Privacy Policy

Last updated: 17 October 2026

This Privacy Policy describes how Lift X ("we," "our," or "the app") handles your information. Lift X is operated by Alute Media, based in the Netherlands.

In plain terms: Lift X needs an account. You can answer the setup questions before creating one, but nothing leaves your phone until the account exists. From then on a copy of your Lift X data is backed up to our servers and kept up to date automatically, and a summary of your training (scores, ranks, and counts, never your logs) is shared with the friends you add. This page explains exactly what leaves your phone, when it leaves, who can see it, and how to remove it.

We do not show advertisements inside Lift X and we do not use third-party analytics tools. The app does send a small set of usage figures to our subscription provider, described in section 4. Lift X does advertise on other apps and websites. On iOS, if you allow it at the iOS tracking prompt, a limited amount of information is shared with a measurement company so we can tell which of our ads brought people to the app. This is described in full in section 5. Nothing you do inside the app is part of that, and you can switch it off at any time in iOS Settings.

1. What we collect

Data stored on your device:

Until your account exists, none of the above is transmitted to Lift X servers or to any third party. It lives in your device's local storage and is removed when you uninstall the app.

Data sent to our servers once you have an account (described in section 3):

Data shared with third parties (described in sections 4 and 5):

2. What we do NOT do

3. Your account, your backup, and your friends

Lift X requires an account. The first screen offers Sign up and Log in, and the app cannot be used past that point without one, because your backup, your username, and the friends leaderboard all depend on it. You can start the setup questions before the account exists; a new account created by email is saved on the last setup screen, and nothing is uploaded until setup is complete.

Creating your account and signing in

There are three ways to create an account or sign in. Apple and Google are available on iOS; Google and email are available on Android.

Your email address is stored only as part of your account. We do not use it for marketing.

Your cloud backup

Backup is automatic. As soon as your account exists and setup is complete, Lift X uploads a copy of your data, and from then on every change you make is uploaded again shortly after you make it, and whenever you leave the app. You do not need to tap anything, and there is no separate "back up now" step. Signing out stops the uploads; deleting your account removes the copy on our servers (below).

The backup contains everything listed under "Data stored on your device" in section 1: your workouts, cardio sessions, nutrition and water logs, sleep records, routines, goals, ranks, settings, invite code, and your profile including your name, date of birth, and bodyweight. It also contains the readings Lift X imported from Apple Health: your daily step counts, your sleep, and your water intake. Once you sign in, those readings leave your phone as part of your backup. If you would rather keep Apple Health readings off our servers, do not connect Apple Health; you can disconnect it at any time in iOS Settings. Your Pro or subscription status is never part of the backup. It is checked again with RevenueCat on every device.

The backup is stored with Supabase, our database provider, on servers in Frankfurt, Germany, inside the European Union. It is stored as one record per account, and it is protected so that only your own signed-in account can read or replace it. We keep the current backup and one older version. Each time the current backup is replaced, the version it replaced becomes the safety copy, unless the safety copy already holds more workouts, in which case the richer one is kept. You can restore either version to a new phone from Profile after signing in there. Restoring replaces the data on that phone with the copy from the server.

Usernames, friends, and the leaderboard

When you sign in, your username is registered on our servers so that it is unique and so that friends can find you. Any signed-in Lift X user who types your exact username can find you and send you a friend request. Nobody can browse a list of users or search by partial name, and nobody sees your scores until the two of you are friends. The one exception: when you send someone a friend request, they see your username and your overall rank badge before they decide. If you decline a request, that person cannot find you again.

Once you and another person are friends, each of you can see the other's leaderboard row: on the leaderboard, and on the friend page that opens when you tap a friend. It is calculated on your phone and uploaded automatically while you are signed in, in the same way as your backup.

What your friends see

Your leaderboard row contains:

Friends see scores from 0 to 100, ranks, and counts, never your logs. Your workouts, sets, and weights, your meals and calories, your sleep, water, and steps, and your body weight are never visible to friends; they stay in your backup, which only you can read. The radar scores are calculated on your phone from the last seven days:

On iPhone, the sleep, water, and steps behind Recovery and Cardio can come from Apple Health if you have connected it; on Android they are what you type in. Without Pro, Nutrition and Cardio are not calculated and show as empty. Your muscle-group scores come from your best sets, your bodyweight, and your sex; only the score and the rank are shared.

Only you and the people you have accepted as friends can see your leaderboard row, apart from the rank badge shown with a friend request you send (above). It is processed to run the friends feature, on the same basis as the rest of your account: contract performance (section 6). Where a score is calculated from readings imported from Apple Health, those readings are used only with the permission you gave in iOS, the consent described in section 6.

