Privacy Policy

Effective date: July 23, 2026 · Last updated: July 23, 2026

We built Pulvex to help you train harder and get rewarded for it. We are not in the business of selling your data. We are in the business of fitness. Here is exactly what we collect, why, and what we do with it. Plain language, nothing hidden.

1. Who We Are

Pulvex is a fitness gamification app. You work out, you earn points, and you redeem them for real discounts with brands you actually use. That is the deal.

This Privacy Policy explains how we collect, use, and protect your personal data when you use the Pulvex app or visit our website at getpulvex.com.

Pulvex is operated from Israel. For any questions about this policy, email us at support@getpulvex.com.

2. Information We Collect

Information you give us

• Your email address and display name when you create an account
• Your fitness goal, experience level, and available equipment, chosen during onboarding
• Any physical limitations you choose to tell us about — this is health information and is covered separately in section 3
• Your preferred language and measurement units
• Your country, derived from your device language setting, used to show you offers you can actually redeem
• Your confirmation that you are 18 or older, and your acceptance of our Terms of Service and this policy, each stored with the date and time you gave it

Information we collect automatically

• Workout sessions — workout type, template, start and end time, duration, and the exercises you completed
• Points and rewards — your points balance, lifetime XP, tier, and a ledger of every points transaction
• Streaks and activity — your current and longest streak, the date of your last workout, and total training minutes
• Redemption records — which offers you redeemed, when, and the discount codes issued to you
• Anti-fraud records — when a workout session does not qualify for points, we log the reason (for example, the session was shorter than five minutes or you reached the daily limit) along with the session duration. This is described in more detail in section 4.
• Push notification token — an identifier issued by your device's operating system that would let us send you notifications. We store this token; at present, streak reminders are generated entirely on your own device and we do not send push messages from our servers.
• Device and app information — device type, operating system version, and app version, used for technical support and fixing bugs

What we do not collect

• Your GPS location. We do not request or use location permissions. Your country comes from your device's language setting, not from tracking where you are.
• Payment card details or billing information. Pulvex is free and we do not process payments.
• Your contacts, photos, camera, or microphone
• Health data from third-party devices, wearables, or health apps

3. Health Information

During onboarding, Pulvex offers you the option to tell us about physical limitations — for example, a knee injury or back pain — so that we can avoid recommending exercises that might not be right for you.

Under the EU General Data Protection Regulation this is special category data (Article 9), and under Israel's Protection of Privacy Law it is sensitive information. We treat it accordingly:

• It is optional. You can complete onboarding and use every feature of Pulvex without telling us anything about physical limitations.
• We ask for your explicit consent. If you select one or more limitations, a separate consent checkbox appears before you can continue. You must actively confirm that you understand this is health information and that you consent to us using it to personalize your workouts. Your consent is stored with the date and time you gave it, separately from your acceptance of these policies. If you skip the step, nothing is saved and no consent is recorded.
• We use it for one purpose only — filtering and adapting the exercises we suggest to you. We do not use it for anything else, and we never share it with partner brands or anyone outside our own infrastructure.
• You can withdraw consent at any time. Clear your limitations in the app under Profile, or email us and we will remove them. Withdrawing consent does not affect the lawfulness of what we did with the information before you withdrew it.

Pulvex is not a medical service. Nothing in the app is medical advice. See section 2 of our Terms of Service for the full health and fitness disclaimer.

4. How We Use Your Information

• To run the app — awarding points after verified workouts, maintaining your streak, storing your history, and issuing reward redemption codes
• To personalize your experience — recommending workout templates that match your goals, fitness level, and available equipment, and adapting exercises to any limitations you have told us about
• To show you relevant rewards — using your country to filter partner offers so you only see discounts that are actually redeemable where you are
• To keep the system fair — every point-earning action is verified on our servers, never by the app on your device. We check that sessions meet a minimum duration, apply a daily limit on point-earning sessions, and detect implausible activity patterns. When a session is rejected we log the reason so the rewards system stays honest for everyone and so partner brands can trust that the points behind a redemption represent real workouts.
• To communicate with you — responding to your support requests and telling you about important changes to the app or to this policy
• To meet our legal obligations — keeping records of your consent, and keeping billing records of partner redemptions as required by accounting and tax law

We do not use your data for advertising. We do not sell your data. We do not build advertising or behavioural profiles, and we do not share your personal information with advertisers.

5. Legal Bases for Processing

If you are in the European Economic Area or the United Kingdom, these are the legal bases we rely on:

What we do	Legal basis
Running your account, awarding points, issuing redemption codes	Performance of a contract
Using physical limitations to personalize workouts	Your explicit consent (Art. 9(2)(a))
Anti-fraud checks and session verification	Legitimate interests — protecting the integrity of the rewards system
Keeping partner billing records	Legal obligation — accounting and tax
Storing records of your consent and legal acceptances	Legal obligation and legitimate interests

6. How We Share Your Information

We do not sell or rent your personal data to anyone.

