Pull to Refresh Actually pull.

Privacy Policy

Last updated 6 September 2026

Pull to Refresh has no account system, no analytics, no advertising, and contains no third-party SDKs. Almost everything it knows stays in the app's own storage on your device. One feature — the leaderboard — sends data off the device, and only after you switch it on.

What the camera does

Counting reps needs the camera. Each frame goes straight from the camera into Apple's on-device Vision framework, which returns the positions of your joints. The app reads those positions, decides whether a rep happened, and discards the frame.

What the app can see about your other apps

Blocking is built on Apple's Screen Time frameworks. When you choose apps to lock, iOS gives this app opaque tokens rather than names.

Health

Saving sets to Health is off until you turn it on, and iOS asks your permission at that moment.

WrittenA workout for each finished set, an estimate of the energy it burned, and the rep count.
ReadBody mass, and only to make that energy estimate mean something. Nothing else is read. Refusing it changes nothing except the accuracy of the estimate.

Health data stays in Apple's Health store on your device. It is never sent anywhere by this app, and it is never used for the leaderboard.

The leaderboard

This is the only feature that sends anything off your device, and nothing is sent until you tap Join the board. It uses Apple's CloudKit public database, so the data sits in your iCloud, under Apple's terms.

What is sent, and nothing beyond it:

Your rows are keyed to the anonymous per-app identifier iCloud gives this app, which is how the app knows which row is yours and stops anyone editing someone else's. Other players see only your chosen name and those numbers.

Leaving the board deletes your row. Your own history stays on your phone.

Purchases

Payments are handled entirely by Apple. The app never sees your card, your billing address, or your Apple Account. Apple tells it one thing: whether a valid purchase currently exists.

Notifications

Notifications are composed and scheduled on your device. Nothing is sent through a server, and no push token is collected.

What is stored on your device

Deleting the app removes all of it, and removes every lock the app had put in place.

What is never collected

No contacts, no location, no photos, no microphone, no advertising identifier, no device fingerprint, no crash or usage analytics, and no data is sold or shared with anyone for any purpose.

Children

The app is not directed at children under 13 and is designed for someone restricting their own device, not another person's.

Changes

If this policy changes in a way that affects what leaves your device, the date above changes and the app will say so before the new behaviour starts.

Contact

Questions about this policy, or a request to delete a leaderboard row: chrnknzhnkv@gmail.com.