To stop sharing with someone, remove them as a friend: tap them on the leaderboard, then "Remove friend". From that moment neither of you can see the other's row. Signing out stops your row from being updated, but your friends keep seeing it as it was until you remove them or delete your account. Deleting your account, or choosing "Start fresh" instead of restoring your backup when you sign in, deletes your row and all of your friendships from our servers.

Invite codes

Lift X gives you an invite code to share with friends. When you sign in, the code is stored with your account so that it keeps working if you move to a new phone. We do not currently offer rewards for invites, and we do not collect any information about the people you invite.

Signing out and deleting your account

Signing out stops all uploads immediately and returns you to the sign-in screen; Lift X cannot be used while signed out. Your data stays on your phone for when you log back in to the same account, and your backup, username, friendships, and leaderboard row stay on our servers so that you can sign in again later, on this phone or another one. Your friends keep seeing your leaderboard row as it was when you signed out.

You can delete your account inside the app at any time: Profile, then Account, then "Delete account". This permanently deletes your Lift X account, your sign-in details, your backup, your safety copy, your username, your friendships, your leaderboard row, and your invite code from our servers. It happens right away and cannot be undone.

Deleting your account also erases the Lift X data on your phone. "Delete" means gone: the next person who signs up on that phone must not inherit your history. Export your data from Profile first if you want to keep a copy. Deleting your account does not cancel a subscription, which is managed by the App Store or Google Play.

Your phone's data is erased in two other situations, each after a warning and a confirmation: when a different account signs in on a phone that already holds someone's data ("Erase and continue"; "Log out" keeps the data instead), and when you choose "Start fresh" instead of restoring your backup at sign-in. Start fresh at sign-in also deletes your backup, your safety copy, your username, your friendships, your leaderboard row, and your invite code from our servers.

If you cannot access the app, you can ask us to delete your account by emailing contact@alutemedia.com. The steps, what is deleted, and what is kept are set out on their own page: lift-x.app/delete-account.

4. Third-party services

Supabase is our database and sign-in provider. It stores your account and sign-in details (your email address and, for email accounts, your hashed password), your backup, your username, your friendships, and your leaderboard row, on servers in Frankfurt, Germany. Supabase processes this data only on our behalf, to run Lift X for you, and does not use it for its own purposes. Supabase's privacy policy: supabase.com/privacy.

Resend (Plus Five Five, Inc., San Francisco, United States) sends the emails about your account on our behalf: the six-digit code when you reset an email-account password, and security notices such as the one that tells you your password was changed. To do that it processes your email address and the content of those emails, and it uses them for nothing else. Resend keeps its records of these emails in the United States, a transfer covered by the European Commission's Standard Contractual Clauses in our agreement with Resend. Resend's privacy policy: resend.com/legal/privacy-policy.

RevenueCat manages in-app subscriptions and verifies purchases. From the first time you open Lift X, RevenueCat holds an anonymous, randomly-generated install ID for your copy of the app, and when you start a subscription or trial it receives your App Store or Google Play purchase receipt under that ID.

Usage figures sent to RevenueCat. Under the same install ID, Lift X also sends RevenueCat a small set of figures about how the app is used:

We use these figures to understand which features matter to people and where new users stop, so that we can improve the app. They are not used for advertising, they are not sold, and they are not shared with anyone else. They contain nothing you logged: no workouts, weights, meals, sleep, or body measurements.

Is this linked to your account? No. The install ID is not connected to your Lift X account, your username, your name, or your email: Lift X does not tell RevenueCat who you are when you sign in, and we hold no table that matches install IDs to accounts. The figures are tied to that install ID and to any purchases made under it, and to nothing else. RevenueCat's privacy policy: revenuecat.com/privacy.

Sentry receives automatic reports when the app crashes, so we can fix the problem. A crash report contains the technical details of the failure: the error, the code path that produced it, your device model, and your operating system version. We have configured Sentry not to collect personal information: user identifiers are removed from every report before it is sent, request details are stripped, web addresses recorded in the report are trimmed so that they cannot contain your account ID, and we do not use Sentry's session replay, screenshot, or performance monitoring features. Crash reports are sent to Sentry's servers in the European Union, are not linked to you, and are kept for up to 90 days. Sentry's privacy policy: sentry.io/privacy.

