Last updated 5 October 2026
Pull to Refresh has no account system, no analytics, no advertising, and contains no third-party SDKs. Almost everything it knows stays in the app's own storage on your device. Three things can leave it, all through Apple's own services: your rep counts and badge progress, to Game Center, once the app has told you and you have tapped Got it; a row on the iCloud leaderboard, only if you join it; and, if you use iCloud, a copy of your workout history, to your own iCloud.
Counting reps needs the camera. Each frame goes straight from the camera into Apple's on-device Vision framework, which returns the positions of your joints. The app reads those positions, decides whether a rep happened, and discards the frame.
Blocking is built on Apple's Screen Time frameworks. When you choose apps to lock, iOS gives this app opaque tokens rather than names.
Health is off until you turn it on, and iOS asks your permission at that moment.
| Written | A workout for each finished set, an estimate of the energy it burned, and the rep count. |
|---|---|
| Read | Your step count for today. With reps only, it sets what a rep is worth; with steps counting too, it pays a little screen time for walking instead. And body mass, to make the energy estimate mean something. Nothing else is read. Refusing either changes only those things. |
Health data stays in Apple's Health store on your device, and it is never sent anywhere by this app. The only traces of it anywhere else are indirect: the screen time a set earns depends on the rate your step count set, and that earned time is kept in your iCloud history copy and, if you join it, shown on the iCloud leaderboard. Game Center is sent reps, never earned time.
If your iPhone is signed in to Game Center, the Ranks tab shows Game Center's leaderboards. Before anything is sent, the app shows a notice — at the top of Ranks, and, where the screen has room, on the card at the end of a set — saying what will go, and nothing goes to Game Center until you tap Got it. The same happens again for any other Game Center account that signs in on the phone. Once you have:
These go to Apple's Game Center under your Game Center name and are held by Apple, under Apple's terms. Other players can see your scores on those leaderboards; what they can see of your profile is set in Settings › Game Center. Nothing else is sent to Game Center — not the name you typed for the iCloud leaderboard, not your earned time, no Health data, and not which apps you lock.
The app cannot delete a score once Game Center has it. To stop sending more, sign out of Game Center in Settings › Game Center.
The older, opt-in board, and the one the Ranks tab shows when Game Center is not signed in. Nothing is sent to it until you tap Join the board. It uses this app's CloudKit public database, which Apple hosts under its own terms. It is not in your own iCloud: other players of the app can read your row, and so can we — which is also how we can delete one on request.
What is sent, and nothing beyond it:
Your rows are keyed to the anonymous per-app identifier iCloud gives this app, which is how the app knows which row is yours and stops anyone editing someone else's. Other players see only your chosen name and those numbers.
While you are on it, your row is updated after every set, whichever board the Ranks tab is showing. Leaving deletes your row — you can leave from the Ranks tab on either board. If iCloud cannot be reached at that moment, the app stops sending at once and keeps trying the delete each time you open it, until the row is gone. Your history of sets is never sent to it.
If your iPhone is signed in to iCloud, the app keeps a copy of your workout history in your own iCloud, through Apple's iCloud key-value storage, so that deleting and reinstalling the app does not wipe your history or your streak. The copy holds:
It is tied to your Apple Account, only this app can read it, and it is never sent anywhere else by this app. Other players cannot see it, and neither can we. Your rules, your banked time and your locks are never copied: deleting the app still removes every lock.
On a new install, if iCloud does not yet show an earlier copy, the app waits — until it first hears from iCloud, or for up to a day — before it starts a copy of its own, in case an earlier one is still on its way. Sets done meanwhile stay on the phone and go into the copy when it starts; deleting the app before then loses them. Devices signed in to the same Apple Account share one copy, and their histories are merged. If your iPhone switches to a different Apple Account, the history on the phone is added to that account's copy.
Deleting the app does not delete the copy. The app has no control that erases it, and we have no access to it.
Payments are handled entirely by Apple. The app never sees your card, your billing address, or your Apple Account. Apple tells it one thing: whether a valid purchase currently exists.
Notifications are composed and scheduled on your device. Nothing is sent through a server, and no push token is collected.
Deleting the app removes all of it from your device, and removes every lock the app had put in place. The history copy in your iCloud stays, which is what it is for.
No contacts, no location, no photos, no microphone, no advertising identifier, no device fingerprint, no crash or usage analytics. No data is sold, and none is shared with anyone beyond the Apple services described above.
The app is not directed at children under 13 and is designed for someone restricting their own device, not another person's.
If this policy changes in a way that affects what leaves your device, the date above changes and the app will say so before the new behaviour starts. The last such change was Game Center, in version 1.5.
Questions about this policy, or a request to delete a row on the iCloud leaderboard: chrnknzhnkv@gmail.com.