LiftiQ is a personal workout tracker operated by Eternal Dev LLC ("EternalDev", "we", "our", "us"), the controller responsible for the data described here. This policy explains what data we collect, why, the legal bases we rely on, where it is stored, who we share it with, and the rights you have over it. Plain language; no surprises.
Information You Provide
- Account: email address and a sign-in identifier from Google or Apple when you choose those providers. Your name comes from Google or Apple if you sign in with one of them, or you can choose to add it. You may optionally add your age, sex, body weight, and preferred weight unit (lbs or kg).
- Workout data: every workout you log — exercises, sets, reps, weights, durations, RPE values, dates, and any notes or routine names. This is the core of the app and is the majority of what we store.
- Body data and photos (optional): body measurements such as waist or arm circumference, a profile photo, and progress photos — only if you choose to add them.
- Support messages (optional): if you write to us from Settings → Support, we receive your message, its kind (a problem, an idea or feedback), your account email so we can reply, and your app version, device model, system version and language.
Sign-In Providers
When you sign in with Google or Apple, those providers share your name and email address with us. We do not receive your password, payment information, or any unrelated profile data. You can disconnect a linked provider at any time in Profile → Settings → Linked accounts, or remove everything by deleting your account from within the app.
Information Collected Automatically
- Connectivity status: the app checks whether your device is online to show an offline indicator and queue any workouts logged while offline. This is a simple on/off signal — the LiftiQ app itself does not collect your IP address or location. To operate and secure the service, our infrastructure providers (for example, Supabase) may process your IP address transiently.
- Ad and diagnostic data (free accounts only): when a free-tier banner ad loads, Google's advertising and consent services receive a device identifier and your IP address — from which an approximate, city-level location is derived — along with basic ad-interaction and diagnostic data. See "Ads on free accounts" below.
Ads on Free Accounts
LiftiQ is free to start, and free accounts see a single banner ad supplied by Google AdMob. On iOS, LiftiQ does not use the Advertising Identifier (IDFA) or show the App Tracking Transparency prompt, and Apple's privacy-preserving SKAdNetwork handles ad measurement. On Android, the Google Mobile Ads SDK may use the advertising ID for limited ad functions. No advertising profile is built from your workout data on either platform. In the EU and UK, we ask for your consent to ads through Google's consent form before any ad loads; ads are personalized only if you consent, and you can change your choice any time from Settings. Upgrading to LiftiQ Pro removes ads entirely.
Subscriptions and Purchases
LiftiQ Pro is an optional paid subscription. All payments are processed by Apple (App Store) or Google (Google Play) — we never receive or store your card or payment details. We use RevenueCat to manage subscriptions: RevenueCat receives your purchase history and an account or device identifier (linked to your account) so we can unlock Pro across your devices and restore past purchases. RevenueCat's privacy policy is at revenuecat.com/privacy.
Legal Bases for Processing (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract to create your account and sync your workouts and settings; your consent for personalized ads on free accounts (gathered through Google's consent form, which you can withdraw any time in Settings); and our legitimate interests in keeping the service secure, preventing abuse, and answering the messages you send us. You can withdraw consent or object to processing based on legitimate interests at any time.
Where Your Data Lives
Your account and workout data are stored in Supabase (Authentication and PostgreSQL), operated by Supabase Inc. and hosted on Amazon Web Services in the United States. Row-Level Security policies ensure each user can access only their own data. Photos are kept in Supabase Storage: your profile photo is stored at an unlisted web address that anyone with the link can open, and progress photos are private to your account. Supabase's privacy documentation is at supabase.com/privacy.
International Data Transfers
LiftiQ is operated from the United States, and our providers (Supabase, Google, RevenueCat, Apple, Resend) process data in the United States. If you use LiftiQ from the EEA, the UK, or elsewhere, your data is transferred to the United States. Where required, these transfers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (with the UK Addendum/IDTA for UK users). Contact us for more information about these safeguards.
