Thumo
Your data

Thumo Privacy Policy.

This page explains what data the app needs, how it is used, and how you can manage it.

1. Summary

Thumo Labs processes the data the Thumo app needs for accounts, workout personalization, progress history, security, and support.

Thumo does not sell personal data, display advertising, or provide data to advertising networks.

2. Data we use and why

AccountName, email, internal user ID, Google identifier when you use Google Sign-In, protected sign-in data, and optional phone number, profile photo, and profile description — for registration, sign-in, and account management.
Profile and wellbeingGoals, experience, schedule, equipment, preferences, movement limitations, contraindications, pain and surgery information, sleep, stress, soreness, energy, and readiness — to tailor programs and training load.
WorkoutsPrograms, exercises, sets, repetitions, loads, RIR/RPE, pain and fatigue ratings, notes, and history — to run workouts and show progress.
Technical data and messagesDevice or session identifier, IP address and request time in server logs, error and security information, and emails you choose to send — to operate the service, protect accounts, and answer requests.

Health and wellbeing information is used only for fitness-app functionality, not for advertising.

3. Storage, security, and sharing

Core data is processed by backend services, a PostgreSQL database, and file storage hosted on servers in the Netherlands. Data may therefore be transferred from your country to the Netherlands to operate Thumo.

Only necessary service providers receive access: the infrastructure provider, Google when you choose Google Sign-In, and email providers when you send a message. Using Google Sign-In does not by itself provide your workout history to Google. Data is otherwise disclosed only when required by law.

Production connections use TLS, passwords are stored as protected hashes, and access to infrastructure is restricted. No storage method can guarantee absolute security.

4. Retention and deletion

  • account, profile, and workout data is kept while the account remains active;
  • after a verified request, the account and associated active data are deleted within 30 days;
  • error and security logs, and isolated backups, may be retained for up to 90 days;
  • support, testing, and deletion correspondence may be retained for up to 12 months.

Data is retained longer only when required by law or needed to resolve a legal dispute.

Request account deletion

5. Your choices and contact

You can correct profile information, ask how your data is handled, or request account deletion. We may ask you to verify the account email to protect your account.

This website does not use web analytics or advertising cookies. Its forms only open your email app with a prepared message; you decide whether to send it.

This policy is updated when the data, its uses, or service providers change. The current effective date appears at the top of the page.

Developer: Thumo Labs.
Privacy email: teamthumo@gmail.com.