Privacy Policy

LiftClub is operated by Shubham Sharma, an individual in Canada trading as LiftClub (“LiftClub”, “we”, “us”). Shubham Sharma is also the person responsible for protecting your personal information, and can be reached at [email protected]. This policy explains what we collect when you use the LiftClub iPhone app and liftclubapp.com, why we collect it, who receives it, and the choices you have.

In short

• Your training is saved on your iPhone first, then synced to our servers so it’s backed up and works on your other devices.
• Friends see your streak and workout totals. They never see your individual sets, the weight on each set, or your body weight.
• We don’t sell your data and we don’t show ads. The app has no advertising or cross-app tracking.
• LiftAI is off until you agree to it, and it never receives your name, email, birthday or body weight.
• You can delete your account in the app at any time.

What we collect

Account and profile

• Name and email address. If you use Sign in with Apple or Sign in with Google, we receive the name and email they share with us. Apple may give us a private relay address instead of your real one.
• Handle and profile photo, if you set them. Friends features only.
• Birth date. We use it to decide which features you can use (see “Children and age”).
• Profile details you give in onboarding or settings:
  • gender, and which demonstration figure you want (Tom or Ashley);
  • height and goal;
  • training days and timezone;
  • reminder times, units and preferences.
• How you heard about LiftClub, including anything you type for “Other”, and whether you’ve used other workout apps.

Training

• Workout sessions: start and end time, duration, timezone, title and any note you add.
• What you log: exercises, sets, reps, weights, times and distances, plus the body weight applied to bodyweight exercises.
• Optional entries: body weight and one-rep max entries you choose to log.
• What you build: custom exercises (including any instructions you write), saved workouts and programs, and the programs you follow.
• Streak details: your streak, shields, training schedule, and statuses such as Injured, Recovering or On Vacation, with their dates.

Some of this, such as your body weight or an Injured status, may count as health information. We use it only to run LiftClub’s features for you.

Friends and sharing (18+)

• Connections: friends, friend requests (including declined requests) and blocks.
• Posts: the workout summary (name, time, duration and total volume), your caption, and the share card image if you attach one.
• Activity: likes, in-app notifications, and workouts or programs you send or receive.
• Your published summary: what friends see (see “What other people can see”).
• Share links you create, which hold a copy of the workout or program.
• Reports:
  • reports you submit, including any note you write;
  • reports other people submit about you or your content.
• A push notification token, if you allow notifications about friends’ activity.

Purchases

• Apple processes all payments, and we never receive your card details.
• Our subscription provider, RevenueCat, tells us your subscription status, such as whether you’re on a trial and when Pro expires.
• We link that status to your LiftClub account ID.

LiftAI (Pro, 18+, opt-in)

LiftAI only runs after you agree to it.

What’s sent when you use it. The app sends a summary of your training:

• your goal and training days;
• sets per muscle;
• sessions, volume and minutes for each of the last 8 weeks;
• findings such as a stalled lift or a new best, with its weight and reps;
• the names of your saved workouts and custom exercises, and your Up next workout.

It also sends:

• What you type: a note when building a workout, a change you ask for, or a question.
• For “Ask about this workout”: that workout’s exercises, sets, top weights and reps.

What’s never sent. LiftAI never receives your name, email, handle, birth date, photo, body weight, session notes, friends or location. Requests carry a scrambled ID in place of your account ID.

What we keep.

• Our server checks each answer before passing it to the app.
• It keeps a usage record (the action, the model, its cost and your credits), but not what you or LiftAI wrote.
• It holds each answer for 10 minutes, so a retry doesn’t cost you twice.
• Your LiftAI conversations and results are stored only on your iPhone. They’re cleared when you sign out or withdraw consent.

Automatic review. After you agree, the training review can run on its own, no more than once a week.

Our AI provider. It’s Google (Gemini API), in the United States. We use Google’s paid service: under its terms, Google keeps requests for up to 55 days for abuse monitoring and doesn’t use them to improve its products or train its models. [TO CONFIRM: billing is turned on for the Gemini API project LiftClub uses in production. On Google’s free tier this sentence is false.]

