Effective: April 7, 2026 · Last updated: April 7, 2026
PFFT collects zero user data. Your workouts, GPS routes, health metrics, and personal information never leave your device. There is no server. There is no account system. There is no analytics. There is no telemetry. We literally cannot see your data because it doesn't exist anywhere except on your phone, encrypted with keys only your device controls.
PFFT ("Private Fucking Fitness Tracker") is developed and published by Bryan Sanchez ("we," "us," "our"). PFFT is a fitness tracking application available on Google Play and (in the future) the Apple App Store. Our website is pfft.app.
For privacy questions: privacy@pfft.app
Your data belongs to you. Period.
PFFT is designed from the ground up so that we never have access to your personal data. This is not a marketing claim — it is an architectural decision enforced by code. The app has no server component, no cloud sync, no user accounts, and no network calls that transmit your data.
PFFT does not collect, transmit, store on any server, sell, share, or process any of the following:
PFFT stores data exclusively on your device using Android's hardware-backed keystore (via expo-secure-store) and local storage (AsyncStorage). This data includes:
GPS coordinates, distance, duration, speed, calories burned, elevation, and route data for each workout. Stored in AES-256 encrypted secure storage. This data never leaves your device.
Your preferences: units (metric/imperial), theme, auto-pause settings, language, activity order. Stored in local AsyncStorage on your device.
If you enter your weight (optional), it is stored in encrypted secure storage on your device. If you enable Health Connect integration (optional), PFFT reads step and activity data from Android Health Connect. This data is processed locally and never transmitted.
If the app crashes, a local crash report is saved to your device only. These logs contain error messages and stack traces — no personal data, no GPS coordinates, no workout details. Logs are automatically deleted after 7 days. You can view and delete them in Settings → About.
During active workouts, PFFT may write GPS accuracy and motion data to temporary log files on your device for debugging purposes. These files are stored in the app's private directory, are automatically cleaned up after 7 days, and are deleted when you use "Delete All Data" in Settings.
All workout data is encrypted using AES-256-GCM via Android's hardware-backed keystore (Keymaster/StrongBox where available). The encryption keys are generated and managed by your device's secure hardware — PFFT never has access to the raw keys. Biometric authentication (fingerprint or face) can be required to access the app.
Encrypted backups use PBKDF2-SHA256 with 200,000 iterations, a random salt, and a random IV. The backup password is never stored — only you know it.
PFFT makes no network calls that transmit your personal data. The only network activity is:
The PFFT app itself contains zero analytics SDKs, zero tracking pixels, zero telemetry endpoints, and zero Firebase or similar services.
If you voluntarily sign up for our waitlist at pfft.app, your email address and platform preference are sent to Buttondown (our newsletter provider) via a Cloudflare Worker. Buttondown stores your email for the sole purpose of sending you launch notifications. We do not use your email for any other purpose. You can unsubscribe at any time via the link in any email. Buttondown's privacy policy: buttondown.com/legal/privacy
PFFT integrates with the following third-party services, none of which receive your workout or personal data:
PFFT is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from children — because we do not collect data from anyone.
All data is stored on your device. You control it completely:
Because we never receive your data, there is nothing for us to delete on our end. Your data dies with the app.
We do not share your data with anyone. We cannot share your data with anyone. Your data exists only on your device in encrypted form. We have no server, no database, and no mechanism to access it.
Because PFFT processes all data locally on your device, no data crosses international borders. Your data stays on your phone, in your country, under your control. PFFT complies with GDPR, CCPA, PIPEDA, and all other applicable privacy regulations by design — we collect nothing, so there is nothing to regulate.
PFFT Circles is a planned feature that will allow private workout sharing between 2–12 people using end-to-end encryption (AES-256-GCM). If implemented, circle data will be encrypted before leaving your device. A relay server (if used) will be zero-knowledge — it will route encrypted blobs without the ability to read them. Only circle members with the shared encryption key can decrypt the data. This privacy policy will be updated before Circles launches.
For the Google Play Data Safety section, PFFT declares:
When PFFT launches on iOS, our App Store Privacy Nutrition Label will declare:
PFFT's privacy claims are verifiable. The app contains no analytics SDKs, no tracking code, no server communication for user data, and no telemetry. We encourage independent security researchers to verify these claims. Contact security@pfft.app for responsible disclosure.
If we ever change this privacy policy in a material way, we will notify users via in-app notification and update this page at least 30 days before changes take effect. The "Last updated" date at the top reflects the most recent revision.
Given PFFT's architecture, any change that introduces data collection would require a fundamental rewrite of the app — which we have no plans or incentive to do.
For privacy questions, concerns, or data requests: