Data We Collect
Account data: name, email address, and a securely hashed password (we never store your password in plain text).
Training data you enter: exercises, sets, repetitions, weights, workouts, session history, optional profile details (date of birth, sex, height, weight and training experience) and unit preferences.
Files and photos you choose to import: spreadsheets, documents, or images of workout plans, processed to extract training data.
Program questionnaire answers: if you ask the App to build a training program, your answers to its questions — your goal, training experience, training days and session length, available equipment, current strength and preferred training style, age, sex, height and weight, any injury areas and anything you write about them, your answer to a short health-safety question (whether a doctor has told you to avoid exercise, or you get chest pain or dizziness when active), the muscles you want to focus on, and exercises you would rather avoid.
Body scans and measurements you add: InBody or DEXA reports you upload (photos or PDF files), the values read from them or entered by you, and tape measurements (for example waist, arms and legs).
Subscription status: your plan, trial and renewal dates. Payment details (card numbers, billing address) are handled entirely by Apple or Google — we never receive them.
Feature requests & issues board: posts you write (title, details and any screenshots you attach), the app language you were using and, for issue reports, your platform and app version; your votes; and the posts and authors you hide or report.
Usage and device data: the screens you open and the actions you take in the App, information about your device (such as its model and operating system) and the app version, collected through our product analytics and crash-reporting tools (see Product Analytics and Crash & Error Reporting).
How We Use Data
To provide the App: storing your training history, computing progress statistics, and syncing your data across sessions.
To process AI imports: files or photos you submit are sent to Anthropic (Claude API), our AI processing provider, solely to extract workout data. Per Anthropic's API terms, API inputs are not used to train their models.
To build your training program: if you use the program builder, your questionnaire answers are sent to Anthropic (Claude API), our AI processing provider, solely to design your program. Per Anthropic's API terms, API inputs are not used to train their models. The program is saved to your account, and any of your date of birth, sex, height, weight or training experience that your profile did not have yet is saved to your profile, where you can change it. Your injury details, what you write in the questionnaire and your health-safety answer are used only to build the program; we keep no other record of them.
To manage subscriptions: we use RevenueCat to coordinate purchases made through the Apple App Store or Google Play and to keep your subscription status up to date.
To understand how the App is used and to improve it: we use product analytics (see Product Analytics) and crash and error reports (see Crash & Error Reporting).
To communicate essential account messages, such as password reset emails, which are sent through our email delivery provider.
To run the feature requests & issues board: posts are shown to other App users without your name, email or any other identifier. Screenshots are re-encoded on our servers and their embedded metadata (such as location) is removed. Post text and screenshots are checked by Anthropic (Claude API) for spam, offensive content and personal information before they are published.
Body Scans and Measurements
When you upload an InBody or DEXA report, the file is sent to Anthropic (Claude API), our AI processing provider, solely to read the numbers on it. Per Anthropic's API terms, API inputs are not used to train their models. The values are saved to your account automatically; values the AI wasn't sure about, or couldn't read, are marked for you to check, and you can correct or delete any value.
We keep the values and the original files you uploaded, private to your account. Original files are stored in a private, encrypted storage bucket that only the App's servers can access, and are shown only to you. When a newly read scan is your most recent weight reading, the App also updates the body weight in your profile.
Body composition results and measurements can be health data. Adding them is your choice, they are used only to show your progress to you, and they are never sold, used for advertising, or sent to our analytics or crash-reporting tools. You can delete any scan or measurement, or all of your scans at once (Analytics → Body → ⋯ → Delete all scans), at any time; deleting your account erases all of them, and the original files are removed from our storage with them (see Data Retention).
Who We Share Data With
We share data only with the service providers needed to run the App: Anthropic (AI parsing of files you submit, including body scan reports, building your training program from your questionnaire answers, and automated checks of board posts), RevenueCat (subscription management), Apple / Google (payment processing), Sentry (crash and error reporting), PostHog (product analytics), our email delivery provider (password reset emails), and our hosting provider (encrypted storage of the database and of the body scan files you upload). We never sell personal data and never share it for advertising.
Crash & Error Reporting (Sentry)
The App uses Sentry, a third-party crash and error reporting service, to detect and fix problems. When you use the App, Sentry automatically collects: crash and error reports with stack traces; performance and diagnostics data (app startup time, navigation timing, network request metrics); device and operating-system information and the app version; and privacy-masked session replays (by default 10% of sessions, and 100% of sessions where an error occurs).
Session replays are privacy-masked at capture — all on-screen text and images are blocked, so passwords, payment details, your training data and your body data are never recorded. When you are signed in, crash and diagnostics reports are associated with your account id and email so we can correlate an issue to an affected account; this association is cleared when you sign out. Sentry processes this data on our behalf solely to keep the App stable; it is not used for advertising.
Product Analytics (PostHog)
The App uses PostHog, a third-party product analytics service, to understand how the App is used so we can improve it. PostHog collects: the screens you open and the actions you take in the App, with basic details about them (for example, when you save a set: the exercise name, the number of sets and reps, and the top weight; when you start building a program: your goal, experience, training days, session length and equipment); device information (model, manufacturer, operating system and version, language, time zone and screen size) and the app version; your app language, account type, weight unit and subscription status; and the network (IP) address your device connects from, which PostHog uses to estimate an approximate location (country and city).
When you are signed in, these events are associated with your account id and email so we can understand how the App is used over time. Events from before you sign up or sign in use a random identifier, which is linked to your account when you do; the association is cleared when you sign out. Analytics never include the values of your body scans or measurements, your date of birth, sex, height or weight, your injury details or anything you write in the program questionnaire, or the content of files you import. Session recording is turned off. PostHog processes this data on our behalf in its EU region, solely to help us improve the App; it is not used for advertising.
Data Retention
Your data is kept while your account exists. Deleting your account (Profile → Settings → Delete account) permanently erases your account, training data, body scans and measurements, preferences, and subscription record right away. The original body scan files you uploaded (InBody and DEXA photos and PDFs) are removed from our storage at the same time. Store billing records are retained by Apple/Google under their policies. Usage data held by our analytics and crash-reporting providers (PostHog and Sentry) is kept separately, for those services' retention periods, and is not erased automatically when you delete your account — contact us if you want the analytics data linked to your account deleted.
Posts and votes on the feature requests & issues board are the exception: when you delete your account they stay on the board, unlinked from you and without any identifier, so the community's votes are not lost. You can delete any of your posts yourself at any time from the post's menu. The posts and authors you chose to hide are deleted with your account.
Security
Data is transmitted over encrypted connections (HTTPS/TLS). Passwords are hashed with bcrypt. Access to production systems is restricted. No system is perfectly secure — please use a strong, unique password.
Your Rights
You can view and edit your profile data in the App, your training data is visible in your history, and you can delete your account and training data via in-app account deletion. Depending on your location (e.g. GDPR, CCPA) you may have additional rights — to access, correct, port, or erase your data, or to object to processing. Contact us to exercise them.
Children
The App is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Changes to This Policy
We may update this policy from time to time. Material changes will be announced in the App or by email, with the effective date above updated.
Contact
Privacy questions or requests: support@lifterlog.app