Last updated 6 September 2026
Pull to Refresh has no account system, no analytics, no advertising, and contains no third-party SDKs. Almost everything it knows stays in the app's own storage on your device. One feature — the leaderboard — sends data off the device, and only after you switch it on.
Counting reps needs the camera. Each frame goes straight from the camera into Apple's on-device Vision framework, which returns the positions of your joints. The app reads those positions, decides whether a rep happened, and discards the frame.
Blocking is built on Apple's Screen Time frameworks. When you choose apps to lock, iOS gives this app opaque tokens rather than names.
Saving sets to Health is off until you turn it on, and iOS asks your permission at that moment.
| Written | A workout for each finished set, an estimate of the energy it burned, and the rep count. |
|---|---|
| Read | Body mass, and only to make that energy estimate mean something. Nothing else is read. Refusing it changes nothing except the accuracy of the estimate. |
Health data stays in Apple's Health store on your device. It is never sent anywhere by this app, and it is never used for the leaderboard.
This is the only feature that sends anything off your device, and nothing is sent until you tap Join the board. It uses Apple's CloudKit public database, so the data sits in your iCloud, under Apple's terms.
What is sent, and nothing beyond it:
Your rows are keyed to the anonymous per-app identifier iCloud gives this app, which is how the app knows which row is yours and stops anyone editing someone else's. Other players see only your chosen name and those numbers.
Leaving the board deletes your row. Your own history stays on your phone.
Payments are handled entirely by Apple. The app never sees your card, your billing address, or your Apple Account. Apple tells it one thing: whether a valid purchase currently exists.
Notifications are composed and scheduled on your device. Nothing is sent through a server, and no push token is collected.
Deleting the app removes all of it, and removes every lock the app had put in place.
No contacts, no location, no photos, no microphone, no advertising identifier, no device fingerprint, no crash or usage analytics, and no data is sold or shared with anyone for any purpose.
The app is not directed at children under 13 and is designed for someone restricting their own device, not another person's.
If this policy changes in a way that affects what leaves your device, the date above changes and the app will say so before the new behaviour starts.
Questions about this policy, or a request to delete a leaderboard row: chrnknzhnkv@gmail.com.