Legal · Last updated 30 August 2026

Privacy policy

LiftHard handles health and fitness information, which deserves stricter treatment than ordinary app data. This page explains what we collect, why, where it lives, and how to get rid of it.

1. Who this covers

This policy applies to the LiftHard mobile app on iOS and Android and to this website. It describes the practices of LiftHard ("we", "us") as the controller of your personal data.

2. Data we collect

CategoryExamples
AccountEmail address, display name, hashed password or third-party sign-in identifier. Optional — the app can be used without an account.
Training profileGoal, experience level, training days, available equipment, exercises you exclude.
Body metricsHeight, weight, age, sex, and optional body measurements you enter yourself.
Workout activityExercises, sets, reps, loads, rest durations, session dates, perceived exertion, notes.
Device & diagnosticsDevice model, OS version, app version, crash reports, anonymous feature-usage counts.
SupportMessages you send us and any information you choose to include in them.

We do not collect precise location, contacts, photos, or advertising identifiers. LiftHard contains no advertising SDKs and no cross-app tracking.

3. Health & fitness data

Body metrics, workout activity and any wellbeing figures you record are treated as special-category health data under the GDPR and as sensitive health information under comparable laws. We process it only on the basis of your explicit consent, given when you enter it or connect a health platform, and only for the purposes in section 4.

What we never do with health data: sell it, rent it, share it with advertisers or data brokers, use it to build advertising profiles, or use it to train third-party models.

Withdrawing consent is a single toggle in Settings → Privacy, and it stops all cloud processing of health data immediately.

4. How we use it

  • Generating and adjusting your plan — your profile and logged sets drive the progression logic that sets next session's targets.
  • Showing your progress — charts, volume by muscle group, streaks and personal records are computed from your own history.
  • Syncing across your devices — only when you have an account and sync enabled.
  • Keeping the app working — aggregated, non-identifying diagnostics to find crashes and performance problems.
  • Answering support requests — we read the workout data you reference so we can reproduce an issue.

We do not perform automated decision-making with legal effects, and we do not profile you for marketing.

5. Storage & retention

Training data is written to the device first, so the app works offline. If sync is on, an encrypted copy is stored on our servers in [hosting region] with our infrastructure provider.

  • Active accounts: training history is kept for as long as your account exists, because progression depends on it.
  • Deleted accounts: all personal and health data is erased from production systems within 30 days and from encrypted backups within 90 days.
  • Diagnostics: retained up to 12 months in aggregated form.
  • Support email: retained 24 months, then deleted.

Uninstalling the app removes on-device data. It does not delete a synced account — use Settings → Account → Delete account for that.

6. Sharing & processors

We share data only with processors that are contractually bound to our instructions, bound to confidentiality, and prohibited from using your data for their own purposes:

  • Cloud hosting and database — [provider], storage and sync.
  • Crash and performance reporting — [provider], diagnostics only, no health data.
  • Payment processing — Apple App Store or Google Play for Pro subscriptions. We never receive your card details.
  • Email delivery — [provider], for account and support mail.

We may disclose data where legally compelled, and we will notify you unless prohibited from doing so. If LiftHard is ever acquired, your data transfers under this same policy and you will be told before anything changes. International transfers rely on Standard Contractual Clauses or an adequacy decision.

7. Health platform integrations

You may optionally connect Apple Health or Google Health Connect. If you do:

  • We read only the data types you grant, such as body weight and workout sessions.
  • We write back completed LiftHard workouts if you enable that permission.
  • Data obtained through these platforms is never used for advertising or shared with third parties, in line with Apple's and Google's health data policies.
  • Revoking permission in your system settings stops the exchange at once; previously imported values remain in your LiftHard history until you delete them.

8. Security

  • TLS 1.2+ for all data in transit; encryption at rest for stored data and backups.
  • Passwords hashed with a modern memory-hard algorithm; we never store them in readable form.
  • Least-privilege internal access, audit logging, and no production health data in test environments.
  • Notification to you and the relevant supervisory authority within 72 hours of a qualifying breach.

No system is perfectly secure. Use a strong, unique password and your device lock screen.

9. Your rights & controls

Depending on where you live, you can request access, correction, deletion, a portable export, restriction or objection, and you can withdraw consent at any time. Residents of California may additionally request disclosure of categories collected and opt out of "sharing" — we do not sell or share personal information as those terms are defined.

In the app: Settings → Privacy holds sync and consent toggles, Export data produces a machine-readable JSON or CSV file, and Delete account is immediate and irreversible. Or email [email protected] and we respond within 30 days. You may also complain to your local data protection authority.

10. Children

LiftHard is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

11. Changes & contact

Material changes are announced in the app and by email at least 14 days before they take effect, and the date at the top of this page is updated. Continuing to use LiftHard after that date means you accept the revised policy.

Privacy contact: [email protected]
Support: [email protected]