What Pumpee knows about you, and why

1. Who’s responsible for your data

The Pumpee app is published by B2CORP, the controller of your personal data under the GDPR. Any questions: contact@pumpee.fr.

2. What’s collected, and what for

Every piece of data we collect powers a function you can see in the app. Nothing is collected “just in case”.

Precise location, including in the background

To record your GPS track, split your runs, compute distance, speed and distance per pump, and place your spots on the map. Legal basis: your consent, given at the system prompt and revocable at any time in your phone settings.

Motion sensors and physical activity

Accelerometer and gyroscope to detect pumps, the dock start, the glide phase and the fall. If you pair a watch: heart rate and the training data tied to the session. Legal basis: your consent. Without these sensors, automatic run detection doesn’t work.

Account and identifiers

Email address, username, technical account and session ID. To find your sessions on any device and secure access. Legal basis: performance of the service you ask for.

Photos and content you add

Spot photos, the photo used for your session card, spot names, session titles, comments. Used only to display what you created — to you or the people you share it with. Legal basis: performance of the service. You can delete each piece of content individually.

Technical data and crash reports

Device model, OS version, app version, error logs. To understand and fix bugs. Legal basis: our legitimate interest in keeping the app working.

3. Background location, in plain words

During a session, your phone is in a pocket or a waterproof case, screen off. So it doesn’t lose the thread of your track, Pumpee has to keep reading your location while the app isn’t on screen. That’s the only use of this permission.

• Collection starts when you begin a session and stops when you end it.
• No location is recorded between two sessions.
• You can decline background access: the app then works only with the screen on, with a less reliable track.
• You can revoke the permission at any time in your phone settings.

4. What Pumpee doesn’t do

• No selling or renting of your data.
• No targeted advertising, no data brokers.
• No tracking of your location outside a session.
• No private spot made public without your action.

5. Who else sees your data

Two cases only.

Other riders, only for what you make public: a session where you turned on “public session”, a spot you chose to share, your username and profile photo. The rest never leaves your account.

Our technical subprocessors, who process the data on our behalf and on our instructions: OVHcloud (server hosting, France), Brevo (transactional email delivery, France), Google Firebase Cloud Messaging (push notification delivery) and Google Maps on Android / Apple MapKit on iOS (map tiles). Pumpee uses no crash-reporting service and no analytics tool. Your account data is hosted in France; notification delivery via Firebase may involve a transfer outside the EU, covered by the European Commission’s standard contractual clauses.

We may also disclose data upon lawful request from a competent authority.

6. How long it’s kept

• Your sessions, runs, spots and setups: as long as your account exists. It’s your history, it belongs to you.
• Account deleted: personal data erased within 30 days, backups included.
• Technical logs and crash reports: 12 months maximum.
• Data kept longer only where the law requires it.

7. Your rights

You can request access to your data, its rectification, erasure, portability, restriction of processing, and withdraw your consent at any time. Write to contact@pumpee.fr: reply within one month maximum.

To delete your account right now, it’s here: delete your account.

If our answer doesn’t satisfy you, you can refer the matter to the CNIL (cnil.fr) or the data protection authority in your country.

8. Security, minors, changes

Exchanges between the app and our servers are encrypted in transit, and access to production data is restricted. No system is infallible: in the event of a data breach likely to affect you, you’ll be informed.

Pumpee is not intended for anyone under 15 without the consent of a holder of parental authority.

This policy may evolve with the app. Any significant change will be announced in the app, and the update date at the top of this page will change.