Privacy Policy

Last updated: 9 September 2026

This Privacy Policy describes how Lift X ("we," "our," or "the app") handles your information. Lift X is operated by Alute Media, based in the Netherlands.

In plain terms: Lift X works without an account, and when you use it that way your data stays on your phone. If you choose to sign in, a copy of your Lift X data is backed up to our servers and kept up to date automatically, and a small set of numbers is shared with the friends you add. This page explains exactly what leaves your phone, when it leaves, who can see it, and how to remove it.

We do not show advertisements, we do not use analytics tools, and we do not track you across other apps or websites.

1. What we collect

Data stored on your device:

• Your profile information (name, username, date of birth, bodyweight, goals, unit preferences)
• Your workouts, sets, exercises, cardio sessions, and personal records
• Your nutrition, water, and macro logs
• Your sleep records and notification schedules
• Your ranks, scores, and muscle-group progress
• Your routines and settings
• Your invite code
• Readings that Lift X imports from Apple Health with your permission: daily steps, sleep, and water intake

If you never sign in, none of the above is transmitted to Lift X servers or to any third party. It lives in your device's local storage and is removed when you uninstall the app.

Data sent to our servers when you sign in (described in section 3):

• An account identifier and, if you share it with us, your email address
• Your cloud backup: a copy of everything in the list above, uploaded automatically and kept up to date while you are signed in
• Your username
• Your leaderboard row: overall score, rank, number of workouts, current streak, and the date of your last workout
• Your invite code

Data shared with third parties (described in section 4):

• Anonymous purchase records (via RevenueCat and the store you purchased through, Apple on iOS or Google Play on Android, for subscription verification only)
• Crash reports (via Sentry, if the app crashes)

2. What we do NOT do

• We do not use product analytics tools (no Google Analytics, Mixpanel, Amplitude, PostHog, or Firebase Analytics). We do not measure or record how you use the app, which screens you visit, or which features you use.
• We do not show advertisements inside Lift X, and we are not part of any advertising network.
• We do not use advertising identifiers, advertising attribution software, or any tool that follows you across other apps or websites.
• We do not sell your data, and we do not share it with anyone for their own purposes.
• We do not track your location.
• We do not read your contacts, photos, or device storage outside of what you explicitly share with us.
• We never share your workouts, body measurements, weight, heart rate, sleep, hydration, or any other health or fitness data with advertisers or ad networks.
• We do not ask you for a password. Signing in is handled by Apple, and we never see your Apple ID password.
• We do not read your backup. Our systems look at it for one purpose only: counting how many workouts and cardio sessions it holds, to decide whether to keep it as your safety copy (section 3). Nobody at Alute Media browses your data.

3. Your account, your backup, and your friends

Everything in this section is optional. You can use every part of Lift X without signing in, except the friends leaderboard, which needs an account so your friends can find you.

Signing in

Lift X uses Sign in with Apple. When you sign in, we receive:

• An account identifier from Apple. This is a random string that identifies your Lift X account. It is not your Apple ID, and it is not shared with anyone else.
• Your email address, only if you choose to share it on Apple's sign-in sheet. If you use Apple's "Hide My Email" option, we receive a private relay address that Apple forwards to you, not your real address. We do not send email to it today. It is stored only as part of your account.

Apple's sign-in sheet also offers to share your name. Lift X asks for it so the sheet looks the same as in other apps, but the app discards it on your phone. Your name is never sent to us.

Sign in with Google on Android is not available yet. When it is, it will work the same way: an account identifier and, if you share it, your email address.

Your cloud backup

Backup is automatic. As soon as you sign in, Lift X uploads a copy of your data, and from then on every change you make is uploaded again shortly after you make it, and whenever you leave the app. You do not need to tap anything, and there is no separate "back up now" step. If you do not want your data on our servers, do not sign in, or sign out.

The backup contains everything listed under "Data stored on your device" in section 1: your workouts, cardio sessions, nutrition and water logs, sleep records, routines, goals, ranks, settings, invite code, and your profile including your name, date of birth, and bodyweight. It also contains the readings Lift X imported from Apple Health: your daily step counts, your sleep, and your water intake. Once you sign in, those readings leave your phone as part of your backup. If you would rather keep Apple Health readings on your device only, use Lift X without signing in. Your Pro or subscription status is never part of the backup. It is checked again with RevenueCat on every device.

