Privacy Policy

1. Who We Are

LiftLog is a mobile application that helps individuals log gym workouts, track progress, and connect with fitness practitioners (personal trainers, coaches). LiftLog is developed and operated by LiftLog, an independent app based in Canada ("we", "us", or "our").

If you have any questions about this policy, please contact us at logthelift@gmail.com.

2. Information We Collect

2a. Account Information

When you create a LiftLog account, we collect:

• Email address — used for authentication and account recovery.
• Password — stored as a secure hash; we never store your plain-text password.
• Username — a permanent, unique handle you choose at sign-up. Your username is visible to any practitioner (personal trainer or coach) you are connected with inside the app. Usernames cannot be changed after creation.
• Display name — an optional name shown on your profile, which you can update at any time. Your display name is searchable by other LiftLog users when they look for friends to connect with.
• Friend code — a short, randomly generated code (e.g. "AB3XY7") assigned to your account. Other LiftLog users can enter your friend code to send you a friend request. Your friend code is visible on your profile within the app.
• Profile photo — an optional photo you may upload to your profile.

2b. Workout and Fitness Data

When you use LiftLog, we store the following data in our secure cloud database so it is available across your devices:

• Workout logs — dates, exercises, sets, reps, weights, durations, and any notes you enter.
• Custom exercises — any exercises you create, including name, muscle group, equipment type, and optional demo photos or videos.
• Progress photos — photos you take or select to track physical progress over time.
• Body measurements — optional weight, body composition, and measurement entries.
• App preferences — your chosen color theme and display settings.

2c. Apple Health & Google Health Connect Data

If you grant permission, LiftLog reads the following health data from Apple Health (iOS) or Google Health Connect (Android):

• Heart rate — displayed as a live stat during active workouts; also used to show average and maximum heart rate on the Stats and Health screens.
• Resting heart rate — displayed on the Health screen as a daily metric.
• Step count — displayed on the Health screen as a daily and 7/30-day average.
• Active calories burned — displayed during workouts and on the Health screen.
• Distance (walking/running) — displayed on the Health screen as a daily metric.
• Heart rate variability (HRV) — displayed on the Health screen (iOS / Apple Watch only).
• VO2 max — displayed on the Health screen (iOS / Apple Watch Series 3+ only).
• Past workouts recorded by your wearable — imported and displayed on the Health screen so you can review wearable-tracked sessions alongside your LiftLog workouts.

None of this data is uploaded to our servers, stored in our database, or shared with any third party. It is read from your device's health store and displayed within the app only.

With your permission, LiftLog also writes completed workout summaries back to Apple Health or Google Health Connect so they appear in your device's health history and activity rings.

You can revoke Health permissions at any time from your device's Settings app (iOS: Settings → Privacy & Security → Health → LiftLog).

2d. Practitioner / Client Relationship

LiftLog supports a practitioner mode for personal trainers and coaches. If you are a client connected with a practitioner:

• Your practitioner can view your username, workout history, and any workout plans they have assigned to you.
• Your practitioner may upload exercise demonstration videos or photos that are visible to you within the app.
• Your practitioner cannot see your email address, password, progress photos, or any personal health data from Apple Health or Health Connect.

If you are a practitioner, exercise demo media you upload is stored securely in our cloud storage and is accessible only to you and the clients you are connected with.

2e. Push Notifications

If you grant permission, LiftLog uses push notifications to remind you of scheduled workouts or send updates from your practitioner. We use Expo's notification service to deliver these messages. Your push notification token is stored in our database and is used solely to deliver notifications from LiftLog. We do not use it for marketing or advertising purposes.

You can disable push notifications at any time from your device's Settings app or within the app.

2f. In-App Purchases & Subscriptions

LiftLog offers optional subscription plans for practitioner accounts. Payments are processed through Apple's App Store or Google Play's billing system. We do not collect or store your payment card details — these are handled entirely by Apple or Google. We receive only a confirmation of your subscription status to unlock premium features.

2g. Crash Reports

To help us identify and fix bugs, LiftLog uses Sentry. When the app crashes or encounters an unexpected error, an anonymous crash report is sent to Sentry containing:

• The type of error and the line of code where it occurred.
• Your device type and operating system version (e.g., "iPhone 15, iOS 17.4") for mobile, or your browser name and version for web.
• The app version number.

Crash reports do not contain your workout data, health data, notes, or any personal information. Crash reporting is disabled in development builds and only active in production builds — including the App Store / Google Play mobile builds and the LiftLog web app at logthelift.ca. Sentry's privacy policy is available at sentry.io/privacy.

