Privacy Policy

LiftClub is operated by Shubham Sharma, an individual in Canada trading as LiftClub (“LiftClub”, “we”, “us”). Shubham Sharma is the controller of your personal data and the person responsible for protecting it, and can be reached at [email protected]. This policy explains what we collect when you use the LiftClub iPhone app and liftclubapp.com, how we collect it, why, who receives it, how long we keep it, and the choices you have.

In short

• Your training is saved on your iPhone first, then synced to our servers so it’s backed up and works on your other devices.
• Friends see your streak and workout totals. They never see your individual sets, the weight on each set, or your body weight.
• We don’t sell your data and we don’t show ads. The app has no advertising or cross-app tracking.
• LiftAI is off until you agree to it, and it never receives your name, email, birthday or body weight.
• You can delete your account in the app at any time.

How we collect data

• From you, when you create an account, go through onboarding, log training, post, share or contact us.
• Automatically, when you use the app: crash reports and security data (see “Device and diagnostics”).
• From others:
  • Apple or Google, if you sign in with them (your name and email, or Apple’s private relay address);
  • Apple, through RevenueCat, about your subscription;
  • other users, when they report you or your content, or send you a workout.

What we collect

Account and profile

• Name and email address. If you use Sign in with Apple or Sign in with Google, we receive the name and email they share with us. Apple may give us a private relay address instead of your real one. We also store the sign-in tokens they issue, so they can confirm it’s you.
• Handle and profile photo, if you set them. Friends features only.
• Birth date. We use it to decide which features you can use (see “Children and age”).
• Profile details you give in onboarding or settings:
  • gender, and which demonstration figure you want (Tom or Ashley);
  • height and goal;
  • training days and timezone;
  • reminder times, units and preferences.
• How you heard about LiftClub, including anything you type for “Other”, and whether you’ve used other workout apps.

Training

• Workout sessions: start and end time, duration, timezone, title and any note you add.
• What you log: exercises, sets, reps, weights, times and distances, plus the body weight applied to bodyweight exercises.
• Optional entries: body weight and one-rep max entries you choose to log.
• What you build: custom exercises (including any instructions you write), saved workouts and programs, and the programs you follow.
• Streak details: your streak, shields, training schedule, and statuses such as Injured, Recovering or On Vacation, with their dates.

Some of this, such as your body weight or an Injured status, may count as health information. We use it only to run LiftClub’s features for you, never for advertising or marketing, and we don’t share it with anyone except the service providers listed below and, if you choose to use it, LiftAI as described below. LiftClub doesn’t read from or write to Apple Health.

Friends and sharing (18+)

• Connections: friends, friend requests (including declined requests) and blocks.
• Posts: the workout summary (name, time, duration and total volume), your caption, and the share card image if you attach one.
• Activity: likes, in-app notifications, and workouts or programs you send or receive.
• Your published summary: what friends see (see “What other people can see”).
• Share links you create, which hold a copy of the workout or program.
• Reports:
  • reports you submit, including any note you write;
  • reports other people submit about you or your content.
• A push notification token, if you allow notifications about friends’ activity.

Purchases

• Apple processes all payments, and we never receive your card details.
• Our subscription provider, RevenueCat, tells us your subscription status, such as whether you’re on a trial and when Pro expires.
• We link that status to your LiftClub account ID.

LiftAI (Pro, 18+, opt-in)

LiftAI only runs after you agree to it on the screen that explains what is sent and to whom.

What’s sent when you use it. The app sends a summary of your training:

• your goal and training days;
• sets per muscle;
• sessions, volume and minutes for each of the last 8 weeks;
• findings such as a stalled lift or a new best, with its weight and reps;
• the names of your saved workouts and custom exercises, and your Up next workout.

It also sends:

• What you type: a note when building a workout, a change you ask for, or a question.
• For “Ask about this workout”: that workout’s exercises, sets, top weights and reps.

What’s never sent. LiftAI never receives your name, email, handle, birth date, photo, body weight, session notes, friends or location. Requests carry a scrambled ID in place of your account ID.

