Privacy Policy

1. Introduction

Liftory (operated by Sergio Jimenez Jimenez, an individual based in Switzerland) operates the Liftory fitness tracking application and website, and is the controller responsible for your personal data. You can reach us at info@liftory.ch. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information We Collect

We collect the following types of information:

Account Information

• Email address (required for account creation)
• Display name (optional)
• Profile picture (optional)

Google Sign-In

You may create an account or sign in using Google Sign-In. When you authenticate with Google, we receive and store:

• Your email address (to identify your account)
• Your display name (for your profile)
• Your profile picture (downloaded and stored on our servers)

We only use this information to create and manage your Liftory account. We do not access your Google Drive, Gmail, contacts, or any other Google services.

Workout Data

• Training plans and exercises you create
• Workout history and completed sets
• Weights, reps, and rest times

Messages and Chat Data

• Messages you send and receive within the app (including conversations with the AI trainer)
• Message metadata (timestamps, sender, recipient)

Chat messages are not end-to-end encrypted. Messages are protected by encryption in transit (TLS) and encryption at rest (server-level disk encryption). Conversations with the AI trainer may be analyzed to improve and tune how the AI trainer responds. We do not use them to train AI or large language models.

Usage Analytics (if enabled)

• App usage patterns and page views
• Device information and app version
• General location (country/region, not precise location)

3. How We Use Your Information

We use your information to:

• Provide and maintain the service
• Sync your data across devices
• Improve the app based on usage patterns
• Send important service notifications
• Facilitate communication between users and trainers
• Analyze AI trainer conversations to improve and tune how the AI trainer responds (we do not use them to train AI or large language models)

4. Data Sharing

We do not sell your personal data for money. We share limited data with advertising partners to display ads (see Advertising); some laws, such as the California CCPA/CPRA, may treat this sharing as a "sale" or "share," and you can limit it through your device settings. We may share data with:

• Service providers who assist in operating the app (hosting, analytics)
• Advertising partners (for displaying ads, subject to your consent)

5. Advertising

We use Google AdMob to display ads. AdMob may collect device identifiers for personalized advertising, subject to your consent. You can manage ad preferences in your device settings or opt out of personalized ads.

6. Data Storage and Security

Your data is stored securely on our servers. We use industry-standard encryption for data transmission (TLS) and server-level disk encryption for data at rest. Chat messages are stored on our servers to enable message delivery and history. Your data is retained only while your account is active. You can delete your account at any time from the app settings; when you do, we delete your personal data from our systems and do not keep it, except for records we are legally required to retain and residual copies in routine backups, which are purged on our regular backup cycle. The records we keep are limited to what documents money that changed hands (purchases, payments, refunds and the sessions they paid for); accounting law requires us to keep them for ten years, after which they are deleted too. Your training data, plans, photos and messages are erased straight away, and any subscription is cancelled at that moment. We may also delete accounts that have remained inactive for an extended period, together with their data. We do not guarantee that your data will be stored or available indefinitely, so we recommend keeping your own backups of anything you want to retain. While Liftory is in beta and under active development, we may also reset or migrate data as part of building, improving, or moving the service. Workout data is also stored locally on your device for offline access. We and our service providers may process your data in Switzerland, the EU/EEA, or other countries; where we transfer data outside your country, we rely on appropriate safeguards such as standard contractual clauses.

7. Your Rights (Swiss FADP and GDPR)

Depending on where you live, Swiss data protection law (the revised FADP) and the EU/EEA GDPR give you the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (via Settings > Delete Account)
• Export your data
• Object to or restrict certain processing, and withdraw consent where processing is based on consent
• Opt out of analytics (via Settings > Privacy)
• Lodge a complaint with a data protection authority (in Switzerland, the Federal Data Protection and Information Commissioner; in the EU/EEA, your local supervisory authority)

8. Children's Privacy

Our service is not intended for anyone under 16 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy in the app.

10. Contact Us

For privacy-related questions, contact us at: info@liftory.ch