Draft, pending review. This text has not been reviewed by a lawyer yet and may change before launch.
Privacy policy
This policy explains what personal data Liftorra processes when you use the app at app.liftorra.com, the Liftorra phone app once it is released (it is not in the app stores yet), and this website, liftorra.com. We wrote it to match what the app actually does. If anything here is unclear, write to hello@liftorra.com.
Who is responsible
The data controller is Liftorra, contact hello@liftorra.com. Postal address and legal entity details: pending.
The short version
- We store what you log so we can show it back to you, on every device, and share it with the people you choose.
- Your check-in numbers (bodyweight, calories, protein, steps) are only ever visible to you.
- No ads, no selling of data, no analytics or tracking scripts, no advertising cookies.
- You can delete your account and everything in it from the app, at any time.
What we store
Account. Your email address and a user id from our sign-in provider. If you sign in with Google, Google shares your name, email address and profile photo with us.
Profile. Your handle, display name, profile photo link, bio, and who can see your training.
Settings. Unit (kg or lb), first day of the week, the default visibility for new workouts, and your daily targets (protein, calories, steps, and a goal bodyweight if you set one).
Training. Your programs and weekly schedule, your workouts (date, exercises, sets, weights, reps, optional RPE and notes, duration, who can see it), days you skipped and the reason you picked, sessions you moved, exercises you created, and the records and exercise history we calculate from your workouts.
Check-in. The daily protein, calories, steps and bodyweight you enter.
Coach. Your warning-sign checklist, your answers to the weekly check, and the deload weeks you planned.
Social. Your friendships and friend requests, the groups you belong to and your role, invites, challenges and your challenge scores, feed items made from workouts you shared, and the reactions and comments you leave.
Plan. Your member number, whether you are a founding member, and for Liftorra Plus the subscription status, the date it renews or ends, and the subscription id and customer portal link from Lemon Squeezy. We do not receive or store your card details.
Imports. When you import from Notion, Strong or Hevy, the files are read in your browser and are not uploaded. We store only the resulting workouts, check-in days and exercises.
On your device. The app keeps your workout in progress, a copy of your data for offline use, your theme choice and a pending group invite in your browser’s storage (or the phone app’s storage). This stays on your device and is not used for tracking.
Technical data. When you load the app or this website, our hosting provider processes your IP address and basic request data to deliver pages and protect the service.
Health data
Your bodyweight, a skip reason such as injury or sick, and the warning signs you tick in the coach can count as data concerning health under Article 9 of the GDPR. Entering them is optional. We process them only to show them to you, based on your explicit consent, which you give by entering them and can withdraw at any time by deleting the entries or your account. Check-in numbers, skip reasons and the coach checklist are never visible to other users.
Why we use your data (legal bases)
- To provide Liftorra (your account, logging, history, records, sharing with people you choose): performance of our contract with you, Article 6(1)(b) GDPR.
- Payments for Plus (linking a subscription to your account): performance of our contract with you, Article 6(1)(b) GDPR. Keeping billing records: our legal obligations, Article 6(1)(c) GDPR.
- Health data as described above: explicit consent, Article 9(2)(a) GDPR.
- Security and abuse prevention (for example limiting heavy requests and keeping deleted accounts deleted): our legitimate interest in running a safe service, Article 6(1)(f) GDPR.
We do not use your data for advertising, we do not sell it, and we do not make automated decisions about you with legal or similar effects.
Who can see your data
Other Liftorra users see only what your settings allow: your profile card (handle, name, photo, bio) to anyone signed in; your training according to your profile and per-workout visibility (Public, Friends & groups, Friends or Only me; Friends & groups reaches your friends and the members of your groups); your challenge scores to members of your groups. See Privacy and who sees what for the full table.
Service providers. Liftorra runs on Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Functions and Firebase Hosting), provided by Google as our processor under Google’s data processing terms. If you use Google sign-in, Google also processes that sign-in under its own privacy policy.
Payments. If you buy Liftorra Plus, the payment is handled by Lemon Squeezy, our reseller and merchant of record. We pass it your email address and your Liftorra user id so it can link the subscription to your account; it collects your payment details, address and country itself to charge you, work out VAT and send invoices, as an independent controller under its own privacy policy. It sends us back the subscription status and dates.
We share data with authorities only when the law requires it.
Where your data is kept
Our server functions run in Google Cloud’s europe-west1 region (Belgium). The database region is pending confirmation. Google may process some data outside the European Economic Area; where it does, it relies on the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
We keep your data for as long as you have an account, so your history is there when you come back. Delete a workout, a check-in or an exercise and it is removed. Delete your account and we delete your profile, handle, settings, programs, workouts, check-ins, records, custom exercises, coach data, friendships, memberships, challenge scores, feed items, and your reactions and comments. A group you own passes to another member, or is deleted if you were its last member.
If an app you were still signed in on saves something in the minutes after you delete your account (for example a workout that was open in another tab), a daily cleanup removes it within two days. If a deletion stops partway, the same cleanup finishes it within a day.
After an account deletion we keep a minimal record (your user id and the time of deletion) so late background tasks cannot recreate your data, and so the app can show “Deleted user” instead of your name. Your user id, without your name or photo, can stay in other people’s activity and group history, where it reads “Deleted user”. Our server logs can name your user id and are kept for 30 days. Backup retention period: pending confirmation.
Your rights
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Most of this you can do in the app: edit or delete anything you logged, change who sees it, or delete your account in Me, then Settings. For anything else (for example a copy of data the app’s CSV export does not include), write to hello@liftorra.com from your account’s email address. We answer within one month.
You can also complain to your local data protection authority.
Children
Liftorra is not meant for children under 16. If you are under 16, please do not create an account.
This website
liftorra.com sets no cookies and runs no analytics. The kg / lb choice on the calculators may be remembered in your browser’s local storage; it never leaves your device.
Changes
If we change this policy in a way that matters, we will announce it on this page and in the app before the change applies. The date at the top shows the latest version.