Privacy Policy
This Privacy Policy describes how Lift X ("we," "our," or "the app") handles your information. Lift X is operated by Aluté Media, based in the Netherlands.
In plain terms: Lift X is a local-first app. The vast majority of your data — your workouts, body weight, nutrition logs, sleep records, ranks, scores, and invite codes — stays on your device and is never sent to us. We don't run a server that stores your personal data. We follow the principle of data minimization: we only process data necessary to provide the features you use.
1. What we collect
Data stored only on your device:
- Your profile information (name, username, bodyweight, goals, unit preferences)
- Your workouts, sets, exercises, and personal records
- Your nutrition, water, and macro logs
- Your sleep records and notification schedules
- Your ranks, scores, and muscle-group progress
- Your invite codes and referral records
None of the above is transmitted to Lift X servers or any third party. It lives in your device's local storage and is removed when you uninstall the app.
Data shared with third parties (described in section 3):
- Anonymous purchase records (via RevenueCat and Apple, for subscription verification only)
- Apple HealthKit data (read and write, device-local only — not transmitted to us)
- Standard network requests to a public exercise-image library
2. What we do NOT collect
- We do not use analytics tools (no Google Analytics, Mixpanel, Amplitude, PostHog, Firebase, or similar).
- We do not use third-party crash reporting or error tracking (no Sentry, Crashlytics, or similar). Apple may automatically send anonymized crash reports from your device to us through App Store Connect; these contain device model and OS version but no personal data, and you can disable this in iOS Settings → Privacy & Security → Analytics & Improvements → Share with App Developers.
- We do not use advertising identifiers or any ad networks.
- We do not operate a backend database that stores your personal information.
- We do not have user accounts — there is nothing to "log into" and no password to remember.
- We do not track your location.
- We do not read your contacts, photos, or device storage outside of what you explicitly share with us.
3. Third-party services
RevenueCat — we use RevenueCat to manage in-app subscriptions and verify purchases. When you start a subscription or trial, RevenueCat receives an anonymous, randomly-generated install ID along with your Apple purchase receipt. This ID is not linked to your name, email, or any personal information we hold. RevenueCat's privacy policy: revenuecat.com/privacy.
Apple StoreKit / App Store — all purchases are processed by Apple. We never see your payment method, billing address, or Apple ID. Apple's privacy policy applies to all payment transactions: apple.com/legal/privacy.
Apple HealthKit — with your permission, Lift X reads from Apple Health (steps, sleep, resting heart rate, water intake) and writes to it (workouts, water intake). All HealthKit data is processed on your device. Apple does not share HealthKit data with us, and we do not transmit it to any server. You can revoke HealthKit permissions at any time in iOS Settings → Health → Data Access & Devices → Lift X.
wger.de (exercise image library) — when you view an exercise illustration, your device loads the image from wger.de's public CDN. This involves a standard network request that includes your device's IP address, same as any webpage load. No Lift X user data is attached to these requests. Exercise illustrations are licensed under CC-BY-SA 3.0; full attribution is on our Credits page.
Apple Push Notification Service — Lift X schedules local notifications for bedtime reminders, wake alarms, and workout prompts. These are scheduled on your device and do not involve any remote server.
4. Apple HealthKit disclosure
In accordance with Apple's HealthKit requirements, we confirm:
- HealthKit data is used only to power features inside Lift X (training, recovery, nutrition, and progress tracking).
- We do not use HealthKit data for advertising or other data-mining purposes.
- We do not share HealthKit data with third parties without your explicit consent.
- HealthKit data is not backed up to a cloud service we control. It stays on your device and may be backed up by iCloud if you have enabled iCloud backup for Health data in your iOS settings.
5. Legal basis for processing
Where the EU General Data Protection Regulation (GDPR) applies, we process data on the following legal bases:
- Contract performance: subscription and purchase data processed via RevenueCat is necessary to deliver Lift X Pro features you have purchased.
- Consent: Apple HealthKit data is read or written only after you grant explicit permission in iOS. You may withdraw this consent at any time in iOS Settings.
- Legitimate interests: standard network requests, such as loading exercise images from wger.de, are made in our legitimate interest to provide the app's functionality, with minimal impact on your privacy.
6. Data retention
Because Lift X stores your data on your device, retention is controlled by you. Your data persists as long as the app is installed and is permanently removed when you uninstall. RevenueCat and Apple retain transactional records according to their own policies and applicable accounting laws (typically 7 years for tax compliance).
7. Children
Lift X is not directed at children under the age of 13. We do not knowingly collect information from children. If you believe a child has used the app, please contact us and we will advise.
8. Your rights (GDPR and similar regulations)
Because Lift X does not store your personal data on our servers, most data rights are exercised directly on your device:
- Right to access your data: your data is visible to you inside the app at all times.
- Right to rectification: you can edit any of your data inside the app.
- Right to delete your data: uninstall the app, or clear the app's data in iOS Settings → General → iPhone Storage → Lift X → Delete App. This removes everything except your subscription record with Apple.
- Right to restrict or object to processing: you can disable HealthKit access, revoke notification permissions, or stop using the app at any time.
- Right to data portability: you can export your workout history using the in-app Share functions, where available.
- Right to withdraw consent: you can revoke any permission you previously granted at any time, in iOS Settings.
- Right to lodge a complaint: if you believe your rights have been violated, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl, or with the supervisory authority in your country of residence.
We do not perform automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. All ranking and scoring algorithms run locally on your device for your own use.
For questions about data Apple or RevenueCat hold about you, please contact them directly using the links above.
9. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act gives you specific rights regarding your personal information.
Categories of personal information collected: in the past 12 months, we have collected the categories described in Section 1 above. We do not collect categories that we have stated we do not collect (Section 2).
Sources of information: directly from you (when you enter data into the app), from your device (HealthKit, with your permission), and from Apple (purchase receipts, via RevenueCat).
Business purpose: to provide the app's functionality, to verify purchases, and to enable features you opt into.
Categories of third parties data is shared with: as described in Section 3 (RevenueCat, Apple, wger.de). We do not share data with any other parties.
Sale or sharing of personal information: we do not sell or share your personal information with third parties for monetary or other valuable consideration. We have not done so in the past 12 months and do not intend to do so.
Your California rights: you have the right to know what personal information we collect, to request deletion of your data, to correct inaccurate information, to opt out of any sale or sharing (we do neither), and to non-discrimination for exercising these rights.
How to exercise these rights: contact us at contact@alutemedia.com. Because Lift X stores most data on your device, you can also exercise access and deletion rights directly within the app or by uninstalling.
10. International data
Aluté Media is based in the Netherlands. RevenueCat and Apple operate globally and may process data in the United States or other jurisdictions. By using Lift X you acknowledge this possibility.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated through an app update or prominent notice.
12. Contact
For privacy questions or requests, contact us at contact@alutemedia.com.