Privacy Policy
Last updated: August 9, 2026
PullUpMaster ("PullUpMaster", "we", "us") is a pull-up training app. Because your training programs, streaks, and workout history are backed up to your account and synced across devices, PullUpMaster stores personal data on our backend, provided by Supabase. This policy explains what we collect, why, and how you can access or delete it.
Data controller
PullUpMaster is published by Mendi Tekstilwaren / Dilara Demir Caglar, Fauststrasse 44a, 81827 München, Germany. Contact: support@qrodesk.com.
Account required
You must create an account to use PullUpMaster, so that your programs and workout log can be saved to our backend and restored on any device you sign in on. You can create an account with:
- Email & password — handled by Supabase Auth.
- Google Sign-In — authenticated via your Google account.
- Sign in with Apple — including Apple's "Hide My Email" option.
When you use Google or Apple sign-in, we receive a unique identifier for your account and the email address associated with it (a private relay address if you choose to hide your email with Apple). We do not receive your Google or Apple account password.
What data we store
| Category | Examples |
|---|---|
| Account data | Email address, authentication provider ID, display name (if you set one), account creation date. |
| Training data | Selected program, workout sessions, sets, reps, tempo, added weight, streaks, personal records, reminder settings. |
| Optional profile data | Body weight or other stats you choose to enter to personalize a program. |
| Subscription status | Entitlement flag, product ID, and expiration date used to unlock Pro features. Payment card details are never seen by us — billing is handled entirely by Apple or Google. |
| Technical data | App version, device type, and OS version, used only for support and reliability — not for advertising. |
What PullUpMaster does not collect
- No camera or microphone access — reps are logged manually, not detected automatically.
- No precise location data.
- No access to your contacts, photos, or health app data.
- No advertising trackers or third-party ad SDKs.
- No public profile, social feed, or leaderboard — your training data is private to your account.
Where your data is stored
Your account and training data are stored in our Supabase project (PostgreSQL database and authentication service). Data is encrypted in transit (TLS) between the app and our backend. Supabase acts as our data processor and applies its own security and access controls; see Supabase's privacy policy for details on their infrastructure.
Other service providers
- Supabase — database, authentication, and data storage.
- Apple — Sign in with Apple, and App Store subscription billing on iOS.
- Google — Google Sign-In, and Google Play subscription billing on Android.
We share only the data each provider needs to perform its function (for example, verifying your subscription status with the App Store or Google Play). We do not sell your personal data to anyone.
Why we process your data
- To create and secure your account, and let you sign in across devices.
- To save and sync your programs, workout history, and progress.
- To unlock and manage your Pro subscription.
- To provide customer support when you contact us.
Data retention
We keep your account and training data for as long as your account is active. If you delete your account, we delete your personal data and workout history from our systems within 30 days, except where we must retain limited records to comply with legal or tax obligations.
Deleting your account and data
You can permanently delete your account and all associated data at any time from Settings → Account → Delete Account inside the app. You can also request deletion by emailing support@qrodesk.com from your registered email address.
Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us at support@qrodesk.com to exercise any of these rights.
Children's privacy
PullUpMaster is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Security
We rely on Supabase's authentication and database security, use encrypted connections between the app and our backend, and limit access to production data to what is necessary to operate the service. No method of transmission or storage is 100% secure, but we work to protect your information.
Changes to this policy
We may update this policy as PullUpMaster evolves. Material changes will be reflected by updating the "Last updated" date above.
Contact
For privacy questions or data requests, contact support@qrodesk.com.