Device, usage and diagnostics

• Product analytics (PostHog).
  • What: events such as “onboarding step viewed”, “paywall viewed”, “friend request sent” and “share card exported”, plus when the app is installed, updated, opened or closed.
  • Linked to: your account ID. Events from before you sign up are linked to it once you do.
  • Details included: device model, iOS version, app version, language, timezone, and an approximate location (country or city) that PostHog works out from your IP address.
  • Never included: your name, email, handle, body weight values, or anything you type. There’s no screen recording.
• Crash reports and diagnostics (Sentry).
  • What: errors, a sample of performance measurements, and short logs of what the app was doing (for example, that a session finished and how long it was).
  • Linked to: your account ID, but not your name or email.
  • Your messages: if you use Profile → Report an issue, Sentry receives the message you write.
• Server and security data.
  • The IP address and device type for each sign-in session.
  • IP addresses for rate limiting.
  • A scrambled (hashed) copy of your email address, used to limit sign-in attempts.
  • Server logs.

Device permissions. We ask only for:

• Camera: to scan workout QR codes. Nothing is recorded or saved.
• Photos: to choose a profile picture through the iOS photo picker, and to add a share card to your library when you tap Save. LiftClub doesn’t read your photo library.
• Notifications.

We don’t access your location, contacts, microphone or the Health app, and we don’t use Apple’s advertising identifier.

How we use your data

• To run LiftClub:
  • log your training;
  • count your streak and shields;
  • sync and back up your data;
  • show your history and charts;
  • apply age limits;
  • manage Pro.
• For friends features: your feed, friend requests, likes, notifications and the streak leaderboard, plus delivering what you share or send.
• To send what you’ve asked for: your workout reminders, which are scheduled on your iPhone, push notifications about friends’ activity, and sign-in codes by email. We don’t send marketing emails.
• For LiftAI, when you’ve agreed and you use it.
• To keep LiftClub safe:
  • filtering offensive words;
  • reviewing reports;
  • enforcing our Community Guidelines;
  • preventing abuse and fraud.
• To fix bugs and improve the app, using crash reports and analytics.
• To answer you when you contact us.

Legal bases (EEA, UK and similar laws). We rely on:

• Performing our contract with you: running the app, syncing, friends features and Pro.
• Your consent:
  • LiftAI;
  • notifications;
  • any health information you choose to log, where the law treats it as special-category data.
• Our legitimate interests:
  • security and preventing abuse;
  • moderation;
  • analytics and crash reports, to keep the app working.
• Legal obligations, where they apply.

What other people can see

• People who aren’t your friends (when they look up your exact handle, or receive a friend request from you) see your first name and handle only.
• Friends you’ve accepted see:
  • your full name, handle and profile photo, and when you became friends;
  • your current and longest streak, and whether you’re paused (never the reason);
  • your number of sessions, time trained and total volume for this week, this year and all time;
  • the names, times and durations of your last 3 workouts;
  • the posts you share from the last 30 days, and your likes.
• Friends never see your individual sets, the weight on each set, your body weight, one-rep maxes, notes or timezone.
• Share cards on posts. If you attach a share card to a post, friends see what’s on the card. That can include weights and personal bests if you leave them on.
• Private profile. If you turn on Private profile (Profile → Friends), friends see only your name, handle and photo, plus any posts you share.
• Share links.
  • Who can see them: anyone you give the link to, on a web page, with no account needed.
  • What they show: workout or program names, exercises, sets, and reps or times. Never your weights, your notes or who shared it.
  • How long they last: links don’t expire until you tap Stop sharing. Turning a link off can take a few minutes everywhere, and people who saved a copy keep it.
• Sending to a friend shows them your name and handle.
• Share cards you export. If you share a card to Instagram Stories, LiftClub hands the image to the Instagram app through the iOS pasteboard. From then on, Instagram’s privacy policy applies. A card can show your name, photo and workout numbers. It shows your body weight only if you share your body-weight chart.

Who we share data with

We use service providers to run LiftClub. They process data on our behalf, for the purposes above:

Other disclosures.

• We may disclose information if the law requires it, or to protect the safety of our users or the public.
• If LiftClub is sold or reorganised, your information may transfer as part of that, and this policy will continue to apply to it.

No sale and no ads. We don’t sell your personal information, and we don’t share it for targeted advertising.

Where your data is stored

• On your iPhone, in the app’s private storage.
• On our servers, run by Cloudflare in eastern North America.
• With our providers, some of whom (including PostHog, Sentry, RevenueCat and Google) process data in the United States.

LiftClub is run from Canada, so if you live outside the United States, your information is stored and processed in another country. While it is there, it’s subject to that country’s laws, and its courts, police and national security authorities may be able to access it.

If we transfer personal data out of the EEA, UK or Switzerland, we rely on the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses.

How long we keep it

While your account is open, we keep your data.

