the app does not send this data anywhere.
We do not sell personal data, now or in the future, and we do not use data for advertising.
8. How long it is kept
| Data | How long |
|---|---|
| Everything on your device | Until you delete it. "Delete account and data", in Profile, deletes everything at once. |
| Cycle check-ins | Until you turn them off. Turning them off deletes the whole daily check-ins, including energy and sleep. |
| Progress photos | Until you delete them one by one or turn them off. Turning them off deletes them all. |
| Atelier | Until you withdraw the purpose, tap "Delete my Atelier" or delete everything. The mannequin history keeps at most 13 check-ins, and you can delete just the history with "Delete the history". |
| Error log | Only the last 50. It goes sooner if you delete it in "Report a problem" or delete everything. |
| Age lock | Until the day you would turn 18 by the date you entered, for 1 year at most. "Delete account and data" does not remove the lock. |
| Emails you send us | For as long as your request requires. You can ask us to delete them sooner. |
9. Your rights and how to use them
You can do almost everything yourself in the app, right away:
| What you want | Where in the app |
|---|---|
| See and copy | Profile > Privacy and data > Export history (CSV) or Export everything (JSON), free, whenever you want (section 5 lists what each file has). Your Atelier comes out in Profile > My Atelier > Export my Atelier (file). You can see the rest on the app's screens. |
| Move to another device | Export everything (JSON) on the old device and, on the new one, Profile > Privacy and data > Import history. Workouts come in without duplicates; measurements, weight, challenges, pauses and where you felt it are added to what is already there, and nothing is deleted. The plan in the file only comes in on a device with no workouts yet. Consents never come from the file: without the cycle consent turned on on the new device, cycle check-ins are left out. The Atelier is not in this file: on the new device, you build the mannequin again. |
| Correct | Change your answers in Profile and in your plan, and your mannequin, goal and tape measurements in the Atelier. Measurements and photos can be deleted one by one; a set can be unchecked in the workout itself. |
| Delete | Profile > Privacy and data > Delete account and data > Delete everything. Just the Atelier: Profile > My Atelier > Delete my Atelier. Just the error log: Profile > About > Report a problem > Delete the log. Step by step in Delete your account and data. |
| Withdraw a consent | Profile > Privacy and data > Training data, Cycle check-in or Progress photos > Withdraw. The Atelier ones, in Profile > My Atelier > Privacy > Withdraw. |
| Know who we share with | Section 7 of this policy. |
Because we have no copy of the app's data, there is nothing of it for us to show or delete by email. But we answer any request at privacy@upbumbum.com: we explain how to do it in the app and we delete the messages you sent us. Response times: Brazil, 15 days; European Union, 1 month; Mexico, 20 business days; United States, 45 days.
10. Age: 18 and older
UpBumbum is made for women and is only for people 18 and older. The app asks for your date of birth at the start. If the date shows you are under 18, the app stops, and the device stays locked until the day you would turn 18, for 1 year at most. It keeps only the day the lock ends. More details in Adults only (18+).
11. How we protect your data
- By default, nothing leaves your device.
- The site and the app use an encrypted connection (HTTPS), and a browser that has opened the site before is told not to use an unencrypted connection.
- The pages' security policy blocks scripts, fonts and connections from other sites.
- The app asks the browser to keep its data as persistent, so it is not deleted when the device runs low on space.
No system is free of risk. If an incident puts your data at risk, we will notify you and the authorities within the time set by the law where you live.
12. Accounts (not available yet)
Today UpBumbum has no user accounts and no server with user data. When accounts exist, they will be optional, and before that we will publish a new version of this policy, with what the account keeps, where and for how long. The app will ask for your consent before it sends any data.
13. Your rights by region
Brazil (LGPD, Lei 13.709/2018)
Health data is sensitive personal data (art. 5, II), and we process it only with your specific and highlighted consent (art. 11, I). You can confirm that your data is processed, access it, correct it, take a copy with you, delete what was processed with your consent, know who we share it with and withdraw your consent (art. 18). Withdrawing is free and easy (art. 8, § 5). You can also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), Brazil's data protection authority.
United States
Our Consumer Health Data Privacy Policy covers Washington (My Health My Data Act), Nevada and the other states. We do not sell data, we do not do targeted advertising and we do not use geofencing. UpBumbum is not directed to children.
European Union and Spain (GDPR)
Health data is a special category of data (art. 9(1)), and we process it only with your explicit consent (art. 9(2)(a)). You can withdraw your consent at any time, without affecting what was done before. You have the rights of access, correction, deletion, restriction, portability and objection, and you can file a complaint with the data protection authority of the country where you live; in Spain, the AEPD.
Mexico (LFPDPPP)
Health data is sensitive data, and we process it only with your express consent. You can exercise your ARCO rights (access, rectification, cancellation and opposition) and withdraw your consent in the app or at privacy@upbumbum.com.
14. Changes to this policy
Each version has a number and a date, at the top of this page. If a change needs your consent, the app asks you again before the change takes effect. Earlier versions are available on request at privacy@upbumbum.com.
15. Contact
- Privacy and your rights: privacy@upbumbum.com
- Support: support@upbumbum.com
- Controller and person in charge of data protection (encarregado, under Brazil's LGPD): UpBumbum; legal name, CNPJ, address and name of the person in charge still being defined.
Other documents
Terms of use
The rules for using UpBumbum: who can use it, what the app is and is not, the risks of training and what belongs to whom.
Health data (US)
For people who live in the United States: what health data UpBumbum keeps, where it stays and how you can see it, delete it and withdraw your consent.
Images and AI
Where UpBumbum may use images generated by artificial intelligence, what AI never does and how we label each image.
Adults only
Why UpBumbum is only for adults, how the app checks age and what to do if someone under 18 is using it.
Support
Short answers about UpBumbum and how to reach us.
Delete your account and data
How to delete everything UpBumbum keeps, in the app or without it, and what remains afterward.