Privacy Policy - Liftly

Last updated: October 14, 2026

Liftly helps you log workouts, track body metrics and strength progress, compare with friends and follow training programs. This Privacy Policy explains what information we collect, why, who we share it with, and the choices and rights you have. It applies to the Liftly website, web app and native apps.

1. Who is responsible

WorldLab Trading Limited, a company registered in the Republic of Cyprus under number HE 418634, with its registered office at Florinas Papakosta 3, 2326 Nicosia, Cyprus, operates Liftly and is the controller of your personal information ("we", "us"). You can reach us at support@liftlygym.com. Because we are established in the European Union, the EU General Data Protection Regulation ("GDPR") applies to how we handle personal information, and our lead supervisory authority is the Cyprus Commissioner for Personal Data Protection.

2. Information we collect

Account and sign-in

  • Email address and password (stored by our authentication provider as a secure hash)
  • If you sign in with Apple or Google: the name and email address they share with us (Apple may give us a private relay address)
  • Username, and session tokens kept on your device to keep you signed in

Profile and onboarding

  • First name, birthday, gender, country, language and unit preferences
  • Profile picture and, for creators, display name, bio, specialties and social media handles
  • Your onboarding answers, such as how you heard about Liftly, your goal, training experience, how often and how long you train, and what you want from the app

Fitness and health information you enter

  • Workouts, exercises, sets, reps, weights, notes and personal records
  • Body weight, height and body fat, and figures we derive from them such as BMI and FFMI
  • Injuries or sore spots you choose to tell the program builder (optional, and only with your consent)
  • Strength ranks, scores and other progress we calculate from the above

Social, programs and the Creator Marketplace

  • Friends, friend requests and reactions to friends' activity
  • Programs you build, follow or buy, and your progress through them
  • For creators: the programs, images and videos you upload, your sales and earnings, and the payout and tax details you give us

Purchases

  • What you have bought and your subscription status, linked to your account through RevenueCat. Apple and Google process payments; we never receive your card details.

Notifications and email

  • Your notification choices and reminder times, and a push token for your device if you allow notifications
  • Emails you send us and emails we send you (for example, account and creator emails)

Usage, device, advertising and attribution data

  • In the native apps: which screens and features you use and events such as finishing onboarding, logging a workout or viewing a paywall (Firebase Analytics); crash and performance reports (Firebase Crashlytics and Performance Monitoring)
  • Which ad campaign led to your install, and a few in-app events (registration, onboarding, first and later workouts logged, paywall views, trials and purchases) for measuring our ads (AppsFlyer). On iOS, the advertising identifier (IDFA) is used only if you allow tracking.
  • Ad requests and interactions, and device and advertising identifiers where permitted (Google AdMob)
  • On our website: cookieless page-view analytics (Vercel Analytics)
  • IP address, device type, operating system and app version, and logs needed to run and secure Liftly
  • Which version of a paywall, price or feature test you were randomly assigned to

Legal records

  • When and which version of our Terms and this Privacy Policy you accepted, your privacy choices, and records of privacy requests

3. How we use information

  • Create and secure your account and provide Liftly's features
  • Store, sync and show your workouts, metrics, ranks, programs and progress
  • Calculate strength ranks, recommendations, leaderboards and programs
  • Run social features, such as friends, comparisons and leaderboards
  • Run the Creator Marketplace, including reviewing programs and paying creators
  • Check purchases, restore them and give access to what you bought
  • Send notifications and emails you asked for or that relate to your account
  • Show ads in the free version and measure which of our own ads bring people to Liftly
  • Understand how Liftly is used, test improvements, fix bugs and keep the Service secure
  • Comply with the law, respond to lawful requests and enforce our Terms

We never use your health information (body metrics, injuries or workouts) to target ads, and we never send it to advertising or attribution partners.