Who We Share Data With
We do not sell your data, and we share it only with the service providers that make LiftiQ work, each acting on our behalf:
- Supabase — account authentication, database, and photo storage (United States). supabase.com/privacy
- Google AdMob — banner ads on free accounts (United States). policies.google.com/privacy
- RevenueCat — subscription management (United States). revenuecat.com/privacy
- Apple and Google — sign-in and payment processing when you use those options.
- Resend — emails the messages you send from Settings → Support to our support inbox, which Google hosts (United States). resend.com/legal/privacy-policy
We do not share your workout data with advertisers or third-party analytics companies.
How Long We Keep Your Data
We keep your account and workout data for as long as your account exists, so your history stays available across your devices. When you delete your account (Profile → Settings → Delete account), your account and all associated workouts, routines, photos, and profile data are removed from our live systems right away, with no way to recover them. Copies in backups, where they exist, are deleted as those backups cycle out. Providers such as Apple, Google, and RevenueCat retain purchase records as required for tax and audit purposes. Messages you send from Settings → Support are deleted from our database along with your account; the email copies in our support inbox are kept only as long as we need them to help you, and we delete them sooner if you ask.
Security
We protect your data with encryption in transit (TLS) and at rest, and with Row-Level Security so each account is isolated. No system is perfectly secure, but if a data breach affecting your personal data occurs, we will notify affected users and the relevant authorities where the law requires. You are responsible for keeping your sign-in credentials secure.
What We Do Not Do
- We do not sell your personal data.
- We do not use the Advertising Identifier (IDFA) and do not track you across other apps or websites.
- We do not share your workout data with advertisers or third-party analytics companies — the only third parties that receive any data are the providers listed above.
- We do not access your contacts, microphone, precise/GPS location, or Apple Health. The app asks for camera or photo-library access only when you choose to add a profile or progress photo, and uploads only the photo you pick.
- We do not use your content to train machine-learning models.
Your Rights
Depending on where you live, you have the right to access, correct, delete, or export (data portability) your data, to restrict or object to our processing of it, and to withdraw consent at any time.
- Access: view all of your workout data in the app — on Home, History, Progress, and Profile.
- Correction: edit any logged set, exercise, or profile field directly in the app.
- Deletion: tap Profile → Settings → Delete account. This permanently and immediately removes your account, all logged workouts, saved routines, and photos from our live systems. There is no recovery; the action is final.
- Export: contact us at appsupport.eternaldev@gmail.com, and we will send you a copy of your data outside the app.
- Withdraw ad consent: change your choice any time in Settings.
To exercise any right, contact us at appsupport.eternaldev@gmail.com. If you are in the EEA or UK and believe we have mishandled your data, you also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO).
California Privacy Rights
If you are a California resident, the CCPA/CPRA gives you the right to know the categories of personal information collected through the app, including by the ad SDK on free accounts (identifiers such as email and account ID; fitness and workout data; messages you send us and the app and device details sent with them; approximate location and device identifiers used for ads on free accounts; and purchase information), to access and delete that information, to correct it, and to opt out of any "sale" or "sharing" of personal information. We do not sell your personal information. Because free-tier ads may be considered "sharing" under California law, you can limit this by upgrading to Pro (which removes ads) or by declining ad consent where offered. We will not discriminate against you for exercising these rights. To make a request, contact us at appsupport.eternaldev@gmail.com.
Cookies, SDKs, and Tracking Technologies
LiftiQ is a mobile app and does not use website cookies. It includes third-party SDKs that may access device information: Google AdMob and Google's UMP consent SDK (ads and consent, free accounts only) and RevenueCat (subscriptions). On iOS, LiftiQ does not request App Tracking Transparency and does not access the Advertising Identifier (IDFA); on Android, the Google Mobile Ads SDK may use the advertising ID for limited, non-cross-app ad functions. We use no first-party analytics, crash-reporting, or attribution SDKs.
Children
LiftiQ is not directed at children under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has created an account, contact us, and we will delete the account.
Changes to This Policy
If we materially change how we handle data, we will update the effective date at the top of this page and, where required by law, notify you in-app or by email before the change takes effect.
Contact
Privacy questions, deletion requests, or concerns: appsupport.eternaldev@gmail.com.