The backup is stored with Supabase, our database provider, on servers in Frankfurt, Germany, inside the European Union. It is stored as one record per account, and it is protected so that only your own signed-in account can read or replace it. We keep the current backup and one older version. Each time the current backup is replaced, the version it replaced becomes the safety copy, unless the safety copy already holds more workouts, in which case the richer one is kept. You can restore either version to a new phone from Profile after signing in there. Restoring replaces the data on that phone with the copy from the server.

Usernames, friends, and the leaderboard

When you sign in, your username is registered on our servers so that it is unique and so that friends can find you. Any signed-in Lift X user who types your exact username can find you and send you a friend request. Nobody can browse a list of users, search by partial name, or see anything about you until you accept their request. If you decline a request, that person cannot find you again.

Once you and another person are friends, each of you can see the other's leaderboard row. It contains exactly seven things: your username, your overall score, your rank, your rank tier, how many workouts you have logged, your current streak, and the date of your last workout. These numbers are calculated on your phone and uploaded automatically while you are signed in, in the same way as your backup. Your workouts themselves, your body measurements, your nutrition, your sleep, and everything else in your backup are never visible to friends.

You can remove a friend at any time from the leaderboard screen. When you do, neither of you can see the other's row any more.

Invite codes

Lift X gives you an invite code to share with friends. When you sign in, the code is stored with your account so that it keeps working if you move to a new phone. We do not currently offer rewards for invites, and we do not collect any information about the people you invite.

Signing out and deleting your account

Signing out stops all uploads immediately. Your backup, username, friendships, and leaderboard row stay on our servers so that you can sign in again later, on this phone or another one.

You can delete your account inside the app at any time: Profile, then Account, then "Delete account". This permanently deletes your Lift X account, your backup, your safety copy, your username, your friendships, your leaderboard row, and your invite code from our servers. It happens right away and cannot be undone.

Deleting your account does not delete the data on your phone. That stays yours and stays on your phone. It also does not cancel a subscription, which is managed by the App Store or Google Play.

If you cannot access the app, you can ask us to delete your account by emailing contact@alutemedia.com.

4. Third-party services

Supabase is our database and sign-in provider. It stores your account, your backup, your username, your friendships, and your leaderboard row, on servers in Frankfurt, Germany. Supabase processes this data only on our behalf, to run Lift X for you, and does not use it for its own purposes. Supabase's privacy policy: supabase.com/privacy.

RevenueCat manages in-app subscriptions and verifies purchases. When you start a subscription or trial, RevenueCat receives an anonymous, randomly-generated install ID along with your App Store or Google Play purchase receipt. This ID is not linked to your Lift X account, your name, your email, or any other personal information we hold. RevenueCat's privacy policy: revenuecat.com/privacy.

Sentry receives automatic reports when the app crashes, so we can fix the problem. A crash report contains the technical details of the failure: the error, the code path that produced it, your device model, and your operating system version. We have configured Sentry not to collect personal information: user identifiers are removed from every report before it is sent, request details are stripped, web addresses recorded in the report are trimmed so that they cannot contain your account ID, and we do not use Sentry's session replay, screenshot, or performance monitoring features. Crash reports are sent to Sentry's servers in the European Union, are not linked to you, and are kept for 90 days. Sentry's privacy policy: sentry.io/privacy.

Apple App Store (iOS) and Google Play (Android) process all purchases. We never see your payment method, billing address, Apple ID, or Google account. Subscriptions are managed in that same store: on iOS via Settings → Apple ID → Subscriptions, and on Android via the Play Store app under Payments & subscriptions. The relevant store's privacy policy applies to your payment transactions: Apple, apple.com/legal/privacy; Google, policies.google.com/privacy.

Apple HealthKit (iOS only): with your permission, Lift X reads from Apple Health (steps, sleep, resting heart rate, water intake) and writes to it (workouts, water intake). Reading and writing happens on your device, and Apple does not share HealthKit data with us. Your resting heart rate is used on your phone for your Recovery score and is not stored. Your steps, sleep, and water intake are saved into your Lift X data so the app can show your history, which means that if you sign in, they are included in your cloud backup as described in section 3. They are never shared with advertisers, never visible to friends, and never used for anything other than showing you your own data. You can revoke HealthKit permissions at any time in iOS Settings → Health → Data Access & Devices → Lift X. Lift X on Android does not integrate with Apple Health or any equivalent health platform; steps and other activity data entered on Android are stored only on your device.

Notifications: Lift X schedules local notifications for bedtime reminders, wake alarms, rest timers, and workout prompts. These are scheduled on your device and do not involve any remote server or push notification service.

