Skip to content
Pendum
Data / Website and apps

Privacy at a glance

What this website and the five apps do with your data, in plain words.

Updated

Privacy / Compare

Two kinds of app

Pendum Body, Pendum Lift, Pendum Macros and Pendum Hydration keep your records on your phone. Pendum One, the subscription, keeps them on its server so one account works on each device you sign in on.

Summary / Not a policy
This page is a summary, not a privacy policy.
Offline / One-time purchase

Pendum apps

AccountNone
Where records liveOn your phone
AnalyticsNone
Health syncOff until you turn it on
App backupEncrypted file in Pendum Lift and Pendum Macros
Synced / Subscription

Pendum One

AccountRequired
Where records livePendum One server, United States
AnalyticsNone in the current build
Health syncOff until you turn it on
Delete accountIn Settings
Data / Cookies and storage

This website

There is nothing to sign up for. The site works without an account and without cookies. It is published by Svindland Software LLC, the publisher named on the app store listings.

Site / Readout

No cookies and no ads

AnalyticsPage views, without cookies
CookiesNone
Forms that send dataNone
Kept in this browserAppearance, units
Calculator entriesNot stored
  • The site counts page views with Vercel Web Analytics and sets no cookies. A visit is recognized by a hash of the request, which is discarded after 24 hours, and each view records the page, the site that linked to it, an approximate location, and the browser, system and device type. Reports show totals only.
  • The site runs no advertising or cross-site tracking scripts.
  • There is no sign-up, newsletter or contact form, so no form on the site sends data.
  • When you pick an appearance (Light or Dark) or a unit system, this browser’s local storage remembers it so the next page matches. The site does not send it anywhere, and clearing this site’s data in your browser removes it.
  • Calculators run in your browser. What you type into them is not stored or sent, and it never appears in a page address.
  • Fonts are served by this site, not by a font service.
Who makes the apps
Apps / Offline

The Pendum apps

Pendum Body, Pendum Lift, Pendum Macros and Pendum Hydration: no account, no server and no analytics. Your records live in a database on your phone. These facts describe the apps as they are built today.

Data / Storage

On your phone

  • No account and no sign-in.
  • The apps make no network requests of their own. Links to sources open in your browser.
  • No analytics or crash reporting.
  • Records live in a database on your phone. Pendum Body keeps progress photos in the app’s private storage.
  • Reminders in Pendum Hydration are local notifications scheduled by the phone. There is no push server.
  • If iCloud or Android device backup is on, it may include the apps’ data.
  • Erase all data in Pendum Lift and Pendum Macros removes the records the app holds. It cannot delete files you shared or records already in Apple Health or Health Connect. Deleting Pendum Body or Pendum Hydration may remove its records.
Health / Sync

Off until you turn it on

Apple Health on iPhone, Health Connect on Android. When sync is on:

Pendum Body
Weight and height sync in both directions. Body fat goes out to both, and waist circumference to Apple Health. Photos, the other tape measurements and calculated estimates stay in the app.
Pendum Lift
Body weight syncs in both directions. Finished workouts go out as strength training with their name and start and end times; sets and loads stay in the app. The Apple Watch app reads heart rate to show it live and discards its own session at the end; the phone saves the one workout.
Pendum Macros
Weight and height sync in both directions. Logged food goes out with its macros, vitamins and minerals.
Pendum Hydration
Non-alcoholic fluids and caffeine go out. Apple Health also receives standard drinks, and BAC estimates when they are on; on Android, alcohol and BAC stay on the phone. Your latest weight is read for the BAC estimate.
Data / Backup

Encrypted files, no server

Pendum Lift and Pendum Macros save encrypted backup files where you choose, through the share sheet.

EncryptionAES-256-GCM
Key from passwordPBKDF2-HMAC-SHA256
Iterations600,000
Password recoveryNone
  • Backup passwords are not stored, so a lost password cannot be recovered. Pendum Lift asks for at least 10 characters.
  • A cloud destination you pick in the share sheet holds the file under its own terms.
  • Restoring a Pendum Lift backup replaces the records on the phone; it does not merge them. Pendum Lift’s CSV exports are not encrypted.
  • Pendum Body and Pendum Hydration have no backup in the app.
Analysis / On device

No cloud fallback

Where the apps use AI, the model runs on the phone.

Pendum Macros
Photo logging uses only on-device models. Meal photos are deleted from the app’s cache when the logger closes and are not stored with diary entries; label photos are deleted once read. Food search runs on catalogs stored on the phone.
Pendum Hydration
Describing your routine in plain words uses Apple’s on-device model. The description stays on the device.
On Android
In Pendum Macros, text recognition, the barcode scanner and Gemini Nano are Google system components that follow Google’s own terms. A one-time Gemini Nano download is a model download, not an upload of your records.
Apps / Subscription

Pendum One

Pendum One needs an account. Your logs are stored on the Pendum One server, so the same records open on each device you sign in on.

Account / Services

Where your data goes

Sign-inClerk
Your logsPendum One server
HostingFly.io, United States
DatabasePostgreSQL
Food searchFatSecret Platform API
BillingRevenueCat, App Store, Google Play
AnalyticsNone in the current build
  • Sign-in and sign-up go through Clerk. The Pendum One server keeps a user record with your Clerk ID and email address.
  • Food, workouts, body records, plans, supplements and soreness are stored on the Pendum One server, hosted on Fly.io in the United States with a PostgreSQL database.
  • Food search, autocomplete and barcode lookups go through the Pendum One server to the FatSecret Platform API.
  • Purchases go through RevenueCat with App Store and Google Play billing. On iPhone, RevenueCat also collects Apple Search Ads attribution through Apple’s AdServices token, which needs no tracking permission prompt.
  • None in the current build. From version 1.8.0 the iPhone and Android apps send usage events and error reports to PostHog; events leave out weight, height, sex and measurements. Pendum One in a browser sends no analytics.
  • Health sync is off until you turn it on, and it turns off in Settings. It reads weight and steps and writes weight and daily calories, protein, carbs and fat. Weigh-ins it imports are saved to the Pendum One server.
  • The camera is used to scan barcodes. Microphone access is turned off.
  • A few preferences, such as health sync settings, are kept on the device.
  • To delete your account, open Settings and choose Delete account. Your data on the Pendum One server is deleted first, then your sign-in.
Help / Support

Questions

For anything this summary does not answer, start with the support page.

Open support