Apple App Store (iOS) and Google Play (Android) process all purchases. We never see your payment method, billing address, Apple ID, or Google account. Subscriptions are managed in that same store: on iOS via Settings → Apple ID → Subscriptions, and on Android via the Play Store app under Payments & subscriptions. The relevant store's privacy policy applies to your payment transactions: Apple, apple.com/legal/privacy; Google, policies.google.com/privacy.

Apple HealthKit (iOS only): with your permission, Lift X reads from Apple Health (steps, sleep, resting heart rate, water intake) and writes to it (workouts, water intake). Reading and writing happens on your device, and Apple does not share HealthKit data with us. Your resting heart rate is shown to you on Home and is not saved into your Lift X data or uploaded. Your steps, sleep, and water intake are saved into your Lift X data so the app can show your history, which means that if you sign in, they are included in your cloud backup as described in section 3. They also count towards your Recovery and Cardio scores, which your friends can see (section 3); the readings themselves are never visible to friends. They are never shared with advertisers and never used for anything other than showing you your own data and calculating your scores. You can revoke HealthKit permissions at any time in iOS Settings → Health → Data Access & Devices → Lift X. Lift X on Android does not integrate with Apple Health or any equivalent health platform: steps, sleep, and water on Android are what you type in, and they are handled like the rest of your Lift X data.

AppsFlyer (iOS only): we use AppsFlyer to measure which of our advertisements lead to app installs and subscriptions, only if you allow tracking at the iOS prompt. This is described in detail in section 5. AppsFlyer's privacy policy: appsflyer.com/legal/privacy-policy. AppsFlyer's representative in the European Union is AppsFlyer Germany GmbH, Kurfürstendamm 11, Berlin, Germany.

Notifications: Lift X schedules local notifications for bedtime reminders, wake alarms, rest timers, and workout prompts. These are scheduled on your device and do not involve any remote server or push notification service.

5. Advertising measurement (iOS only)

We pay to show advertisements for Lift X on other apps and platforms. To understand which of those advertisements are worth paying for, we need to know whether someone who tapped an ad went on to install the app and subscribe. We use AppsFlyer, a mobile measurement company, to do this.

What is shared, if you allow it:

What is never shared: anything you do inside the app. No workouts, sets, exercises, personal records, body weight, body measurements, heart rate, sleep, hydration, nutrition, ranks, scores, goals, or profile information. None of this is sent to AppsFlyer, to any advertising platform, or to us.

AppsFlyer processes this on our behalf and shares the result with the advertising platform the ad appeared on, so that platform can attribute the install to the correct campaign. Our advertising partners for this are AppsFlyer, Meta, and TikTok.

How you control this

Before any of this begins, in every country, Lift X shows one screen after setup explaining what is measured, who the partners are, that the app works the same either way, and where the answer can be changed. Tapping Continue brings up the iOS App Tracking Transparency question. That question is the consent: "Allow" means yes to advertising measurement, "Ask App Not to Track" means no.

If you choose "Ask App Not to Track", the AppsFlyer software never starts. No identifiers are collected, no data is sent, no request is made to AppsFlyer at all, and nothing is forwarded to Meta or TikTok, including the subscription events our payments provider would otherwise forward on our behalf.

If you choose "Allow", measurement starts, and your advertising identifier is used for it.

You can change your answer at any time in iOS Settings under Privacy & Security, then Tracking. Lift X reads the setting every time it opens: turning it off stops the AppsFlyer software and halts all further sharing, and turning it on starts measurement from then on. Profile has a row, "Ad tracking", that opens that setting.

Apple's SKAdNetwork. Separately from the above, Apple operates a built-in measurement framework called SKAdNetwork. When you install an app after tapping an ad, Apple may send the advertising platform a privacy-preserving, aggregated signal that an install occurred. This is done by Apple, not by us, it does not identify you, and it happens regardless of the choices described in this section. We have no ability to switch it off and receive no personal data from it.

Android. Lift X on Android does not run AppsFlyer or any other advertising measurement. The AppsFlyer software is present in the Android app's code, because the two versions are built from the same source, but it is never started: no identifiers are collected for it, the app does not use the Android advertising ID, and nothing is sent to AppsFlyer, Meta, or TikTok. Nothing in this section applies to the Android version.

Where the EU General Data Protection Regulation (GDPR), the UK GDPR, or equivalent laws apply, we process data on the following legal bases:

7. Data retention

Data on your device persists as long as the app is installed and is permanently removed when you uninstall.

Your account, your backup, your safety copy, your username, your friendships, your leaderboard row, and your invite code are kept for as long as your account exists. Signing out does not delete them. Deleting your account deletes all of them right away.

