Legal
Privacy Policy
LiftBuddy is a weightlifting and nutrition app. To do its job it needs to know a fair amount about your body and your training, and some of that is sensitive. This page explains what we collect, why we need it, who else touches it, and how to get it back or get rid of it.
1. Who we are
LiftBuddy is operated by LiftBuddy Incorporated, a company registered in the United States. In this policy "we", "us" and "LiftBuddy" mean LiftBuddy Incorporated, and we are the controller of the personal data described here.
For anything in this policy, including requests about your data, email support@liftbuddyapp.com.
2. What we collect
Most of this comes directly from you as you set up and use the app. The technical and advertising categories are collected automatically.
| Account | Email address, name, and either a password (stored only as a salted hash, never in readable form) or an identifier from Sign in with Apple or Google. Profile photo if you set one. |
|---|---|
| Body and goals | Date of birth, gender, height, starting weight, current weight, goal weight, body fat level, activity level and your training goal. LiftBuddy cannot calculate calorie or macro targets without these. |
| Training | Workouts, exercises, sets, reps, loads, how hard sets felt (RPE), rest times, personal records, exercise preferences and notes, equipment access and your program history. |
| Nutrition | Food and drink you log, servings, saved recipes and meals, barcodes you scan, water intake and your calculated energy expenditure. |
| Wellbeing | Mood, sleep quality, stress and energy levels, and muscle fatigue, where you choose to log them. |
| Health app data | Only if you connect Apple Health. See section 3. |
| Location | A location and postal code you enter, and an approximate city, state and country derived from your IP address. We do not track your precise location in the background. |
| Device and technical | IP address, device type and operating system, app version, user agent, time zone, and crash and performance diagnostics. |
| Advertising identifiers | Advertising and install-attribution identifiers, and whether you allowed tracking when iOS asked. If you decline, we do not use these to build an advertising profile. |
| Notifications | A push token, so we can send the reminders you turn on. It identifies your device installation, not you personally. |
| Support | Whatever you put in an email to us, and any reason you give when you delete your account. |
Session recording
LiftBuddy uses a session-replay tool to record how people move through the app — screens visited, taps and scrolls — so we can find where it is confusing or broken. We use these recordings to improve the app, not to identify individuals. If you would rather not be recorded, email us and we will exclude your account.
3. Apple Health data
Connecting Apple Health is optional and off until you turn it on. You can disconnect at any time in the app, or revoke access per data type in iOS Settings, and LiftBuddy will keep working without it.
What we use is a small set: steps, workouts and exercise time, active and resting energy, heart rate, body measurements such as weight and height, sleep, and dietary energy and macronutrients. We may write workouts and nutrition you log in LiftBuddy back to Apple Health so your other apps stay in sync.
We never use Apple Health data for advertising or marketing, never sell it, and never share it with data brokers. We do not use it to make decisions about you beyond adjusting your own training and nutrition targets.
Being straight with you about scope. The current iPhone build asks iOS for permission to a much wider list of Health categories than the app uses, including clinical ones it has no need for. We are narrowing that request to the list above in an upcoming release. iOS only ever grants what you approve, so you can decline anything on that screen — including all of it — and LiftBuddy will still work.
4. Why we use it
- To provide the app. Building your program, calculating calorie and macro targets, adjusting sets during a workout and running weekly check-ins. This is the core of the service and we cannot deliver it without the account, body, training and nutrition data above.
- To keep it working. Diagnosing crashes, fixing bugs, monitoring performance and preventing abuse.
- To communicate with you. Account email, password resets, and the reminders and notifications you switch on.
- To improve the product. Understanding which features get used, in aggregate, and where people get stuck.
- To measure our marketing. Understanding which campaigns lead to installs. You can opt out of this on iOS.
- To meet legal obligations and to establish or defend legal claims.
If you are in the UK, EU or another region with similar law, our lawful bases are: performing our contract with you (providing the app); legitimate interests (security, product improvement, defending claims); consent (Health data, push notifications, tracking for advertising and marketing email), which you can withdraw at any time; and legal obligation. Health and fitness information is special category data and we process it on the basis of your explicit consent.
5. Who we share it with
We do not sell your personal information. We share it with service providers who process it on our instructions, and only as needed:
| Hosting and infrastructure | Vercel (application hosting), Neon (database), Upstash (caching and scheduled jobs), Backblaze (media storage). |
|---|---|
| Diagnostics | Sentry (error and performance monitoring), Google Firebase (analytics, crash reporting, push notifications), Smartlook (session replay). |
| Resend (account and transactional email), Mailchimp (marketing email, where you have opted in). | |
| Attribution and advertising | Adjust, AppsFlyer and Meta, to measure app installs and campaign performance. Subject to your iOS tracking choice. |
| Accounts | Apple and Google, for Sign in with Apple and Google Sign-In; RevenueCat, for managing what your account is entitled to. |
We may also disclose information if the law requires it, to enforce our terms, to protect someone's safety, or as part of a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.
6. How long we keep it
We keep your account and training history for as long as your account exists, because the history is the point — progression, personal records and weight trends only mean something over time.
When you delete your account — from inside the app, or by asking us — your user record is deleted, and everything attached to it goes with it: your workouts, sets and personal records, your food logs and saved recipes, your weight history, your wellbeing entries, and any Apple Health data we had stored.
We keep one small record that the deletion happened, containing only your email address, which sign-in method you used, the reason you gave if you gave one, and the date. We do not keep your name, your profile photo, or your password. That record exists so we can answer you if you get in touch about the deletion afterwards.
Two things outlast that, briefly and for ordinary operational reasons: encrypted database backups roll off on their own cycle rather than being edited, and diagnostic logs held by our providers expire on their own retention schedules.
7. Your rights and choices
You can, at any time:
- Delete your account and data from inside the app, or by emailing us.
- Get a copy of your data, or ask us to correct anything wrong, by emailing us.
- Turn off notifications in the app or in iOS Settings.
- Disconnect Apple Health in the app or in iOS Settings.
- Opt out of tracking when iOS asks, or later under Settings › Privacy & Security › Tracking.
- Unsubscribe from marketing email using the link in any such email.
Depending on where you live you may also have the right to object to or restrict processing, to data portability, to withdraw consent, and to complain to your data protection authority. If you are in California, you have the right to know, delete and correct your personal information, and to opt out of its "sale" or "sharing" — we do not sell or share personal information as those terms are defined, and we will not discriminate against you for exercising any right.
Email support@liftbuddyapp.com from the address on your account and we will respond within the time the applicable law allows, and in any case as quickly as we reasonably can.
8. Security
Traffic is encrypted in transit with TLS, data is encrypted at rest by our hosting providers, passwords are stored only as salted hashes, and access to production systems is limited to people who need it. No system is perfectly secure and we cannot guarantee absolute security, but if a breach affects you we will notify you and the relevant authorities as required.
9. Children
LiftBuddy is not intended for children under 13 and we do not knowingly collect their personal data. Resistance training and calorie targeting are not appropriate for young children without professional supervision. If you believe a child has given us data, email us and we will delete it.
10. International transfers
We are based in the United States and our providers process data in the United States and other countries. If you are outside the US, your data will be transferred there. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
11. Changes to this policy
We will update this page when what we do changes, and change the "last updated" date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
12. Contact us
Privacy questions, data requests and complaints: support@liftbuddyapp.com. Anything else: info@liftbuddyapp.com.
LiftBuddy Incorporated, United States.