LiftiQ is a personal workout tracker operated by Eternal Dev LLC ("EternalDev", "we", "our", "us"), the controller responsible for the data described here. This policy explains what data we collect, why, the legal bases we rely on, where it is stored, who we share it with, and the rights you have over it. Plain language; no surprises.
Information you provide
- Account: email address and a sign-in identifier from Google or Apple when you choose those providers. You may optionally add your name, age, body weight, and preferred weight unit (lbs or kg).
- Workout data: every workout you log — exercises, sets, reps, weights, durations, RPE values, dates, and any notes or template names. This is the core of the app and is the majority of what we store.
Sign-in providers
When you sign in with Google or Apple, those providers share your name and email address with us. We do not receive your password, payment information, or any unrelated profile data. You can disconnect at any time by deleting your account from within the app.
Information collected automatically
- Connectivity status: the app checks whether your device is online to show an offline indicator and queue any workouts logged while offline. This is a simple on/off signal — the LiftiQ app itself does not collect your IP address or location. To operate and secure the service, our infrastructure providers (for example Supabase) may process your IP address transiently.
- Ad and diagnostic data (free accounts only): when a free-tier banner ad loads, Google's advertising and consent services receive a device identifier and your IP address — from which an approximate, city-level location is derived — along with basic ad-interaction and diagnostic data. See "Ads on free accounts" below.
Ads on free accounts
LiftiQ is free to start, and free accounts see a single banner ad supplied by Google AdMob. LiftiQ does not use the iOS Advertising Identifier (IDFA) and never shows the App Tracking Transparency prompt, so there is no cross-app advertising identifier and measurement is handled by Apple's privacy-preserving SKAdNetwork — no advertising profile is built from your workout data. In the EU and UK we ask for your consent to ads through Google's consent form before any ad loads; ads are personalized only if you consent, and you can change your choice any time from Settings. Upgrading to LiftiQ Pro removes ads entirely.
Subscriptions and purchases
LiftiQ Pro is an optional paid subscription. All payments are processed by Apple (App Store) or Google (Google Play) — we never receive or store your card or payment details. We use RevenueCat to manage subscriptions: RevenueCat receives your purchase history and an account or device identifier (linked to your account) so we can unlock Pro across your devices and restore past purchases. RevenueCat's privacy policy is at revenuecat.com/privacy.
Legal bases for processing (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract to create your account and sync your workouts and settings; your consent for personalized ads on free accounts (gathered through Google's consent form, which you can withdraw any time in Settings); and our legitimate interests in keeping the service secure and preventing abuse. You can withdraw consent or object to processing based on legitimate interests at any time.
Where your data lives
Your account and workout data are stored in Supabase (Authentication and PostgreSQL), operated by Supabase Inc. and hosted on Amazon Web Services in the United States. Row-Level Security policies ensure each user can access only their own data. Supabase's privacy documentation is at supabase.com/privacy.
International data transfers
LiftiQ is operated from the United States, and our providers (Supabase, Google, RevenueCat, Apple) process data in the United States. If you use LiftiQ from the EEA, the UK, or elsewhere, your data is transferred to the United States. Where required, these transfers rely on appropriate safeguards such as the EU-US Data Privacy Framework and Standard Contractual Clauses (with the UK Addendum/IDTA for UK users). Contact us for more information about these safeguards.
Who we share data with
We do not sell your data, and we share it only with the service providers that make LiftiQ work, each acting on our behalf:
- Supabase — account authentication and database (United States). supabase.com/privacy
- Google AdMob — banner ads on free accounts (United States). policies.google.com/privacy
- RevenueCat — subscription management (United States). revenuecat.com/privacy
- Apple and Google — sign-in and payment processing when you use those options.
We do not share your workout data with advertisers or third-party analytics companies.
How long we keep your data
We keep your account and workout data for as long as your account exists, so your history stays available across your devices. When you delete your account (Profile → Settings → Delete account), your account and all associated workouts, templates, and profile data are permanently and immediately removed from our systems — there is no recovery. Backups, where they exist, are cycled out on a rolling basis. Providers such as Apple, Google, and RevenueCat retain purchase records as required for tax and audit purposes.
Security
We protect your data with encryption in transit (TLS) and at rest, and with Row-Level Security so each account is isolated. No system is perfectly secure, but if a data breach affecting your personal data occurs, we will notify affected users and the relevant authorities where the law requires. You are responsible for keeping your sign-in credentials secure.
What we do not do
- We do not sell your personal data.
- We do not use the Advertising Identifier (IDFA) and do not track you across other apps or websites.
- We do not share your workout data with advertisers or third-party analytics companies — the only third parties that receive any data are the providers listed above.
- We do not access your contacts, photos, microphone, camera, precise/GPS location, or Apple Health — the app requests none of those permissions.
- We do not use your content to train machine-learning models.
Your rights
Depending on where you live, you have the right to access, correct, delete, export (data portability), restrict, or object to our processing of your data, and to withdraw consent at any time.
- Access: view all of your workout data in the Progress, History, and Profile tabs.
- Correction: edit any logged set, exercise, or profile field directly in the app.
- Deletion: tap Profile → Settings → Delete account. This permanently and immediately removes your account, all logged workouts, and all saved templates. There is no recovery; the action is final.
- Export: contact us at the email below and we will send you a copy of your data outside the app.
- Withdraw ad consent: change your choice any time in Settings.
To exercise any right, contact us at the email below. If you are in the EEA or UK and believe we have mishandled your data, you also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO).
California privacy rights
If you are a California resident, the CCPA/CPRA gives you the right to know the categories of personal information we collect (identifiers such as email and account ID; fitness and workout data; approximate location and device identifiers used for ads on free accounts; and purchase information), to access and delete that information, to correct it, and to opt out of any "sale" or "sharing" of personal information. We do not sell your personal information. Because free-tier ads may be considered "sharing" under California law, you can limit this by upgrading to Pro (which removes ads) or by declining ad consent where offered. We will not discriminate against you for exercising these rights. To make a request, contact us at the email below.
Cookies, SDKs, and tracking technologies
LiftiQ is a mobile app and does not use website cookies. It includes third-party SDKs that may access device information: Google AdMob and Google's UMP consent SDK (ads and consent, free accounts only) and RevenueCat (subscriptions). On iOS, LiftiQ does not request App Tracking Transparency and does not access the Advertising Identifier (IDFA); on Android, the Google Mobile Ads SDK may use the advertising ID for limited, non-cross-app ad functions. We use no first-party analytics, crash-reporting, or attribution SDKs.
Children
LiftiQ is not directed at children under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete the account.
Changes to this policy
If we materially change how we handle data, we will update the effective date at the top of this page and, where required by law, notify you in-app or by email before the change takes effect.
Contact
Privacy questions, deletion requests, or concerns: [email protected].