Privacy policy

• LiftyBot stores what you put into it: your account, your training profile and your workout history.
• There is no advertising, no tracking or analytics code, and your information is never sold or rented.
• You can export everything as a CSV file at any time, and you can delete your account yourself from inside the app, which removes your data.
• The trainer who runs LiftyBot can see who has signed up and how active each account is, so they can coach. They cannot see your sensitive profile answers in that view.

Everything below is something you typed or chose yourself.

• Account: your email address and a password, or a sign-in link sent to that email. Passwords are stored only in scrambled (hashed) form by our sign-in provider; nobody at LiftyBot can read them.
• Training profile: the answers you give when LiftyBot builds your plan: your goal, experience, days and minutes available, equipment, age, sex, body weight, sore joints (including whether pain wakes you or causes numbness, which LiftyBot uses to send you to a professional rather than around the problem), confidence with a barbell, and movements you dislike.
• Workout history: every set you log (movement, weight, reps, time or distance), drop sets and supersets, session notes, perceived intensity, session length, body weight entries, custom exercises and custom workouts, and your weekly schedule.
• Ask Lifty questions: the questions you type into Ask Lifty, so the trainer can see what people are asking and improve the answers.
• Notification registration: if you turn on rest-timer alerts or the weekly nudge, the technical address your phone or browser uses to receive notifications. No message content is stored.
• Shared workouts: if you share a workout by link, the workout name and its movements are visible to anyone who has that link. Your name, email and profile are not part of a shared link.

LiftyBot does not collect your location, your contacts, or data from Apple Health or Google Fit. It shows no advertising and contains no analytics or tracking code.

• To run the service: show your history, prefill your next session, build and rebuild your plan, chart your progress, and send the notifications you asked for.
• To answer Ask Lifty questions. LiftyBot first searches its own written answers. When the AI answer feature is switched on, your question is sent to Anthropic (the maker of the Claude model) together with your training goal, relevant profile details such as sore joints, and a summary of your last twelve sessions, so the answer fits you. Your email address is not sent. Anthropic processes this to produce the answer and does not use it to train its models under the terms LiftyBot uses it on.
• To keep the service working and secure, and to let the trainer see overall activity.

• You. Everything, at any time, inside the app and in the CSV export.
• The trainer who runs LiftyBot. An admin view shows each account's email, when it was created and last signed in, how many sessions and sets have been logged and when, total volume, the training goal, days per week and program name, custom exercises, and Ask Lifty questions. It does not show age, sex, body weight or sore-joint answers. Every admin action is recorded.
• Nobody else. LiftyBot does not sell, rent or share your information with advertisers or data brokers. The service providers below handle data only to run LiftyBot.

• Supabase stores the database and handles sign-in. Your data is stored in Supabase's Canada (central) region. Sign-in links and password reset emails are sent through Supabase.
• Vercel hosts the website and the server side of the app. Like any web host, Vercel keeps short-lived technical logs of requests, including IP addresses, to keep the service running.
• Anthropic answers Ask Lifty questions when the AI answer feature is switched on, as described above.
• Apple and Google deliver notifications to iPhones and Android phones, and handle app installs and any in-app purchases through their stores under their own policies.

LiftyBot uses one kind of cookie: the one that keeps you signed in. There are no advertising or tracking cookies.

• Export: download everything as a CSV file from your profile at any time.
• Correct: change your profile answers, notes and logged sets inside the app.
• Notifications: turn rest-timer alerts and the weekly nudge on or off in the app, or in your phone's settings.
• Delete: delete your account from your profile. This removes your account and your data from the live service straight away. Copies in any routine backups kept by our database provider expire on a rolling schedule.
• Ask: for anything else about your data, including access or deletion requests, write to jonneale83@icloud.com.

For as long as your account exists. Delete your account and it goes with it.

Connections are encrypted (HTTPS). Every table in the database has row level protection, so each account can reach only its own rows. Passwords are hashed by the sign-in provider. The keys that could bypass those protections live only on the server and are checked automatically to make sure they never reach a phone or browser.

LiftyBot is for adults and is not directed at children under 16. If you believe a child has created an account, write to jonneale83@icloud.com and it will be removed.

If this policy changes, the date at the top changes with it, and meaningful changes will be pointed out inside the app.

Questions about privacy: jonneale83@icloud.com.