Privacy Policy

Effective Date: February 24, 2026

1. Information We Collect

1.1 Account Information

When you sign in using Apple Sign-In, we collect:

• Full name (as provided by Apple)
• Email address (as provided by Apple)

1.2 Profile Information

You may voluntarily provide:

• Date of birth
• Height and weight
• Gender
• Activity level
• Fitness goals
• Goal weight
• Profile photo

1.3 Fitness & Workout Data

• Workouts created (exercises, sets, reps, weight)
• Completed workout sessions (duration, volume, personal records)
• Workout schedules
• Rest timer preferences

1.4 Nutrition Data

• Food entries (meals, calories, protein, carbs, fat)
• Meal plans
• Custom nutrition goals
• Food images submitted for AI analysis

1.5 Wellness Data

• Journal entries
• Mood check-ins
• Breathing session history

1.6 Progress Data

• Progress photos (with optional notes)
• Body weight history

1.7 Health Data (Apple HealthKit)

With your explicit permission, we may read and write:

• Workout activity data
• Dietary energy, protein, carbohydrates, and fat
• Body weight/mass

HealthKit data is never sold, shared with third parties for advertising, or used for purposes other than improving your experience within the app. You can enable or disable HealthKit sync at any time in Settings.

1.8 Trainer-Client Data

If you use the trainer or client features:

• Trainer-client relationship identifiers
• Chat messages between trainer and client
• Assigned workouts
• Progress photos explicitly shared with your trainer
• Body weight history, food entries, and workout sessions (visible to your assigned trainer)

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the app's core features (workout tracking, nutrition logging, progress tracking)
• Generate personalized AI workout programs and meal plans
• Analyze food images to estimate nutritional content
• Provide AI coaching responses
• Sync your data across your devices
• Enable communication between trainers and clients
• Sync fitness and nutrition data with Apple Health (when enabled)
• Deliver push notifications (workout reminders, trainer messages)
• Process subscriptions and in-app purchases

3. Third-Party Services

Liftor uses the following third-party services to operate:

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies:

• Firebase Privacy Policy
• OpenAI Privacy Policy
• RevenueCat Privacy Policy

4. AI-Powered Features

Liftor uses OpenAI's API to provide AI coaching, workout generation, meal planning, and food image analysis. When you use these features:

• Relevant personal data (name, weight, height, goals, recent workout/nutrition history) is sent to OpenAI to generate personalized responses.
• Food images submitted for analysis are sent to OpenAI for nutritional estimation.
• AI conversations are stored in our database to maintain chat history.
• We do not use your data to train AI models. OpenAI's API data usage is governed by their API data usage policy.

5. Data Storage and Security

• Cloud Storage: Your data is stored on Google Firebase servers. Firebase provides encryption at rest and in transit.
• Local Storage: Data is also cached locally on your device using SwiftData for offline access.
• Authentication: Sign-in is handled securely through Apple Sign-In with OAuth 2.0 and cryptographic nonce validation.
• Photos: Progress photos are stored in Firebase Cloud Storage. Photos are only accessible to you and, if you choose, your assigned trainer.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

Your data may be shared in the following limited circumstances:

• With your trainer: If you connect with a trainer, they can view your body weight, food entries, meal plans, workout sessions, and progress photos you explicitly mark as shared.
• With third-party services: As described in Section 3, solely to provide app functionality.
• Legal requirements: If required by law, regulation, or legal process.

Your trainer cannot access: journal entries, breathing sessions, mood data, or any notes not explicitly shared.

7. Analytics and Tracking

Liftor does not use third-party analytics or advertising SDKs. We do not track your behavior for advertising purposes. Firebase Analytics is disabled.

8. Apple HealthKit

In compliance with Apple's guidelines:

• HealthKit data is used solely to display health and fitness information within the app and to sync your workout and nutrition data.
• HealthKit data is never used for advertising, marketing, or data mining.
• HealthKit data is never sold to third parties.
• HealthKit data is never shared with third parties without your explicit consent.
• You may revoke HealthKit access at any time through iOS Settings > Health > Data Access.

9. Push Notifications

We use push notifications to deliver:

• Workout and meal reminders (configured by you)
• Trainer messages and workout assignments

You can manage notification preferences in the app's Settings or through iOS Settings.

10. Children's Privacy

Liftor is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information.

11. Your Rights and Choices

You have the right to:

• Access your data: View all your data within the app.
• Export your data: Export your workout data from Settings.
• Delete your data: Delete all your data or your entire account from Settings. This removes your data from Firebase Authentication and Cloud Firestore.
• Control sharing: Choose whether to share progress photos with your trainer.
• Manage HealthKit: Enable or disable HealthKit sync at any time.
• Manage notifications: Configure or disable push notifications.

12. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your authentication credentials are removed from Firebase Authentication.
• Your user data is removed from Cloud Firestore.
• Progress photos are removed from Cloud Storage.
• Locally cached data remains on your device until you uninstall the app.

13. International Data Transfers

Your data is processed and stored on servers operated by Google (Firebase) and may be transferred to and maintained on servers located outside your country of residence. By using the app, you consent to such transfers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Effective Date" at the top of this policy. Continued use of the app after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at:

Email: marek.zacik@maradlo.sk