What we keep.

• Our server checks each answer before passing it to the app.
• It keeps a usage record (the action, the model, its cost and your credits), but not what you or LiftAI wrote.
• It holds each answer for 10 minutes, so a retry doesn’t cost you twice.
• Your LiftAI conversations and results are stored only on your iPhone. They’re cleared when you sign out or withdraw consent.

Automatic review. After you agree, the training review can run on its own, no more than once a week.

Our AI provider. It’s Google (Gemini API), in the United States. We use Google’s paid service: under its terms, Google keeps requests for up to 55 days to detect abuse, and doesn’t use them to improve its products or train its models.

Device and diagnostics

• Crash reports and diagnostics (Sentry).
  • What: errors, a sample of performance measurements, and short logs of what the app was doing (for example, that a session finished and how long it was).
  • Linked to: your account ID, but not your name or email.
  • Your messages: if you use Profile → Report an issue, Sentry receives the message you write.
• No product analytics. The app doesn’t send usage events to an analytics service, and there’s no screen recording. If that ever changes, we’ll update this policy first.
• Server and security data.
  • The IP address and device type for each sign-in session.
  • IP addresses for rate limiting.
  • A scrambled (hashed) copy of your email address, used to limit sign-in attempts.
  • Server logs.

Device permissions. We ask only for:

• Camera: to scan workout QR codes. Nothing is recorded or saved.
• Photos: to choose a profile picture through the iOS photo picker, and to add a share card to your library when you tap Save. LiftClub doesn’t read your photo library.
• Notifications.

We don’t access your location, contacts, microphone or the Health app, and we don’t use Apple’s advertising identifier.

How we use your data

• To run LiftClub:
  • log your training;
  • count your streak and shields;
  • sync and back up your data;
  • show your history and charts;
  • apply age limits;
  • manage Pro.
• For friends features: your feed, friend requests, likes, notifications and the streak leaderboard, plus delivering what you share or send.
• To send what you’ve asked for: your workout reminders, which are scheduled on your iPhone, push notifications about friends’ activity, and sign-in codes by email. We don’t send marketing emails.
• For LiftAI, when you’ve agreed and you use it.
• To keep LiftClub safe:
  • filtering offensive words;
  • reviewing reports;
  • enforcing our Community Guidelines;
  • preventing abuse and fraud.
• To fix bugs and improve the app, using crash reports.
• To answer you when you contact us.
• To meet legal obligations and to establish or defend legal claims.

We use your data only for the purpose we collected it for. If we want to use it for something new, we’ll ask you first where the law or Apple’s rules require it.

No automated decisions. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. The word filter and LiftAI’s suggestions don’t fall into that category: you can contact us about any refused text, and nothing LiftAI suggests takes effect without your tap.

Legal bases (EEA, UK and similar laws). We rely on:

• Performing our contract with you: running the app, syncing, friends features and Pro.
• Your consent:
  • LiftAI;
  • notifications;
  • any health information you choose to log, where the law treats it as special-category data. You can withdraw this consent by deleting those entries or your account.
• Our legitimate interests:
  • security and preventing abuse;
  • moderation;
  • crash reports, to keep the app working. You can object at any time (see “Your choices and rights”).
• Legal obligations, where they apply.

What other people can see

• People who aren’t your friends (when they look up your exact handle, or receive a friend request from you) see your first name and handle only.
• Friends you’ve accepted see:
  • your full name, handle and profile photo, and when you became friends;
  • your current and longest streak, and whether you’re paused (never the reason);
  • your number of sessions, time trained and total volume for this week, this year and all time;
  • the names, times and durations of your last 3 workouts;
  • the posts you share from the last 30 days, and your likes.
• Friends never see your individual sets, the weight on each set, your body weight, one-rep maxes, notes or timezone.
• Share cards on posts. Where share cards can be attached to posts and you attach one, friends see what’s on the card. That can include weights and personal bests if you leave them on.
• Private profile. If you turn on Private profile (Profile → Friends), friends see only your name, handle and photo, plus any posts you share.
• Share links.
  • Who can see them: anyone you give the link to, and anyone they pass it on to, on a web page, with no account needed.
  • What they show: workout or program names, exercises, sets, and reps or times. Never your weights, your notes or who shared it.
  • How long they last: links don’t expire until you tap Stop sharing. Turning a link off can take a few minutes everywhere, and people who saved a copy keep it.
• Sending to a friend shows them your name and handle.
• Share cards you export. If you share a card to Instagram Stories, LiftClub hands the image to the Instagram app through the iOS pasteboard. From then on, Instagram’s privacy policy applies. A card can show your name, photo and workout numbers. It shows your body weight only if you share your body-weight chart.

