BULKD
Legal

Privacy Policy

Last updated: May 2026

BULKD ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use the BULKD mobile application ("App").

1. Information We Collect

1.1 Account Information

When you create an account (via Apple Sign-In, Google Sign-In, or email), we collect your name and email address solely to identify your account. We do not use this information for marketing without your explicit consent.

1.2 Workout & Training Data

All workout logs, routines, sets, reps, weights, and personal records you enter are stored locally on your device. If you are a Pro subscriber and have cloud backup enabled, this data is also stored securely in our cloud infrastructure (Google Firebase Firestore) linked to your account.

1.3 Usage Data

We collect anonymised, aggregated usage statistics (such as app crash reports and performance metrics) to improve the App. This data cannot be linked back to individual users.

1.4 Payment Information

Pro subscriptions are processed through Apple App Store and Google Play Store in-app purchase systems. We do not receive or store your payment card details. Subscription status is managed via RevenueCat.

1.5 AI Coaching Data

When you use the AI Coaching feature (Pro only), we send anonymised workout statistics to our secure cloud functions, which forward them to OpenAI's API to generate training insights. We never send personally identifiable information (PII) such as your name or email to OpenAI. Your AI coaching summaries are stored securely linked to your account.

1.6 Health Platform Data (Apple Health & Health Connect)

On iOS, the App can connect to Apple HealthKit (via Apple Health). On Android, the App can connect to Google Health Connect. Both integrations are entirely optional and require your explicit permission before any data is accessed.

The App may read the following data from your health platform:

  • Body measurements — body weight and body fat percentage, to pre-fill your AI coaching profile and personalise coaching insights
  • Activity & energy — daily step count, active calories burned, and basal energy burned, used to provide context for AI coaching summaries

The App may write the following data to your health platform:

  • Workout sessions — when you finish a workout, a record is written back to Apple Health / Health Connect so your training activity appears alongside your other health data

Health platform data is used solely to operate App features. It is never sold and never used for advertising. It is not shared with third parties except where a small subset of anonymised body and activity statistics (for example, current body weight or average daily steps) is included in the AI coaching prompt sent to OpenAI (see Section 1.5). No raw health records are ever sent to OpenAI.

You can revoke the App's access to your health data at any time through your device settings (iOS: Settings → Health → Data Access & Devices; Android: Health Connect → App permissions).

2. How We Use Your Information

We use collected information to:

  • Provide and operate the App and its features
  • Sync and back up your training data across devices (Pro only)
  • Process subscription status and entitlements
  • Generate AI coaching insights from your workout data
  • Read health and body data (with your permission) to personalise AI coaching and pre-fill your profile
  • Write completed workout sessions back to Apple Health or Health Connect
  • Detect and fix bugs and improve performance
  • Comply with legal obligations

We do not sell your personal data. We do not use your data for advertising purposes.

3. Data Storage & Security

Local data is stored in an encrypted SQLite database on your device. Cloud data (Pro subscribers) is stored in Google Firebase Firestore, protected with Firebase Security Rules that restrict access to your authenticated account only. Data in transit is encrypted using TLS.

We apply industry-standard security practices but cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.

4. Third-Party Services

The App uses the following third-party services:

  • Google Firebase — Authentication, cloud database, and cloud functions
  • RevenueCat — Subscription management
  • OpenAI — AI coaching summaries (anonymised data only)
  • Apple App Store / Google Play — Payment processing
  • Apple HealthKit (iOS) — Optional health and fitness data integration. Accessed only with your permission. See Apple's Privacy Policy.
  • Google Health Connect (Android) — Optional health and fitness data integration. Accessed only with your permission. See Google's Privacy Policy.

Each service operates under its own privacy policy. We encourage you to review them.

These services may also collect technical data such as IP addresses and system logs for their own operational and maintenance purposes. This is governed by their respective privacy policies, not ours.

4a. International Data Transfers

BULKD uses Google Firebase for cloud storage and authentication. Google may process and store your data on servers located outside your country of residence, including in the United States. Where data is transferred outside the UK or European Economic Area, Google ensures adequate protections are in place under Standard Contractual Clauses approved by the relevant authorities. For more information, see Google Firebase's Privacy and Security documentation.

Local data remains on your device until you delete the App or manually remove it. Cloud data (Pro) is retained for the duration of your active subscription. If your subscription lapses, cloud data is retained for a grace period (currently 14 days) before being automatically deleted. You can request immediate deletion at any time (see Section 7).

6. Children's Privacy

The App is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

7. Your Rights & Data Deletion

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (right to erasure)
  • Object to or restrict processing of your data
  • Data portability
  • Lodge a complaint with your local data protection authority

If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). If you are in the EU, you may contact your national data protection authority.

To delete your account and all associated data, go to Settings → Manage Account → Delete Account inside the App. You can also request deletion via our Data Deletion page.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, by in-app notification.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at bulkd@objectcreate.uk.