Privacy Policy

1. Who We Are

LiftLog is a mobile application that helps individuals log gym workouts, track progress, and connect with fitness practitioners (personal trainers, coaches). LiftLog is operated by the LiftLog team ("we", "us", or "our").

If you have any questions about this policy, please contact us at logthelift@gmail.com.

2. Information We Collect

2a. Account Information

When you create a LiftLog account, we collect:

• Email address — used for authentication and account recovery.
• Password — stored as a secure hash; we never store your plain-text password.
• Username — a permanent, unique handle you choose at sign-up. Your username is visible to any practitioner (personal trainer or coach) you are connected with inside the app. Usernames cannot be changed after creation.
• Display name — an optional name shown on your profile, which you can update at any time.
• Profile photo — an optional photo you may upload to your profile.

2b. Workout and Fitness Data

When you use LiftLog, we store the following data in our secure cloud database so it is available across your devices:

• Workout logs — dates, exercises, sets, reps, weights, durations, and any notes you enter.
• Custom exercises — any exercises you create, including name, muscle group, equipment type, and optional demo photos or videos.
• Progress photos — photos you take or select to track physical progress over time.
• Body measurements — optional weight, body composition, and measurement entries.
• App preferences — your chosen color theme and display settings.

2c. Apple Health & Google Health Connect Data

If you grant permission, LiftLog may read the following health data from Apple Health (iOS) or Google Health Connect (Android) during an active workout session only:

• Heart rate
• Step count
• Active calories burned

This data is displayed as live stats on-screen during your workout. It is never uploaded to our servers, stored in our database, or shared with any third party. It is used only within the app in real time.

With your permission, LiftLog may also write completed workout summaries to Apple Health or Google Health Connect so they appear in your device's health history and activity rings. We do not read this data back from Health — it is a one-way write at the end of each workout.

You can revoke Health permissions at any time from your device's Settings app.

2d. Practitioner / Client Relationship

LiftLog supports a practitioner mode for personal trainers and coaches. If you are a client connected with a practitioner:

• Your practitioner can view your username, workout history, and any workout plans they have assigned to you.
• Your practitioner may upload exercise demonstration videos or photos that are visible to you within the app.
• Your practitioner cannot see your email address, password, progress photos, or any personal health data from Apple Health or Health Connect.

If you are a practitioner, exercise demo media you upload is stored securely in our cloud storage and is accessible only to you and the clients you are connected with.

2e. Push Notifications

If you grant permission, LiftLog uses push notifications to remind you of scheduled workouts or send updates from your practitioner. We use Expo's notification service to deliver these messages. Your push notification token is stored in our database and is used solely to deliver notifications from LiftLog. We do not use it for marketing or advertising purposes.

You can disable push notifications at any time from your device's Settings app or within the app.

2f. In-App Purchases & Subscriptions

LiftLog offers optional subscription plans for practitioner accounts. Payments are processed through Apple's App Store or Google Play's billing system. We do not collect or store your payment card details — these are handled entirely by Apple or Google. We receive only a confirmation of your subscription status to unlock premium features.

2g. Crash Reports

To help us identify and fix bugs, LiftLog uses Sentry. When the app crashes or encounters an unexpected error, an anonymous crash report is sent to Sentry containing:

• The type of error and the line of code where it occurred.
• Your device type and operating system version (e.g., "iPhone 15, iOS 17.4").
• The app version number.

Crash reports do not contain your workout data, health data, notes, or any personal information. Crash reporting is disabled in development builds and only active in production (App Store / Google Play) builds. Sentry's privacy policy is available at sentry.io/privacy.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the LiftLog app and its features.
• Sync your workout data across your devices.
• Enable the practitioner-client connection and workout plan features.
• Send push notifications you have consented to receive.
• Manage your subscription and unlock premium features.
• Diagnose and fix technical issues using anonymous crash reports.
• Respond to your support requests.

We do not use your data to serve advertising, build behavioral profiles, or sell to third parties.

4. How We Store and Protect Your Data

Your account and workout data is stored in a secure cloud database provided by Supabase. All data is encrypted in transit (TLS) and at rest. Access to your data is restricted by row-level security policies — you can only read and write your own records.

Profile photos, progress photos, and exercise demo media are stored in secure cloud storage. Files are not publicly accessible — access requires a time-limited signed URL generated by our server.

We retain your data for as long as your account is active. When you delete your account, your data is permanently removed from our database and storage within 30 days.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Supabase — our cloud database and storage provider. Data is processed under Supabase's data processing agreement. Privacy Policy.
• Sentry — anonymous crash reporting only. Privacy Policy.
• Expo — the framework used to build the app, including push notification delivery. Privacy Policy.
• Apple / Google — payment processing for subscriptions and health data integration (HealthKit / Health Connect). Subject to their respective privacy policies.
• Legal requirements — if required by law, court order, or governmental authority.

No advertising networks, analytics platforms, or data brokers are used.

6. Your Rights & Data Control

You are in control of your data. You can:

• Update your profile — change your display name, profile photo, or notification preferences at any time from the app's Settings screen.
• Delete individual data — delete specific workouts, progress photos, or custom exercises at any time.
• Delete your account — permanently delete your account and all associated data from Settings → Account → Delete Account. This action is irreversible.
• Revoke Health permissions — remove LiftLog's access to Apple Health or Google Health Connect at any time from your device's Settings app.
• Disable push notifications — turn off notifications at any time from your device's Settings app or within the app.
• Request your data — contact us at logthelift@gmail.com to request a copy of all data we hold about you.

If you are located in the European Economic Area (EEA), United Kingdom, or Canada, you may have additional rights under applicable data protection laws, including the right to access, correct, or restrict processing of your personal data. Contact us to exercise any of these rights.

7. Children's Privacy

LiftLog is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, please contact us and we will take steps to remove it promptly.

8. Apple HealthKit — Additional Disclosures

In accordance with Apple's requirements:

• LiftLog does not use HealthKit data for advertising or similar commercial purposes.
• LiftLog does not disclose HealthKit data to third parties without user permission, except as required to provide the service (e.g., writing a workout summary to HealthKit itself).
• HealthKit data is never uploaded to our servers or shared with any external party.
• Users can revoke HealthKit access at any time from iOS Settings → Privacy & Security → Health.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify users through an in-app notice. Continued use of LiftLog after changes constitutes acceptance of the updated policy.