Who we share data with

We use service providers to run LiftClub. They process data on our behalf, only for the purposes above. We choose providers whose terms require them to keep your data confidential and secure, to use it only to provide their service to us, and to protect it at least as well as this policy does.

Other people. Friends, people with your share links and people you send workouts to see what “What other people can see” describes.

Other disclosures.

• We may disclose information if the law requires it, such as a valid court order, or where we believe in good faith that it’s needed to protect someone’s safety, to investigate abuse, or to enforce our Terms.
• If LiftClub is sold, reorganised or moved to a company we set up, your information may transfer as part of that, and this policy will continue to apply to it.

No sale and no ads. We don’t sell your personal information, we don’t share it for targeted or cross-context behavioral advertising, and we don’t let data brokers or ad networks receive it.

Where your data is stored

• On your iPhone, in the app’s private storage.
• On our servers, run by Cloudflare in eastern North America.
• With our providers, some of whom (including Sentry, RevenueCat and Google) process data in the United States.

LiftClub is run from Canada, so if you live outside the United States, your information is stored and processed in another country. While it is there, it’s subject to that country’s laws, and its courts, police and national security authorities may be able to access it.

If we transfer personal data out of the EEA, UK or Switzerland, we rely on the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses (and the UK addendum) or an adequacy decision.

How long we keep it

While your account is open, we keep your data so the app can show your history.

When you delete your account, we immediately delete from our live database:

• your account and profile;
• your training history;
• your posts and likes;
• your friends, friend requests, blocks and sends;
• your share links (which then stop working);
• reports you filed;
• your push tokens.

We also delete your profile photo and post images from storage, your record at RevenueCat, and LiftClub’s data on the iPhone you delete from. Any other iPhone that was signed in to your account is signed out of our servers, but keeps its own copy of your training until you sign out on it or delete the app there.

What’s kept after you delete your account:

• Reports about you: kept for 12 months from when each report was made, so we can deal with abuse and repeat offenders, then deleted.
• A deletion record of your account ID and deletion date: kept for 90 days, so a restore from backup can’t bring your account back.
• Backups: your data can remain in encrypted backups for up to 90 days, after which it’s overwritten.
• Security records: IP-based rate-limit records, and the scrambled email record used for sign-in limits (kept for up to 2 days).
• Crash data: linked to your account ID only. Sentry keeps crash reports for up to 90 days. Email us to have them deleted sooner.
• LiftAI spending totals: for each LiftAI request, the action, model, cost and date, with your account ID replaced by a random one, so they’re no longer tied to you. Nothing you or LiftAI wrote is kept. We keep them so our monthly AI spending limit stays accurate.
• Copies others have: anything you shared that someone else saved.
• What the law requires us to keep, if anything.

Things you delete in the app:

• Some items are marked as deleted rather than erased straight away. For example, a deleted workout keeps a record of its time, duration, title and note, and a deleted post’s image stays in storage.
• These are erased when you delete your account.
• Signing out leaves your training on that iPhone until you delete the app or your account.

Short-lived data:

• Sign-in codes expire after 5 minutes.
• LiftAI answers are held on our server for 10 minutes.

