Privacy policy
This page has two parts: Part A applies to this website, Part B to the fbe app.
Part A: This website
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Cem Özdemir Wildenbruchstr. 91 12045 Berlin Deutschland
In short
This website sets no cookies, uses no analytics or advertising services and loads no fonts or scripts from other providers. The 1RM calculator runs in your browser. Your inputs are not sent to us.
Hosting
The website is hosted by Render (Render Services, Inc., USA) and delivered through a worldwide content delivery network. When you visit it, the hosting provider technically processes connection data such as your IP address to deliver and protect the site (Art. 6(1)(f) GDPR). Data may also be processed outside the EU. We ourselves receive no access logs for this website and do not analyse visitors.
Links to the App Store
The “Download on the App Store” buttons lead to Apple. From the click on, Apple’s privacy information applies.
Contact
If you write to us by email, we process your email address and your text to reply to you (Art. 6(1)(f) GDPR).
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can also complain to a data protection authority. Requests to:
Part B: The fbe app
Last updated: 1 November 2026
1. Controller
The controller for processing your data within the meaning of the General Data Protection Regulation (GDPR) is:
Cem Özdemir Wildenbruchstr. 91 12045 Berlin Deutschland
Email: admin@push-pull-legs.de
2. In short
fbe stores your training data so you can see it in the app and find it on other devices. There is no advertising, no analytics or tracking service and no sale of data. We only send data to an AI service if you have explicitly agreed.
3. Account and sign-in
For sign-in we process your email address, a user ID and the sign-in method (email and password, Google or Apple). With “Sign in with Apple” you can hide your email address from us. Sign-in runs via Google Firebase Authentication. The legal basis is providing the app (Art. 6(1)(b) GDPR).
4. Training data
Workouts, exercises, sets, reps, weights, notes, favorites, goals and reports are stored on your device (to use the app without a connection) and on our server so they are available across devices. Please do not write sensitive health information (e.g. diagnoses or medication) in note fields. We only use it to provide the app’s features (Art. 6(1)(b) GDPR).
5. Profile picture and name (optional)
If you set a profile picture, the app accesses your camera or photos after you allow it. The image is resized (256 × 256 pixels) and stored with your profile. Your display name is optional too. Both are deleted with your account.
6. AI analysis (only with your consent)
For AI feedback after training and for AI workouts, we send your exercises, sets, reps, weights, notes, training goals and earlier sessions for comparison to the AI service of OpenAI (USA). Your name, email address and photos are not sent. The data passes through our server in Frankfurt. The legal basis is your consent (Art. 6(1)(a) and Art. 49(1)(a) GDPR). You can withdraw it at any time in the settings under “AI analyses”. Without consent, no training data is sent to OpenAI. Processing there follows OpenAI’s terms. The result is guidance, not medical or professional advice.
7. Feedback to us (optional)
If you send us feedback by email, we receive your email address, your text and the details in the prepared email (app version, system version, device model) unless you delete them. We use them to reply to you and improve the app (Art. 6(1)(f) GDPR). Your email goes through your own mail provider.
8. Technical logs
Operating the server can produce logs, e.g. time, called function, error messages and IP address. We use them for operation, troubleshooting and security (Art. 6(1)(f) GDPR).
9. Data on your device
Settings, a cache for using the app without a connection, and rest alarms and notifications are kept on your device. Notifications and alarms are created locally and are not sent through our server.
10. Recipients and locations
We use the following service providers:
• Render (server and AI relay), Frankfurt, EU
• MongoDB Atlas (database), Frankfurt, EU
• Google Firebase Authentication (sign-in), Google LLC, USA or worldwide; affects email address, user ID and sign-in method
• Apple (Sign in with Apple)
• OpenAI (AI analysis), USA, only with your consent
For transfers to the USA we rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework of the respective provider.
11. Retention and deletion
We keep your data as long as your account exists. In the settings you can download your data and delete your account. When you delete it, your data is removed unless a legal retention duty applies.
12. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time with effect for the future. You can also complain to a data protection authority. Requests to: admin@push-pull-legs.de
13. Minors
The app is intended for people aged 16 and over.
14. Changes
We update this policy when the app or the law changes. The date above shows the current version.