2h. IP Addresses

Our infrastructure providers (Supabase and Vercel) automatically log IP addresses as part of standard server operation for security, rate-limiting, and abuse prevention. These logs are not linked to your LiftLog account and are retained in accordance with each provider's data retention policy.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the LiftLog app and its features.
• Sync your workout data across your devices.
• Enable the practitioner-client connection and workout plan features.
• Send push notifications you have consented to receive.
• Manage your subscription and unlock premium features.
• Diagnose and fix technical issues using anonymous crash reports.
• Respond to your support requests.

We do not use your data to serve advertising, build behavioral profiles, or sell to third parties.

4. How We Store and Protect Your Data

Your account and workout data is stored in a secure cloud database provided by Supabase. All data is encrypted in transit (TLS) and at rest. Access to your data is restricted by row-level security policies — you can only read and write your own records.

Supabase infrastructure is hosted on Amazon Web Services (AWS) in the United States. By using LiftLog, you acknowledge that your data may be transferred to and stored in the United States. Please be aware that data protection laws in the United States may differ from those in Canada and other countries, and your personal information may be subject to access by US governmental authorities under applicable US law.

Profile photos, progress photos, and exercise demo media are stored in secure cloud storage. Files are not publicly accessible — access requires a time-limited signed URL generated by our server.

We retain your data for as long as your account is active. When you delete your account, your data is permanently removed from our database and storage within 30 days.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Supabase — our cloud database and storage provider. Data is processed under Supabase's data processing agreement. Privacy Policy.
• Sentry — anonymous crash reporting only. Privacy Policy.
• Resend — email delivery service used to send invitation and system emails. Your email address is processed by Resend only when an email is sent to you. Privacy Policy.
• Expo — the framework used to build the app, including push notification delivery. Privacy Policy.
• Apple / Google — payment processing for subscriptions and health data integration (HealthKit / Health Connect). Subject to their respective privacy policies.
• Legal requirements — if required by law, court order, or governmental authority.

No advertising networks, analytics platforms, or data brokers are used.

6. Your Rights & Data Control

You are in control of your data. You can:

• Update your profile — change your display name, profile photo, or notification preferences at any time from the app's Settings screen.
• Delete individual data — delete specific workouts, progress photos, or custom exercises at any time.
• Delete your account — permanently delete your account and all associated data from Settings → Account → Delete Account. This action is irreversible.
• Revoke Health permissions — remove LiftLog's access to Apple Health or Google Health Connect at any time from your device's Settings app.
• Disable push notifications — turn off notifications at any time from your device's Settings app or within the app.
• Request your data — contact us at logthelift@gmail.com to request a copy of all data we hold about you. We will respond to data access requests within 30 days.
• Request a username correction — usernames are permanent by design to preserve workout history integrity, but if you need a correction due to an error at sign-up, contact us and we will review your request on a case-by-case basis.

If you are located in the European Economic Area (EEA), United Kingdom, or Canada, you may have additional rights under applicable data protection laws, including the right to access, correct, or restrict processing of your personal data. Contact us to exercise any of these rights.

7. Children's Privacy

LiftLog is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, please contact us and we will take steps to remove it promptly.

8. Apple HealthKit — Additional Disclosures

In accordance with Apple's requirements:

• LiftLog does not use HealthKit data for advertising or similar commercial purposes.
• LiftLog does not disclose HealthKit data to third parties without user permission, except as required to provide the service (e.g., writing a workout summary to HealthKit itself).
• HealthKit data is never uploaded to our servers or shared with any external party.
• Users can revoke HealthKit access at any time from iOS Settings → Privacy & Security → Health.

9. Data Retention

We retain your personal data for as long as your account is active. Specifically:

• Account and profile data — kept until you delete your account.
• Workout logs, exercise history, and body metrics — kept until you delete your account or delete individual records within the app.
• Progress photos — kept until you delete your account or remove individual photos from the app.
• Coaching relationship data (if you are connected to a practitioner) — kept until the relationship is ended or your account is deleted.
• Crash and error reports (Sentry) — retained by Sentry for 90 days by default.
• Email delivery logs (Resend) — retained by Resend per their data retention policy.

When you delete your account, all data associated with your account is permanently removed from our systems. You can delete your account at any time from the app's Settings screen. To request manual deletion, contact us at logthelift@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify users through an in-app notice. Continued use of LiftLog after changes constitutes acceptance of the updated policy.