Privacy policy

Liftz is published by Christopher Denis, an independent developer based in Belgium, data controller within the meaning of the General Data Protection Regulation (GDPR).

For any question about your data: contact@liftz.fit.

Your programs, routines, exercises, sessions, sets, weights, reps, RPE, notes, deloads and preferences are stored in a local database on your device. The photos you take of your exercises stay there too: Liftz never uploads them.

Without an account, none of this leaves your phone, unless you export a file yourself or share a program.

Your account

If you create an account or sign in.

Data

Email address and password (never readable by Liftz), or your Google account if you choose "Continue with Google"; technical account identifier.

Why

To identify you and protect your backup.

Legal basis

Performance of the contract (Art. 6(1)(b) GDPR).

With whom

Google (Firebase Authentication).

The online backup

While you are signed in.

Data

A compressed copy of your training data and preferences, without photos, with its date and size.

Why

So you lose nothing, and get your data back on a new device.

Legal basis

Performance of the contract.

With whom

Google (Firebase Cloud Storage and Firestore).

Liftz Pro

At each launch, to know whether Pro is active, and when you buy or restore a purchase.

Data

Anonymous identifier (or your account's if you are signed in), purchase history, product, country, trial and renewal dates.

Why

To unlock Liftz Pro and restore it after a reinstall.

Legal basis

Performance of the contract; legal obligation for keeping purchase records (Art. 6(1)(c)).

With whom

Google Play (payment) and RevenueCat (subscription management). Liftz never sees your payment details.

Error reports

When the app runs into an error.

Data

Error message and stack trace, device model, Android and app versions, technical context; performance measurements on about one session in ten. Not your name, email or workouts.

Why

To detect and fix crashes.

Legal basis

Legitimate interest (Art. 6(1)(f)): providing an app that works. You can object by writing to us.

With whom

Sentry.

Support

When you write to us from the app.

Data

Your email address, the category, the title and the message.

Why

To answer you.

Legal basis

Your request (performance of the contract).

With whom

EmailJS (sending) and Google (Liftz's Gmail inbox).

Sharing a program

When you send a program from one device to another.

Data

The IP address of both devices, while the connection is set up. The program then travels directly from one device to the other, encrypted.

Why

To connect the two devices.

Legal basis

Your request.

With whom

The public PeerJS server and a Google STUN server.

Android backup

Independently of Liftz, Android may back up app data to your Google account. That backup is managed by Google under its own rules; you can turn it off in Android's settings. Exercise photos are excluded from it.

• No ads, no advertising ID.
• No analytics or tracking tools.
• No selling, renting or handing over of your data.
• No profiling: scores and recommendations are computed on your phone, for you alone.

Your workouts can say a lot about your physical condition. They are only used to provide the app, and are passed on to no one other than the providers above, who act solely on behalf of Liftz.

Liftz's providers (Google, RevenueCat, Sentry, EmailJS) may process data outside the European Union, notably in the United States. These transfers are covered by the EU–US Data Privacy Framework for the companies that adhere to it, and by the European Commission's standard contractual clauses.

• Account and online backup: until the account is deleted. Each upload replaces the previous one: only the latest version is kept.
• Error reports: deleted automatically after 90 days at most.
• Support messages: as long as it takes to handle the request, then two years at most.
• Purchase records: the period required by law, at Google Play and RevenueCat.
• Data on your phone: until you delete it or uninstall the app.

You can ask for access to your data, its rectification, erasure or portability, or the restriction of its processing, and object to processing based on legitimate interest. Write to contact@liftz.fit: you will get an answer within a month.

Several of these rights can be exercised directly in the app: export a full backup (Settings → Data & Backup), edit your information or delete your account (Settings → Personal Information).

If you believe your rights are not respected, you can lodge a complaint with the Belgian Data Protection Authority: dataprotectionauthority.be, Rue de la Presse 35, 1000 Brussels.

• Camera: to photograph an exercise, or scan the QR code of a shared program or Dashboard. Images stay on your phone.
• Photos and storage: to pick a photo, import or export a backup file.
• Notifications and exact alarms: the rest timer, which has to ring on time even with the screen off, and the session reminder if you turn it on (Liftz Pro) — a notification scheduled on the phone, nothing leaves it.
• Internet: backup, purchases, support.

You can revoke each of these permissions in Android.

Security

Traffic with the servers is encrypted (HTTPS). The online backup is only accessible to the account that created it.

Children

Liftz is not intended for children under 13 and does not knowingly collect their data. If a child has sent us some, write to us: it will be deleted.

Changes

This policy may change with the app. The date at the top shows its latest version; a significant change will be announced in the app.