Your choices and rights

• Delete your account in Profile → Delete account, at the bottom of the page. For your security, you need to have signed in within the last day.
• Start over with Profile → Reset account, which erases your workouts, stats, streak, posts and share links, and the exercises, workouts and programs you made. Your account, handle and friends stay.
• See and correct your data in the app. Download a copy of your training data in Profile → Your data → Export your data; for a copy of anything else, email us.
• Make your profile private in Profile → Friends.
• Withdraw consent for LiftAI in Profile → LiftAI. LiftAI’s data on your phone is cleared when you do.
• Turn off reminders in Profile → Reminder, and notifications in iOS Settings.
• Stop sharing a link from the workout or program it belongs to.
• Block someone in the app. That removes the friendship and stops them finding or contacting you.
• Stop using Sign in with Apple with LiftClub in iPhone Settings → your name → Sign in with Apple.
• Crash reports. Email us to object, and we’ll delete your crash data.

Rights under your local law. Depending on where you live (for example the EEA, UK, Switzerland, California and other US states, Canada or Québec), you may have rights to:

• know what we hold about you, and get a copy of it in a portable format;
• correct it, or have it deleted;
• object to, or restrict, how we use it;
• withdraw consent at any time, without affecting what we did before;
• not be treated differently for using these rights.

Making a request. Email us from the address on your account so we can verify it’s you. Someone you authorise may make a request for you, with proof that you authorised them. We’ll respond within 30 days, or sooner where the law requires. If we refuse a request, we’ll tell you why, and you can appeal by replying to our answer.

Complaints. You can also complain to your local data protection authority. In Canada, that’s the Office of the Privacy Commissioner of Canada; in Québec, it’s the Commission d’accès à l’information. In the EEA and UK, it’s the supervisory authority where you live.

California and other US states. In the last 12 months we have collected the categories of data listed in “What we collect”: identifiers (name, email, account ID, IP address), customer records, characteristics such as age and gender, commercial information (subscription status), internet and app activity, approximate location, and fitness and health information you log. We collect them from the sources in “How we collect data”, for the purposes in “How we use your data”, and disclose them only to the providers in “Who we share data with”. We don’t sell or share personal information for cross-context behavioral advertising, and we use sensitive information only to provide the Service you ask for.

Children and age

• 13 and over only. LiftClub is for people aged 13 and over, or older where the law sets a higher age for using a service like this without a parent’s consent. If you give a birthday that makes you younger than 13, the app stops there. It deletes everything you entered (and the account, if one was already created), stops sending usage data from that phone, and won’t let anyone on that phone sign up.
• Friends features and LiftAI are 18+. Our server enforces this.
• Under-18 accounts can use the training features. They have no handle, they can’t add friends, and other people can’t find them.
• Children under 13. We don’t knowingly collect data from children under 13. If we learn we have, we’ll delete the account. If you believe a child has given us data, contact us and we’ll delete it.

Security

• All connections to our servers use HTTPS.
• LiftClub has no passwords. Sign-in codes:
  • are 6 digits;
  • are stored only in scrambled (hashed) form;
  • expire after 5 minutes;
  • allow a limited number of attempts.
• Your sign-in session is stored in the iOS Keychain.
• Every request to our server is limited to your own account’s data.
• Profile photos and post images are kept in private storage, and shown only through links that expire after an hour.
• Uploads are checked to be real images.
• Profile photos are re-encoded on your phone before upload, which removes location and camera details.
• We rate-limit sign-in and other requests.
• Your training database on your iPhone is kept in the app’s private storage but isn’t separately encrypted by LiftClub, so protect your phone with a passcode.
• No system is perfectly secure. If a breach affects your data and the law requires it, we’ll tell you and the authorities.

Our website

No analytics. liftclubapp.com doesn’t count visits or run analytics scripts, and it sets no advertising or tracking cookies.

Share-link pages. These are served by our app server. They run no scripts. If you use the report form on one, we receive your report and your IP address for rate limiting.

Changes to this policy

If we make material changes, we’ll update the date at the top and tell you in the app or by email before they take effect. If a change means we’d use data already collected in a new way, we’ll ask for your consent where the law requires it.

Contact

Questions or requests:

• Email: [email protected]