1. Controller
Nikolaj Haak, Schwaigerner Str. 29, 75050 Gemmingen, Germany. Email: support@liftpal.app.
2. Website
The website runs on Cloudflare Workers and the global network of Cloudflare, Inc. Cloudflare processes IP addresses and technical request data to deliver and protect the website. The optional public strength leaderboard uses Cloudflare D1. Western Europe was selected as the database location preference; this does not guarantee that all processing stays within the EU. Stored Worker request logs are disabled.
The /c/, /r/ and /w/ routes can contain compressed link data created by the app. When you open such a link in a browser, the URL path and any query parameters, including link data they contain, are transmitted to Cloudflare to serve the page. The Worker renders a generic preview without these data. The website does not decode the shared content, pass it to analytics or put it in cookies or web storage. Stored Worker request logs are disabled.
Cloudflare may process additional technical data to operate and secure its network, as described in its privacy policy at https://www.cloudflare.com/privacypolicy/. We do not combine technical connection data into user or advertising profiles. The legal basis for delivering and securing the website is Art. 6(1)(f) GDPR. We use no analytics or marketing cookies, advertising pixels, session replay or external web fonts.
Some exercise guides contain YouTube videos. Only when you select “Load video” does your browser connect to YouTube (Google), transmitting data including your IP address, browser information and the referring page. We use youtube-nocookie.com, the privacy-enhanced mode; Google still processes connection data in this mode. Activation applies only to the selected video and is not stored permanently. “Close video” removes the embed. It cannot recall data already transmitted. Details: https://policies.google.com/privacy.
3. Optional strength leaderboard
The strength tool first calculates results only in your browser. Only when you expressly submit one exercise do we publish its exercise, load or added load, reps, estimated 1RM for loaded exercises, time, and a randomly generated label on the weekly and monthly boards. We do not ask for or publish your bodyweight, name, or email for this. Entries are self-reported and unverified. Publication relies on your consent under Art. 6(1)(a) GDPR.
To limit repeated submissions, we store an IP address hashed with a secret key and apply a daily limit. Such a hash can still be personal data. Abuse prevention relies on Art. 6(1)(f) GDPR. A random deletion key stays only in your browser so you can remove your entry. If you clear or change browsers, email your entry ID to support@liftpal.app. Older entries and abuse-control data are removed on leaderboard requests after 62 days. We use no advertising or analytics cookies.
The selected division (Women, Men or Open) is stored and published with the lift. Your scale choice stays in this browser and is separate from the public leaderboard division.
Publishing stores a random leaderboard identifier in your browser. Hashed browser and network identifiers limit repeated submissions on the server and are never public. Entries are removed after 62 days.
4. Local app data and coaching
LiftPal stores training history, unfinished workouts, exercises, sets, loads, notes, routines, training blocks, personal bests and fixed cycle baselines locally. It also stores goals and their progress, optional reflections, Flow and Arcade activity, settings and Wombat progress. Goals and notes can contain personal information that you enter. You do not need a separate LiftPal account for the core log. The training database is not automatically synchronized through CloudKit.
Coaching calculations use your local training history, performance, fatigue and recent RPE values. Using reflections or Apple Health recovery information is a separate choice. This processing runs in the app; these inputs are not sent to a remote AI service. Watch and widgets receive the information needed for their functions. Local reminders require system permission and may display a goal or routine name on the lock screen.
Processing needed to provide the app functions you request is based on Art. 6(1)(b) GDPR. Optional Health access and cloud publication use the permissions and consent described below. Local data remains until you delete it or uninstall the app; copies saved outside the app must be deleted separately. Reset Profile removes profile answers and personal 1RMs, not routines, sessions or your Wombat.
5. Password-protected file backups
You can create a .liftpalbackup file yourself. It includes local training history, unfinished workouts, saved plans and cycle baselines, restorable settings and progress, received cards, and saved Race/Hybrid history. Purchase identifiers, system permissions, cloud consent and display caches are excluded. It is not an export of the Apple Health database, although values already saved or derived in local workout records may be included.