5. Legal basis for processing

Where the EU General Data Protection Regulation (GDPR), the UK GDPR, or equivalent laws apply, we process data on the following legal bases:

• Contract performance: your account, backup, username, friendships, and leaderboard row are processed because you chose to sign in and use those features, and they cannot work without it. Subscription and purchase data processed via RevenueCat is necessary to deliver the Lift X Pro features you have purchased.
• Consent: Apple HealthKit data is read or written only after you grant explicit permission in iOS. You may withdraw this consent at any time in iOS Settings. Including imported Apple Health readings in your backup happens only if you sign in, and stops when you sign out.
• Legitimate interest: crash reports are processed to keep the app functioning correctly and to diagnose failures. Reports are stripped of user identifiers before transmission.

6. Data retention

Data on your device persists as long as the app is installed and is permanently removed when you uninstall.

Your account, your backup, your safety copy, your username, your friendships, your leaderboard row, and your invite code are kept for as long as your account exists. Signing out does not delete them. Deleting your account deletes all of them right away.

RevenueCat, Apple, and Google retain transactional records according to their own policies and applicable accounting laws (typically 7 years for tax compliance).

Sentry keeps crash reports for 90 days.

7. Children

Lift X is not directed at children under the age of 13. We do not knowingly collect information from children. If you believe a child has used the app, please contact us and we will advise.

8. Your rights (GDPR and similar regulations)

Most of your data is on your device, and the copy on our servers is under your control from inside the app:

• Right to access your data: your data is visible to you inside the app at all times, and your backup is an exact copy of it.
• Right to rectification: you can edit any of your data inside the app. Changes are uploaded to your backup automatically while you are signed in.
• Right to delete your data: to delete the copy on our servers, delete your account from Profile → Account → Delete account, or email us. To delete the data on your phone, uninstall the app. On iOS you can also clear app data via Settings → General → iPhone Storage → Lift X → Delete App. On Android, go to Settings → Apps → Lift X → Storage → Clear Data, or simply uninstall. Uninstalling removes everything stored on your device except your subscription record with Apple or Google, and it does not delete your account or backup.
• Right to restrict or object to processing: you can sign out to stop all uploads, disable HealthKit access, revoke notification permissions, remove friends, or stop using the app at any time.
• Right to data portability: you can export your full data as a JSON file from Profile, and share workout history using the in-app Share functions.
• Right to withdraw consent: you can revoke any permission you previously granted at any time, including HealthKit in iOS Settings. Withdrawing is as easy as granting.
• Right to lodge a complaint: if you believe your rights have been violated, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl, or with the supervisory authority in your country of residence.

We do not perform automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. All ranking and scoring algorithms run locally on your device for your own use.

For questions about data Apple, Google, RevenueCat, or Sentry hold about you, please contact them directly using the links above. For data held by Supabase on our behalf, contact us.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act gives you specific rights regarding your personal information.

Categories of personal information collected: in the past 12 months, we have collected the categories described in Section 1 above: identifiers (your account identifier and email address, if you signed in), health and fitness information and other content you created (your backup, if you signed in), commercial information (purchase records, via RevenueCat), and diagnostic information (crash reports, via Sentry). We do not collect categories that we have stated we do not collect (Section 2).

Sources of information: directly from you (when you enter data into the app or sign in), from your device (HealthKit, with your permission; crash diagnostics), from Apple (your account identifier and email when you sign in), and from Apple or Google Play (purchase receipts, via RevenueCat).

Business purpose: to provide the app's functionality, including backup and the friends leaderboard when you choose to sign in, to verify purchases, and to diagnose crashes.

Categories of third parties data is shared with: as described in Section 4 (Supabase, RevenueCat, Sentry, Apple, and Google), each acting as a service provider on our behalf.

Sale or sharing of personal information: we do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months.

Your California rights: you have the right to know what personal information we collect, to request deletion of your data, to correct inaccurate information, and to non-discrimination for exercising these rights.

How to exercise these rights: contact us at contact@alutemedia.com. You can also exercise access, correction, and deletion rights directly within the app, by deleting your account, or by uninstalling.

10. International data

Alute Media is based in the Netherlands. Your account and backup are stored by Supabase in Frankfurt, Germany, and crash reports are stored by Sentry in the European Union. RevenueCat, Sentry, Apple, and Google operate globally and may process data in the United States or other jurisdictions. Where personal data is transferred outside the European Economic Area, we rely on the safeguards offered by those providers, including Standard Contractual Clauses where applicable.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated through an app update or prominent notice.

12. Contact

For privacy questions or requests, contact us at contact@alutemedia.com.