Privacy Policy

LiftChat ("we", "us") is a workout tracker with a chat assistant: the liftchat.app website, the web app, the Telegram bot and mini app, and the iPhone app. This policy explains what data we process, why, and how you control it, in line with the EU General Data Protection Regulation (GDPR).

• Account — what your sign-in method (Telegram, Google, Apple, or email) provides: an identifier, name, email, Telegram username. Email passwords are stored only as a hash.
• Profile — your onboarding answers: age, body type (male/female), weight, activity level, goal, experience, training frequency, equipment; interface language and time zone.
• Workouts — routines, sets, weights, reps, time, records, your custom exercises.
• Chats — your messages to the assistant and its replies.
• Photos — only the ones you upload yourself for a workout recap card.
• Purchases — subscription status, AI allowance, and payment history from Apple. We never receive or store card details.
• Technical data — pseudonymized usage events (screens, taps): they carry an internal account ID, never your name, email, or message texts; device type, language, IP address (in analytics events and server logs); on iPhone, a notification token for timers.
• Website — your email if you leave it for a promo code; visit events and traffic source (UTM tags); a visitor ID and language in browser storage.

• To run the service: sign-in, storing routines and workouts, stats, one account across Telegram, the browser, and iPhone — performance of the contract (Art. 6(1)(b) GDPR).
• So the assistant can build routines and review your results — performance of the contract.
• To process payments and track your subscription and AI allowance — performance of the contract and legal obligations.
• To find bugs and improve the product from pseudonymized analytics and logs — legitimate interest (Art. 6(1)(f) GDPR).
• To send promo-code emails — only with your consent (Art. 6(1)(a) GDPR).

• Third-party AI providers (currently OpenAI; we may also use Anthropic) — to generate assistant replies we send them your messages, profile, and workout data. We don't send anything that identifies you: name, email, Telegram username and ID, phone number, Apple and Google IDs, IP address — nor our own account IDs. Whatever you write in a message yourself goes along with that message. Under their API terms, providers don't use this data to train models. This happens only with your separate consent, given in the app before you first use AI features; withdraw it any time with the “AI processing” toggle in your profile — AI features are then unavailable.
• Apple — to process payments, under its own terms.
• Telegram, Google, and Apple — only as part of signing in with them.
• No one else: we don't sell your data or share it with third parties, except where required by law.

Data is stored on our own servers. Analytics run on our self-hosted RudderStack — no third-party trackers or ad networks; analytics data is not shared with third parties or used for advertising. We keep data while your account exists. Once you delete the account, its data in the app is erased immediately. Within 24 hours, IP addresses are removed from analytics, and the remaining events lose their link to you: all they keep is an internal ID that, once the account is deleted, points to no one — the events become anonymous. When consent is withdrawn, data is destroyed within 30 days at most; backups are overwritten in the course of regular rotation.

In the app: Profile → Danger zone → Delete account. This removes your account, profile, routines, workouts, chats, custom exercises, and public links to recaps and routines; IP addresses are removed from analytics, and the remaining analytics events become anonymous (see “Storage and retention”). It cannot be undone.

Deleting the account does not cancel an App Store subscription — cancel it in your Apple ID settings. You can also request deletion by email at the address below.

Processing is based on your consent to personal data processing, given at sign-up or sign-in — a separate document, linked below. You can withdraw it at any time: in the app (Profile → Danger zone → Delete account) or by email at the address below. Withdrawal stops processing and deletes the account and its data.

Consent to AI processing (sending data to AI providers) is separate: it is given in the app before you first use AI features and withdrawn with the “AI processing” toggle in your profile, without deleting the account.

Consent to Personal Data Processing

The service is intended for people aged 16 and over. We do not knowingly collect data from children under 16; if we learn of such an account, we delete it.

• Access a copy of your data, correct it, or take it with you. On any plan, a copy can be requested by email at the address below.
• Delete your account and data at any time.
• Object to processing based on legitimate interest, or withdraw consent — e.g. via the unsubscribe link in any email.
• Lodge a complaint with your data protection authority.

We'll announce material changes to this policy in the app.

For any privacy-related questions, email us at liftchat@dvl.pm