Every new file is encrypted with AES-256-GCM and a password of at least eight characters. LiftPal cannot recover this password. The local backup folder and core app storage are excluded from automatic device/iCloud backups. Restoring replaces local data instead of merging histories; a previous local store is kept once as a recovery safeguard. Before uninstalling or changing devices, keep the password and a secure copy outside the app. Creating and restoring a requested backup is based on Art. 6(1)(b) GDPR.
6. Optional iCloud game backup
After you confirm setup or enable it in Settings, LiftPal saves game progress to the private CloudKit database of your Apple Account. The setup choice may be preselected, but no upload starts without confirmation. An available iCloud account, connection and sufficient storage are required; no separate LiftPal account is created.
The backup contains your Wombat's name and appearance, room, equipment, currency, tickets, rewards and selected game settings. It also contains Arcade progress, records and session summaries, plus short Flow logs with game, date, score and duration, and unlocked levels. Technical fields include an installation identifier, general device model, backup time and format/checksum information. Workouts, training plans, goals, habits, Health values and detailed cognitive answer/interaction data are not included.
Only the latest backup per installation is kept, using your iCloud storage. Restoring replaces game progress and does not merge saves. Turning the feature off stops new uploads but does not remove an existing copy; use Apple's iCloud storage management to delete it. Uninstalling LiftPal does not delete that cloud copy. The basis for this optional backup is consent under Art. 6(1)(a) GDPR.
7. Public Club, Arcade and Flow rankings
Viewing rankings does not publish your own results. After you confirm participation and publication, selected results are stored in Apple's public CloudKit database and shown to other Club users. Depending on the board, this can be an estimated 1RM, training-day count, Race time, Arcade record or level, or Flow XP and completed Apex levels. Public fields include your chosen alias, optionally your Wombat appearance, board/category, period, timestamp and, where applicable, your selected women, men or open division. Technical records contain version and consent references and an account-linked participant identifier derived from your CloudKit account. This identifier is pseudonymous, not anonymous.
The ranking upload does not contain your full training diary, individual working sets, private notes, bodyweight, Health sensor values or Flow answers. Flow rankings describe game progress, not IQ or a health assessment. Training, Arcade and Flow have separate publication choices. Automatic updates require the corresponding additional choice; consenting to training updates does not enable Arcade or Flow updates.
Publication is based on your consent under Art. 6(1)(a) GDPR and, where a result constitutes health data, Art. 9(2)(a). Participation is optional. Turning off automatic updates or ending Premium stops further automatic publication but does not remove existing entries. A ranking period is not a deletion deadline: previous periods and all-time records can remain until removed or participation is withdrawn.
Removing one result takes it out of the visible ranking; a technical record remains to prevent delayed uploads from restoring it. Withdrawing all Club participation deletes score, season and public identity records, while a minimal inactive participation marker remains to enforce your withdrawal across devices. These safeguards are based on our legitimate interest in respecting withdrawal and preventing unintended republication, Art. 6(1)(f) GDPR, for as long as needed for that purpose. You can request their review or erasure at support@liftpal.app. Offline removal may stay pending until the service confirms it.
8. Private connections, groups and shared plans
Private sharing uses Apple's private/shared CloudKit databases and is restricted to invited participants. An invitation email address you enter is sent to Apple to find the participant. Apple-provided participant names may appear within a private connection. CloudKit also processes account, membership, share identifiers and update information to control access and synchronize the share.
You choose the content to share. Plans may include titles, custom exercise names, notes, sets, repetitions, rest periods, load targets and the structure of multiweek blocks. Relative load targets remain percentages; your private 1RM and fixed cycle baseline are not shared with them. Separately enabled result sharing may include selected scores, category, period, timestamps and training-participation days. Free-text fields can contain personal information you enter, so check them before sharing.
Shared content remains available until the owner deletes the share or removes access. Recipients can leave it and may save their own local plan copy. Revoking cloud access cannot recall imported copies, screenshots or exported files. Removing shared results does not delete shared plans; manage those separately. Failed removal may remain pending until a connection is restored. Sharing is based on consent under Art. 6(1)(a) GDPR and, for health-related content, Art. 9(2)(a); participant lookup and access management needed for an invitation you request are based on Art. 6(1)(b).