When you delete your account, we immediately delete from our live database:

• your account and profile;
• your training history;
• your posts and likes;
• your friends, friend requests, blocks and sends;
• your share links (which then stop working);
• reports you filed;
• your LiftAI usage records and push tokens.

We also delete your profile photo and post images from storage, and your record at RevenueCat.

What’s kept after you delete your account:

• Reports about you: kept for [TO CONFIRM: retention period], so we can deal with abuse.
• A deletion record of your account ID and deletion date: kept for 90 days, so a restore from backup can’t bring your account back.
• Backups: your data can remain in backups for up to 90 days.
• Security records: IP-based rate-limit records, and the scrambled email record used for sign-in limits (kept for up to 2 days).
• Analytics and crash data: these are linked to your account ID only. PostHog keeps analytics events for 1 year, and Sentry keeps crash reports for up to 90 days. Email us to have them deleted sooner.
• Copies others have: anything you shared that someone else saved.

Things you delete in the app:

• Some items are marked as deleted rather than erased straight away. For example, a deleted workout keeps a record of its time, duration, title and note, and a deleted post’s image stays in storage.
• These are erased when you delete your account.
• Signing out leaves your training on that iPhone until you delete the app or your account.

Short-lived data:

• Sign-in codes expire after 5 minutes.
• LiftAI answers are held on our server for 10 minutes.

Your choices and rights

• Delete your account in Profile → Delete account, at the bottom of the page. For your security, you need to have signed in within the last day.
• See and correct your data in the app. For a copy of your data, email us. There’s no export button yet.
• Make your profile private in Profile → Friends.
• Withdraw consent for LiftAI in Profile → LiftAI. LiftAI’s data on your phone is cleared when you do.
• Turn off reminders in Profile → Reminder, and notifications in iOS Settings.
• Stop sharing a link from the workout or program it belongs to.
• Block someone in the app. That removes the friendship and stops them finding or contacting you.
• Analytics. There isn’t an in-app switch for analytics yet. Email us and we’ll delete your analytics and crash data.

Rights under your local law. Depending on where you live (for example the EEA, UK, Switzerland, California, Canada or Québec), you may have rights to:

• access, correct, delete or receive a copy of your data;
• object to, or restrict, how we use it;
• withdraw consent.

Making a request. Email us from the address on your account so we can verify it’s you. We’ll respond within 30 days, or sooner where the law requires.

Complaints. You can also complain to your local data protection authority. In Canada, that’s the Office of the Privacy Commissioner of Canada; in Québec, it’s the Commission d’accès à l’information.

California. We don’t sell or share personal information for cross-context behavioral advertising, and we use sensitive information only to provide the Service.

Children and age

• 13 and over only. LiftClub is for people aged 13 and over, and the app doesn’t accept a birthday that makes you younger.
• Friends features and LiftAI are 18+. Our server enforces this.
• Under-18 accounts can use the training features. They have no handle, they can’t add friends, and other people can’t find them.
• Children under 13. We don’t knowingly collect data from children under 13. If you believe a child has given us data, contact us and we’ll delete it.

Security

• All connections to our servers use HTTPS.
• LiftClub has no passwords. Sign-in codes:
  • are 6 digits;
  • are stored only in scrambled (hashed) form;
  • expire after 5 minutes;
  • allow a limited number of attempts.
• Your sign-in session is stored in the iOS Keychain.
• Every request to our server is limited to your own account’s data.
• Profile photos and post images are kept in private storage, and shown only through links that expire after an hour.
• Uploads are checked to be real images.
• Profile photos are re-encoded on your phone before upload, which removes location and camera details.
• We rate-limit sign-in and other requests.
• Your training database on your iPhone is kept in the app’s private storage but isn’t separately encrypted by LiftClub, so protect your phone with a passcode.
• No system is perfectly secure.

Our website

Analytics. liftclubapp.com counts visits with Cloudflare Web Analytics and Umami. Both are cookieless:

• they record page views and clicks on App Store buttons;
• Umami respects your browser’s Do Not Track setting;
• the website sets no advertising or tracking cookies.

Share-link pages. These are served by our app server. They run no scripts. If you use the report form on one, we receive your report and your IP address for rate limiting.

Changes to this policy

If we make material changes, we’ll update the date at the top and tell you in the app or by email before they take effect.

Contact

Questions or requests:

• Email: [email protected]
• Post: Shubham Sharma (LiftClub), [TO CONFIRM: mailing address. A PO box or virtual mailbox is fine.]