Thumpy

Privacy Policy

Last updated: August 8, 2026

Thumpy is made by Aura Crafts LLC. This policy describes exactly what the app reads, what stays on your device, and the little that leaves it. The short version: your health data stays on your iPhone.

Health data stays on your device

• Thumpy reads the following from Apple Health, with your permission: workouts, heart rate, resting heart rate, walking heart rate, heart rate recovery, heart rate variability (HRV), cardio fitness (VO2 max), steps, active energy, exercise minutes, sleep, water, and date of birth (to estimate your maximum heart rate).
• All reading happens on your device. Raw samples are processed locally into report cards and trends, and cached in the app's local database on your iPhone.
• The only thing Thumpy ever writes to Apple Health is the water you log in the app. All other access is read-only.
• Raw heart rate samples never leave your device. Ever.

What leaves your device

• AI text service. To write workout notes and the weekly report, Thumpy sends derived statistics only (for example: workout minutes, average heart rate, recovery drop in bpm, weekly deltas vs your own baseline) to our cloud service, which uses an AI provider (Anthropic) to generate the text. These aggregates are tied to an anonymous ID, not your name or email, and are used only to generate your text.
• Anonymous authentication. The app uses Firebase anonymous authentication to protect our AI service from abuse. No email, name, or account is created.
• Purchases. Subscriptions are processed by Apple. Our subscription provider (RevenueCat) receives anonymous purchase state so the app knows you are subscribed. We never see your payment details.
• Analytics and crash reports. We collect anonymous usage events (for example "report card viewed") via Firebase Analytics and crash data via Crashlytics to improve the app. These contain no health values.

What we never do

• No selling of data, to anyone, ever.
• No ads and no ad tracking.
• No accounts, emails, or passwords.
• No health data in analytics.

Data retention and deletion

Your report cards and cached trends live in the app on your device; deleting the app deletes them. Server-side, the anonymous usage counters and cached weekly report text are tied to your anonymous ID and are deleted on request. Email us and we will remove them.

Not medical advice

Thumpy displays your own Apple Watch data for wellness purposes. It is not a medical device and does not diagnose, treat, or prevent any condition.

Contact

Questions: sales@auracraftsllc.com