9. Local ranking cache
The app may keep a limited, protected copy of public ranking rows for display for up to 24 hours. It is tied to the last checked iCloud account, excluded from backups and cannot grant sharing or publication rights. Rows may be outdated. Expired rows are deleted on the next cache access; there is no deletion timer while the app is closed. Disconnecting, changing accounts or withdrawing participation clears the associated cache. Follow and hide choices are also stored locally. This supports the requested ranking display under Art. 6(1)(b) GDPR.
10. Apple Health
Apple Health is optional and accessed only after your explicit permission. On iPhone, LiftPal may read steps, workouts, body mass, heart-rate variability (SDNN), resting heart rate, and sleep analysis. During a strength workout, the paired Apple Watch may read heart rate and active energy and save the completed strength-workout record to Apple Health.
Permissions can be changed in iOS or Health at any time. Apple Health data is not used for advertising, sold, or sent to RevenueCat. The legal basis is consent under Art. 6(1)(a) and, for health data, Art. 9(2)(a) GDPR.
Reading bodyweight requires a separate explicit permission. Recovery calculations stay in the app and provide training context, not a medical readiness assessment. Health values are not sent to RevenueCat or the game backup. A file backup may include values already saved or derived in local workout records; it does not export the Health database. Revoking Health permission stops future access but does not automatically delete records already stored in LiftPal or Health.
11. Purchases and RevenueCat
Apple handles App Store purchases and payments under its own responsibility. LiftPal uses RevenueCat, Inc. to check purchase status, restore entitlements, unlock paid features and provide subscription analytics. The SDK starts when the app opens, including for free users checking entitlement status. It processes an SDK-generated pseudonymous App User ID and product, purchase, transaction and entitlement information. Pseudonymous does not mean anonymous.
LiftPal does not send workout, Flow, Daily Goal or Apple Health content to RevenueCat. Purchase-status processing is based on Art. 6(1)(b) GDPR; subscription analysis and abuse prevention use Art. 6(1)(f), our interest in operating and maintaining the paid service. You may object to processing based on legitimate interests. A support identifier helps us locate your purchase profile for a data request. Necessary purchase records may be retained for legal obligations or legal claims; deleting the app or purchase profile does not cancel an Apple subscription. Provider information: https://www.revenuecat.com/privacy.
12. Support
If you email us, Apple iCloud Mail processes the sender address, message, and voluntary attachments. Do not send health data, medical documents, Apple ID passwords, or payment details.
We keep support requests until we have answered them and then delete them.
A support draft opened from the app can include the app version, build and iOS version; you can edit it before sending. A ranking report can include the entry, board and period identifiers. Your purchase Support ID is available to copy when needed.
13. Android testing program and former release list
For new sign-ups, we now use Brevo only for the Android testing program. It processes your email address, sign-up purpose, consent time and proof, plus technical delivery and unsubscribe data. Sign-up becomes active only after double opt-in. The legal basis is your consent under Art. 6(1)(a) GDPR.
The former list for the one-time iPhone release message is no longer offered for new sign-ups. You can withdraw consent at any time through the unsubscribe link or by contacting support@liftpal.app. The address is deleted after withdrawal or completion of the respective purpose unless narrowly limited retention is needed to prove consent or defend legal claims.
14. Recipients and international transfers
We use providers for hosting, security, email, and purchase management. Where data is processed outside the EEA without an adequacy decision, transfers rely on appropriate safeguards, particularly EU Standard Contractual Clauses.
Apple provides CloudKit for the optional features above and processes account and technical service data under its applicable terms: https://www.apple.com/legal/privacy/. Private game backups, private group shares and public Club records have different access scopes. An iCloud account does not make a public Club entry private. These services do not guarantee storage exclusively in the EU. Contact support@liftpal.app for information on the applicable transfer safeguards. LiftPal does not sell app data or use it for advertising or cross-app tracking.
15. Your rights and complaints
Subject to legal requirements, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent for the future at any time by emailing support@liftpal.app.
You may complain to a data protection authority. Our supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, poststelle@lfdi.bwl.de, https://www.baden-wuerttemberg.datenschutz.de/.