Privacy Policy

Introduction

Liftly ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Liftly mobile application.

Liftly is operated from Sweden by Kvilt Apps, which acts as the data controller for the personal data described in this policy. You can reach us using the contact details at the end of this policy.

Information We Collect

Information You Provide

Account Information: Email address, authentication identifiers, and account settings.
Profile Data: Name, age or birth date, gender, units, fitness goals, training experience, training style and focus preferences, workout frequency, and preferences you choose during onboarding or settings.
Workout Data: Exercises, routines, programs, workout sessions, sets, reps, weights, durations, notes, rankings, streaks, progress metrics, and import history.
Body and Measurement Data: Height, weight, body measurements, measurement goals, body-analysis results, and related progress information you choose to add.
Nutrition Data: Meals you log, food photos you capture or select for analysis, nutrition targets, and related dietary information you choose to add.
Progress Photos and Camera Data: Photos you capture or select for progress tracking, body analysis, sharing, or social features.
Voice Data: Audio recordings or transcripts when you use voice workout logging.
Social and Group Data: Profile details, posts, comments, groups, challenges, events, invitations, and shared workout content when you use social features.
Feedback and Support Data: Messages, feedback, diagnostics, and contact details you send through support or feedback flows.

Automatically Collected Information

Usage Data: Feature usage, app interactions, paywall events, subscription state, free-tier counters, and in-app notification interactions.
Device and App Data: Device type, operating system, app version, language/locale, push notification token, and basic technical identifiers.
Diagnostics: Error logs, crash information, performance data, and troubleshooting details.

Permissions and Platform Data

Microphone and Speech Recognition: Used only when you start voice logging so Liftly can transcribe workout details.
Camera and Photos: Used only when you choose to capture or select progress photos, body photos, meal photos, or shareable workout images.
Notifications: Used for workout reminders, timers, streaks, subscription/trial notices, and app updates when enabled.
Apple Health: On iOS, Liftly can optionally read selected Apple Health data such as sleep, heart rate variability, resting heart rate, steps, and active energy to personalize recovery insights. Health access is optional and can be changed in iOS Settings. Apple Health data is never used for advertising or marketing, is never sold, and is never shared with third parties for their own purposes.

How We Use Your Information

We use your information to:

Provide workout logging, routines, programs, measurements, nutrition tracking, rankings, recovery insights, AI coaching, imports, and progress tracking.
Personalize recommendations, analytics, onboarding, reminders, and app content.
Process voice logs, body photos, meal photos, exercise analysis, routine and program generation, and AI chat requests.
Sync data across devices and secure your account.
Enforce subscription entitlements, free-tier limits, and billing-related access.
Send notifications you request or enable.
Improve reliability, safety, customer support, fraud prevention, and app performance.
Comply with legal obligations and platform policy requirements.

Legal Bases for Processing (GDPR)

Where the EU/EEA General Data Protection Regulation applies, we process your personal data on these legal bases:

Performance of a contract: Providing the app features you use — accounts, sync, workout logging, subscriptions.
Consent: Health and body-related data (measurements, body photos, body analysis, nutrition data, Apple Health data), voice recordings, and notifications. Health-related data is processed only with your explicit consent, which you can withdraw at any time by removing the data, disabling the feature, or deleting your account.
Legitimate interests: App analytics, diagnostics, security, and fraud prevention, balanced against your rights and freedoms.
Legal obligation: Where we must retain or disclose information to comply with law.

Third-Party Services

Liftly uses third-party providers to operate the app:

Lovable Cloud: Authentication, database, storage, server functions, and synchronization.
OpenAI: AI chat, workout analysis, routine and program generation, body-analysis assistance, nutrition/meal-photo analysis, exercise normalization, and voice transcription. Audio and photos may be sent to OpenAI only when you use the relevant AI feature. We do not permit OpenAI to use your data to train their models.
PostHog: Product analytics that help us understand feature usage and improve the app.
Superwall and Google Play Billing / App Store: Paywall presentation, subscription status, trials, purchases, and restore flows.
Apple Sign In and Google Sign-In: Optional authentication providers.
Expo services: App build, push notification, and platform services where applicable.

International Data Transfers

Some of our providers process data outside the EU/EEA, including in the United States. Where personal data is transferred internationally, we rely on safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses offered by those providers.

Data Storage and Security

Data is stored with access controls designed so users can access only their own private account data unless they intentionally share content.
Data is encrypted in transit. Provider-managed storage and database systems use industry-standard security controls.
Progress photos and other uploaded media are stored in protected storage buckets where access is controlled by app policy.
Voice recordings are used to produce workout transcripts and are not intended to be stored permanently after processing.

Data Sharing

We do not sell your personal information. We share data only:

With service providers needed to run Liftly.
When you choose to share content through social, group, invite, or export features.
To process subscriptions, purchases, entitlement checks, and fraud prevention.
To comply with law, enforce our terms, protect users, or protect app security.

Data Retention and Deletion

We keep account data while your account is active or as needed to provide Liftly. You can request account deletion in the app settings. Deleting your account removes app account data we control, subject to legal, security, backup, and fraud-prevention retention needs. Deleting your account does not automatically cancel an active app-store subscription; manage subscriptions through Google Play or the App Store.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, export, delete, or restrict use of your personal data, and to object to processing based on legitimate interests. You can change app permissions in device settings, update notification preferences in Liftly, delete many items in the app, or contact us for help.

If you are in the EU/EEA, you also have the right to lodge a complaint with a data protection supervisory authority — in Sweden, the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) — or with the authority in your country of residence.

Children's Privacy

Liftly is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and make the current policy available in the app. For material changes, we will ask you to review and accept the updated policy in the app.

Contact Us

If you have questions about this Privacy Policy or your data, contact us through the app settings or at folke.bernroth@icloud.com.