Partner brands

When you redeem a reward, the partner brand receives only the discount code. They do not receive your name, email address, or any other personal information — unless you choose to share it with them directly when you make a purchase on their own store, which is between you and them under their own privacy policy.

For revenue-share invoicing, we keep a record of each redemption that was used at a partner's store. These records are used to calculate what a partner owes us; the partner does not receive them.

Service providers

We use a small number of third-party services to operate Pulvex, listed in section 7. These providers process your data only on our behalf and under our instructions. They are not permitted to use your data for their own purposes.

Legal requirements

We may disclose your information if required by law, court order, or where necessary to protect the rights, property, or safety of Pulvex, our users, or the public.

7. Third-Party Services

Service	What it does	What it processes
Firebase (Google)	Authentication, database, file storage, and the server functions that award points and issue codes	Everything described in section 2. Your data is stored on Google Cloud infrastructure. See Firebase's privacy policy.
Shopify	Generates and validates the discount codes you redeem, and confirms when a code has been used	The discount code itself and an internal reference to the redemption. Shopify does not receive your email address or name from us.
Expo	Delivers app updates and issues the push notification token described in section 2	Device push token and app version.
EmailJS	Processes partner application submissions from our website	Only the contact details entered in that form. This is not connected to your app account.

Exercise instructions and demonstration images shown in the app are sourced from WorkoutX and are stored on our own infrastructure. Viewing an exercise does not send any request to a third party or reveal anything about you.

We will update this list if we add new service providers that handle your data.

8. Data Retention

We keep your data for as long as your account is active. What happens when you delete your account is described in section 9.

Some records are kept after account deletion, for specific and limited reasons:

• Anti-fraud records are kept, but stripped of anything identifying you. Your user identifier is replaced with a placeholder so the record no longer points to you, while the pattern it describes remains useful for protecting the rewards system.
• Partner billing records are kept for as long as accounting and tax law requires. These records do not identify you: they record that a redemption occurred at a partner's store, without storing your account identifier. Any older records created before this was the case are stripped of identifying details when you delete your account.
• Records of your consent — such as when you accepted our Terms — may be kept as evidence that we obtained consent lawfully.
• Aggregate statistics that cannot be linked back to you personally may be kept indefinitely.

9. Deleting Your Account

You can delete your Pulvex account yourself, at any time, from inside the app: open Profile, scroll to the Account section, and choose Delete my account. You will be asked to confirm, because this cannot be undone.

You can also request deletion by emailing support@getpulvex.com from the address associated with your account.

When you delete your account, the following are permanently removed:

• Your profile and all the information in it, including anything you told us about physical limitations
• Every workout session and the exercises recorded in it
• Your points ledger, balance, lifetime XP, and streak history
• Your redemption records
• Your login credentials, removed from our authentication system
• Your push notification token
• All app data stored locally on your device

Deletion is immediate rather than scheduled. There is no grace period and no way to recover the account afterwards.

10. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to fix inaccurate data. Most things can be changed directly in the app under Profile.
• Deletion — delete your account yourself in the app, or ask us to do it
• Export — request a copy of your workout and points history in a portable format
• Withdraw consent — where we rely on your consent, withdraw it at any time
• Objection — object to processing based on our legitimate interests
• Complaint — if you are in the European Economic Area or the United Kingdom, lodge a complaint with your local data protection authority. If you are in Israel, you may contact the Privacy Protection Authority.

To exercise any of these rights, email support@getpulvex.com. We will respond within 30 days.

11. Age Requirement

Pulvex is for adults. You must be 18 or older to create an account, and you are asked to confirm this when you register.

We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account, contact us at support@getpulvex.com and we will remove the account and its data promptly.

12. Security

• Database security rules ensure that only you can read or write your own account data
• All point-earning actions are verified on our servers. The app on your device cannot award itself points.
• All traffic between the app and our servers uses HTTPS encryption
• Redemption codes are validated server-side so they cannot be forged, duplicated, or reused
• Administrative actions are recorded in an audit trail
• Firebase App Check is used to verify that requests come from a genuine installation of the Pulvex app

No system is completely immune to security risks. If you discover a vulnerability, please report it to support@getpulvex.com before disclosing it publicly. We will take it seriously and respond quickly.

13. International Data Transfers

Pulvex is operated from Israel and your data is stored on Firebase infrastructure operated by Google, which may process it in data centres outside your country of residence, including in the United States.

Israel has been recognised by the European Commission as providing an adequate level of data protection. Where data is transferred outside the European Economic Area to our service providers, we rely on appropriate safeguards such as Standard Contractual Clauses.

14. Changes to This Policy

If we make changes that affect your rights or how we handle your data, we will tell you by in-app notification or email before those changes take effect.

The "Last updated" date at the top of this page always reflects the current version. Continuing to use the app after a change means you accept the updated policy.

15. Contact Us

Got a question or a request? We are reachable at:

• General support and privacy questions: support@getpulvex.com
• Partner inquiries: partners@getpulvex.com