4. What other people can see

  • All Liftly users: your username, profile picture, country, strength ranks and scores, and totals such as workouts and volume, in search, friend requests, profiles and leaderboards
  • Friends you add: your workouts, ranks and body stats (weight, height and BMI)
  • Anyone: creator profiles (display name, picture, bio, social handles) and published programs

5. Legal bases (EEA, UK and similar laws)

  • Contract: to provide Liftly and the features and purchases you ask for
  • Explicit consent: for health information, such as body metrics and injuries. You can withdraw consent by deleting that information or your account.
  • Consent: for tracking across other companies' apps (iOS App Tracking Transparency), personalized ads where required, and push notifications
  • Legitimate interests: to keep Liftly secure, understand usage, measure our own advertising and improve the product, balanced against your rights
  • Legal obligations: for tax, accounting and other records the law requires

6. Who we share information with

We share personal information only with service providers that process it for us under contract, and as described below:

  • Supabase (authentication, database and file storage) and Vercel (hosting and website analytics)
  • Apple and Google (app stores, payments and sign-in) and RevenueCat (purchase status)
  • Google Firebase (analytics, crash reports and performance monitoring) and Google AdMob (ads in the free version)
  • AppsFlyer (install attribution), which passes installs, registrations, trials and purchases to Meta so we can measure and improve our ads on Facebook and Instagram
  • OneSignal (push notifications) and Resend (email delivery)
  • Other users, as described in Section 4; professional advisers; authorities where the law requires; and a buyer or successor if Liftly is sold or reorganized

We do not sell personal information for money. Passing installs, trials and purchases to Meta for ad measurement may count as "sharing" or "targeted advertising" under some US state laws; you can opt out as described in Section 7.

7. Your advertising and tracking choices

  • Do not sell or share: turn this on in Settings → Privacy choices. AppsFlyer then stops passing your installs and in-app events to ad partners such as Meta, RevenueCat stops sending your purchases to AppsFlyer, and the ads you see are no longer personalized.
  • Tracking: on iOS, Liftly asks before tracking you across other companies' apps, and you can change your answer in Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising ID in your device settings.
  • Ad consent: in the EEA, UK and Switzerland, Google's consent form asks before personalized ads are shown.
  • Notifications: turn them off in Settings → Notifications or your device settings.

8. Consumer health data

Some US state laws, such as Washington's My Health My Data Act and Nevada's consumer health data law, give extra protection to "consumer health data". At Liftly, that means:

  • What we collect: body weight, height, body fat and figures derived from them (BMI, FFMI); injuries or sore spots you tell the program builder; and workouts and strength data, to the extent they reveal something about your health
  • Where it comes from: you, when you enter it, and our calculations from it
  • Why: only to provide the features you use, such as strength ranks, body stats, recommendations, programs and friend comparisons, and to keep Liftly working and secure
  • Who receives it: our hosting and database providers (Supabase and Vercel), which process it only for us, and friends you add, who see your workouts, ranks, weight, height and BMI. We do not share it with advertisers, AppsFlyer, Meta or AdMob, and we do not sell it.
  • Your rights: you can see and edit it in the app, delete it or your whole account at any time, ask us for a copy, and withdraw your consent. Email support@liftlygym.com to exercise these rights; if we decline a request, you can appeal by replying, and if you are not satisfied, contact your state attorney general.

9. Retention and deletion

We keep your information while your account exists and as needed to provide Liftly. You can delete your account in Settings; we then delete or anonymize the personal information linked to it, except what we must keep by law (for example, tax records of creator payouts) or to resolve disputes. Copies in backups are erased as backups expire. Apple, Google and RevenueCat keep their own transaction records under their policies.

10. International transfers

Some providers process information outside the European Economic Area, including in the United States. Where they do, we rely on the European Commission's adequacy decisions (including the EU-U.S. Data Privacy Framework for certified providers) or standard contractual clauses.

11. Your rights

Depending on where you live, you may have the right to:

  • Access, correct or delete your personal information, and get a copy in a portable format
  • Object to or restrict some processing, and withdraw consent at any time
  • Opt out of the sale or sharing of personal information and of targeted advertising (Section 7)
  • Not be discriminated against for using these rights
  • Complain to a data protection authority, such as the Cyprus Commissioner for Personal Data Protection or the authority where you live

You can edit most information in the app and delete your account in Settings. For anything else, email support@liftlygym.com. We may ask you to confirm the request from your account email address. We reply within one month (45 days for California and other US state requests), and you can appeal a decision by replying to it.

12. Security

We use technical and organizational measures suited to the risk, including access controls that limit who can read your data, and encryption in transit. No method of transmission or storage is completely secure.

13. Children

Liftly is not directed to children under 13 (or the higher minimum age where you live), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

14. Changes

We may update this Privacy Policy. We post the new version in the app with a new "Last updated" date, and we tell you in advance about material changes and ask for your consent where the law requires.

15. Contact

WorldLab Trading Limited, Florinas Papakosta 3, 2326 Nicosia, Cyprus. Email: support@liftlygym.com

Current privacy policy version: 2026-10-14