Privacy Policy

Introduction

Liftly ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.

Information We Collect

Information You Provide

Account Information: Email address and authentication data when you create an account
Profile Data: Personal fitness information collected during onboarding (age, gender, fitness goals, experience level)
Workout Data: Exercise logs, workout sessions, sets, reps, weights, and training notes
Body Measurements: Height, weight, and other physical measurements you choose to track
Progress Photos: Photos you take and store for tracking physical progress
Voice Data: Audio recordings when using voice logging features (processed locally and via OpenAI's Whisper API)

Apple Health (HealthKit)

On iOS, Liftly can optionally read sleep analysis, heart rate variability, resting heart rate, step count, and active energy data from Apple Health to personalise your recovery recommendations. This data is read on-device only and is never uploaded to our servers or shared with third parties. Liftly does not write any data back to Apple Health. You can grant or revoke these permissions at any time in iOS Settings → Privacy & Security → Health.

Automatically Collected Information

Usage Data: How you interact with the app, features used, and app performance data
Device Information: Device type, operating system, and app version
Technical Data: Error logs and crash reports to improve app functionality

How We Use Your Information

We use your information to:

Provide and maintain our fitness tracking services
Personalize your workout experience and recommendations
Process voice commands and convert speech to text
Sync your data across your devices
Improve our app and develop new features
Provide customer support
Send important updates about our service

Data Storage and Security

Cloud Storage: Your data is securely stored using Supabase (a secure, GDPR-compliant database service)
Encryption: All data is encrypted in transit and at rest
Access Control: Only you can access your personal fitness data
Data Retention: We retain your data as long as your account is active or as needed to provide services

Third-Party Services

We use the following third-party services:

Supabase: For secure data storage and user authentication
OpenAI Whisper: For voice-to-text conversion (audio recordings are processed using AI and are not stored permanently)
Apple Sign In: For authentication (when using Apple Sign In)
Superwall: For subscription management and paywall presentation

Voice Data Processing

When you use voice logging features, your voice recordings are:

Processed using OpenAI's Whisper API to convert speech to text
NOT stored permanently on our servers or OpenAI's servers
Only the transcribed text (exercise data) is saved to your account
Processed securely with encryption during transmission

Your Data Rights

You have the right to:

Access: View all data we have about you
Export: Download your data in a portable format
Delete: Request deletion of your account and all associated data
Correct: Update or correct your personal information
Withdraw Consent: Stop using features that require data processing

Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except:

With your explicit consent
To comply with legal obligations
To protect our rights and safety

Children's Privacy

Our app is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us through the app settings or at folke.bernroth@icloud.com.