Privacy Policy
Effective July 2, 2026
This policy explains what LiftHero collects, why we collect it, who we share it with, and the controls you have over your data. We aim to collect the minimum we need to make the app work — your workout data lives on your device by default.
1. Who we are
LiftHero is operated by Meitar Lazimi (sole operator). You can reach us at lifthero.support@gmail.com for any privacy question or request.
2. What we collect
Local-only data (stays on your device)
By default, LiftHero is a local-first app. Workouts, templates, exercises, measurements, body history, and personal records are stored in an on-device SQLite database. None of this leaves your device unless you sign in and opt into cloud sync.
Account data (only if you create an account)
- Email address and (hashed) password, or your Apple / Google sign-in identifier.
- Display name, optional profile photo, optional bio, and the username you choose.
- Onboarding answers (training goals, experience level, training styles, units preference, commitment goal).
Profile and demographic data (optional)
You can add your date of birth (used to derive your age), bodyweight, gender, and region / country during onboarding or in profile settings. We use this data to place you into, and to let you filter, competitive leaderboards and rank comparisons — for example age-bracket or bodyweight-class rankings. Providing it is optional: if you don't, you can still use the app but won't appear in the corresponding filtered leaderboards. You can hide yourself from leaderboards, and edit or remove your age, bodyweight, gender, and region, at any time in Settings → Privacy / Leaderboards; removing this data removes you from the corresponding filtered rankings. Legal basis (GDPR): performance of our contract to provide the leaderboard and ranking features you opted into and, where required, your consent. We retain it while your account is active and delete it when you delete your account or remove it from your profile.
Synced fitness data
When you sign in, the data described in "Local-only data" syncs to our cloud database so you can access it across devices and recover after reinstall. See section 6 for how long we retain synced data on each tier.
Social and shared content
- Posts you create on your profile, comments, claps and reactions, and Spotlight submissions.
- Images you attach to posts, comments, profile, or direct messages.
- Hashtags, mentions, and topical metadata derived from your posts.
- Group memberships and group posts. Public group activity is visible to other LiftHero users; private group activity is visible only to members.
- Shared routine and shared custom-program snapshots when you generate a public link, plus a count of how many times each link has been viewed.
- Profile attributes you mark as public (leaderboard participation, training-status badge, Hero badge if applicable).
- Direct messages you exchange with other users — see section 9.
Device and analytics data
- App version, operating system, device model, and language.
- In-app events (screens viewed, features used) collected via PostHog for product analytics.
- Crash reports and performance traces collected via Sentry when the app encounters errors.
- Subscription state managed by RevenueCat.
- A one-time "install referrer" string on Android, used to route new users to a specific shared routine they tapped before installing the app. Discarded after first use.
- Push notification tokens (Apple Push Notification service and Firebase Cloud Messaging) so we can deliver alerts you opted into.
3. How we use it
- Run the service. Authenticate you, sync your data, render your profile, deliver shared routines and custom programs, and bill subscriptions.
- Improve the app. Aggregate analytics tell us which features are working and which need help. We don't sell raw event data.
- Keep it safe. Detect abuse, enforce our Community Guidelines, and protect against spam and fraud — including automated image moderation on community uploads (see section 4).
- Communicate. Send essential account emails (verification, password reset, data-retention warnings) and push notifications for the categories you've opted into. We don't send marketing email without your explicit opt-in.
- Show brand partnerships. Surface curated partner offers in places like the post-workout summary card. See section 8 for our affiliate disclosure.
4. Who we share it with
We don't sell your personal data. We share limited data with the following service providers, who only use it to provide their service to us:
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Database, auth, storage, edge functions | Account, synced fitness data, profile photos, posts, group activity, custom programs, direct messages |
| RevenueCat | Subscription management | Anonymous user id, store receipts |
| Apple / Google | App Store / Play Store billing, app distribution, push notification delivery | Whatever they require to process your purchase and deliver pushes |
| Resend | Transactional email delivery | Email address, message contents |
| PostHog | Product analytics | Anonymous user id, event names, screen names, device basics |
| Sentry | Crash and error reporting | Anonymous user id, stack traces, device basics |
| Cloudflare Workers AI | Automated content-classification of images uploaded to community posts, comments, profile photos, and shared cards | The uploaded image bytes; passed to a vision model and discarded after the classification verdict is returned |
| Vercel | Website hosting and edge functions | Standard request logs for lifthero.app |
We do not share personally identifying information with our brand partners. See section 8.
If we ever need to disclose data in response to a legal request, we'll require a properly served legal process and will notify you unless prohibited by law.
How we moderate images (including in direct messages)
Image safety. Photos you post to the community are automatically screened at upload using an automated content-classification service (Cloudflare Workers AI) to detect nudity, sexual content, graphic violence, and other content that violates our Community Guidelines. Profile photos and all user content may also be reviewed after a user report. We do not use this automated screening to make legally significant decisions about you without human review.
Child safety: we have zero tolerance for child sexual abuse or exploitation. When we become aware of apparent child sexual abuse material, we remove it, preserve it as required by law, and report it to the National Center for Missing & Exploited Children (NCMEC) and to law enforcement. We do not operate a proactive CSAM-hash-matching system; our obligation to report arises when we obtain knowledge of a violation.