RevenueCat, Apple, and Google retain transactional records according to their own policies and applicable accounting laws (typically 7 years for tax compliance). The usage figures described in section 4 are kept by RevenueCat with the record for your anonymous install ID. Because that ID is not linked to your account, deleting your account does not remove them, and we cannot find them from your account. If you have made a purchase, email us the order number from your Apple or Google receipt and we can find that record and delete it. Without a purchase the record cannot be matched to you, by us or by anyone else.

Sentry keeps crash reports for up to 90 days.

Our email provider, Resend, keeps its own record of account emails (a password-reset code, a security notice) for 30 days.

Our hosting provider, Supabase, keeps technical logs of requests for up to 7 days, after which they are deleted automatically.

Where advertising measurement is active, AppsFlyer retains the attribution data described in section 5 according to their own retention policy. Turning Ad tracking off in iOS Settings stops further collection; to request deletion of data already collected, contact us.

8. Children

Lift X is not directed at children under the age of 13. Setup asks for your date of birth, and a date under 13 ends it: if an account was already created with Apple or Google, it is deleted immediately and the phone is erased, and nothing is uploaded. We do not knowingly collect information from children. If you believe a child has used the app, please contact us and we will advise.

9. Your rights (GDPR and similar regulations)

Most of your data is on your device, and the copy on our servers is under your control from inside the app:

We do not perform automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. All ranks and scores are calculated on your device; the results are shown to you and, as described in section 3, to the friends you accept.

For questions about data Apple, Google, RevenueCat, Sentry, or AppsFlyer hold about you, please contact them directly using the links above. For data held by Supabase or Resend on our behalf, contact us.

10. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act gives you specific rights regarding your personal information.

Categories of personal information collected: in the past 12 months, we have collected the categories described in Section 1 above: identifiers (your account identifier and email address), health and fitness information and other content you created (your backup), commercial information (purchase records, via RevenueCat), internet or other electronic network activity information (the usage figures described in section 4, via RevenueCat), diagnostic information (crash reports, via Sentry), and, on iOS and only with your permission, identifiers and commercial information as described in the advertising measurement section (section 5). We do not collect categories that we have stated we do not collect (Section 2).

Sources of information: directly from you (when you enter data into the app or sign in), from your device (HealthKit, with your permission; advertising identifiers, with your permission; crash diagnostics), from Apple or Google (your account identifier, email, and first name when you sign in with them), and from Apple or Google Play (purchase receipts, via RevenueCat).

Business purpose: to provide the app's functionality, including your account, backup, and the friends leaderboard and friend pages, to verify purchases, to diagnose crashes, and to measure the effectiveness of our advertising.

Categories of third parties data is shared with: as described in Section 4 (Supabase, Resend, RevenueCat, Sentry, Apple, and Google), each acting as a service provider on our behalf, and, on iOS, AppsFlyer and the advertising platform the ad appeared on.

Sale or sharing of personal information: we do not sell your personal information for money. On iOS, if you allow tracking, identifiers and install and purchase events are disclosed to AppsFlyer and to the advertising platform for the purpose of attributing our own advertising. Depending on interpretation this may constitute "sharing" under the CPRA.

How to opt out of sharing: choose "Ask App Not to Track" at the iOS prompt, or turn off Ad tracking for Lift X in iOS Settings afterwards. Either way nothing is shared with AppsFlyer or the advertising platforms; a change in Settings takes effect the next time the app opens.

Your California rights: you have the right to know what personal information we collect, to request deletion of your data, to correct inaccurate information, to opt out of any sale or sharing, and to non-discrimination for exercising these rights. You receive the same full app whether or not advertising measurement is enabled.

How to exercise these rights: contact us at contact@alutemedia.com. You can also exercise access, correction, and deletion rights directly within the app, by deleting your account, or by uninstalling.

11. International data

Alute Media is based in the Netherlands. Your account and backup are stored by Supabase in Frankfurt, Germany, and crash reports are stored by Sentry in the European Union. RevenueCat, Sentry, Resend, AppsFlyer, Apple, and Google operate globally and may process data in the United States or other jurisdictions. AppsFlyer's representative in the European Union is AppsFlyer Germany GmbH, Kurfürstendamm 11, Berlin, Germany. Where personal data is transferred outside the European Economic Area, we rely on the safeguards offered by those providers, including Standard Contractual Clauses where applicable.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated through an app update or prominent notice.

13. Contact

For privacy questions or requests, contact us at contact@alutemedia.com.