5. Where your data lives
Our Supabase and Vercel infrastructure runs in the United States. If you use LiftHero from outside the US, your data will be transferred to and processed in the US. Some of our processors also operate globally — for example Cloudflare operates data centers worldwide. We rely on Standard Contractual Clauses and equivalent safeguards for these transfers where required by local law.
6. Data retention
How long we keep your data depends on the data type and your subscription tier.
Active free accounts — workout history retention
To keep our infrastructure sustainable, free accounts have a tiered retention policy on workout history and related fitness data:
- 6-month view window. The app surfaces only the most recent 6 months of workouts, records, measurements, and body-composition history. Older entries still exist on our servers but are hidden from in-app views, charts, and exports.
- 12-month hard delete. Workouts, records, measurements, and body-composition history older than 12 months are permanently deleted by an automated daily process. This deletion is irreversible.
- 30-day pre-delete warning. If you have data that will be deleted in the next 30 days, we'll surface an in-app warning and send an email to the address on your account, naming the cliff date so you can act before the sweep.
- How to keep your history. Upgrade to Hero before the cliff date, or export your data from Settings → Data → Export.
Active Hero accounts
While your Hero subscription is active, we retain your full workout history, records, measurements, body-composition history, and all related fitness data indefinitely. No view cap, no automatic deletion.
Downgrade from Hero to free
When your Hero subscription ends, free-tier retention takes effect immediately. Your most-recent 6 months remain visible; anything older becomes view-capped on the same day. The hard-delete sweep begins applying to data over 12 months old on the next scheduled run. Re-subscribing restores full-history visibility for any data that hasn't already been deleted.
Other data
- Active account record (account, profile, social content): for as long as the account exists, unaffected by the workout-history policy above.
- Deleted accounts: the account record, synced fitness data, posts, comments, direct messages, and shared routines are deleted within 30 days. Encrypted backups are rotated within 90 days.
- Crash and analytics events: retained for up to 12 months.
- Subscription receipts: retained for as long as required by tax and accounting law (typically 7 years).
7. Your rights
Regardless of where you live, you can:
- Access your data through the in-app export feature in Settings → Data.
- Correct profile or onboarding information from the in-app Settings.
- Delete your account and all associated cloud data from Settings → Account → Delete Account.
- Object to analytics collection by disabling tracking in your operating system settings (App Privacy on iOS; ads/analytics opt-out on Android).
- Opt out of push categories for any non-essential push (friend activity, lapse reminders, weekly recap) from Settings → Notifications.
Depending on where you live, you also have the right to rectification (correct inaccurate data), erasure, portability (receive a copy in a portable format), restriction of and objection to certain processing, the right to withdraw consent, and the right to request human review of an automated moderation decision (see section 4). If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA). You have the right to know what personal information we collect and how it's used, to request its deletion, to correct it, to opt out of any sale or sharing, and to not be discriminated against for exercising these rights. LiftHero does not sell your personal information and does not share it for cross-context behavioral advertising.
To exercise any of these rights, use the in-app controls above or email lifthero.support@gmail.com. You can export your workout data in-app (Settings → Data → Export); for a copy of your full account data, contact us at the same address.
8. Brand partnerships and affiliate disclosure
LiftHero surfaces curated partner offers in a small number of places — primarily the post-workout summary screen and any future merchandise placements. We never include partner promotions in push notifications.
Each partner card is visibly labelled as a paid partnership and renders alongside a disclosure consistent with the FTC Endorsement Guides (16 C.F.R. §255).
What we share with partners. We do not pass your name, email, account id, device id, profile data, or any persistent identifier to partner brands. Partner click-through is routed through an anonymized server-side bounce: the partner sees an opaque request, not a user.
Hero subscribers can opt out of partner cards entirely from Settings → Privacy → Show partner cards.
For the full details — how we pick partners, what they see, and how to opt out — see our Affiliate Disclosure.
9. Direct messages
LiftHero offers direct messages between users, which may include images.
- Message contents — including any images — are stored in our database so they can be delivered across your devices and so we can act on abuse reports.
- Messages are not end-to-end encrypted; they are transmitted over HTTPS and stored encrypted at rest. We do not use the content of your private messages for advertising.
- Images sent in direct messages are subject to the same automated content-classification described in section 4, and — where we become aware of apparent child sexual abuse material — the removal, preservation, and NCMEC reporting described there.
- You can report a message or image for moderation. Reports include the surrounding context window for the reviewer.
- You can block a user (they can no longer contact or interact with you) or mute a user (their content and messages are hidden from you without notifying them) at any time.
- Account deletion removes all your sent and received messages within 30 days.
10. Children
LiftHero is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete the account.
11. Security
We use industry-standard practices: HTTPS for all network traffic, encrypted password storage, scoped row-level security on our database, encrypted secrets management via Supabase Vault, and platform keychain storage for session tokens. No system is perfectly secure, but we monitor actively and respond promptly to incidents.
12. Program credits and third-party content
Our built-in training programs are independent adaptations of publicly described methodologies. We credit the original authors on our Program Credits page, which lists every attributed program. We are not affiliated with, endorsed by, or sponsored by any author named there.
13. Changes to this policy
We may update this policy periodically. Material changes will be announced in-app at least 14 days before they take effect, and the effective date above will be updated.
14. Contact
Privacy questions, data requests, and complaints: lifthero.support@gmail.com.