01
1. Controller
Nikolaj Haak, Schwaigerner Str. 29, 75050 Gemmingen, Germany. Email: support@liftpal.app.
02
2. Website
When you visit the website, technically necessary connection data such as IP address, time, requested page, HTTP status, browser, and device information may be processed to deliver and secure the service and investigate errors. The legal basis is Art. 6(1)(f) GDPR.
This connection data is not anonymous when first collected; an IP address may be personal data. We do not combine it into user or advertising profiles. Technical hosting and security service providers support delivery and protection. Logs are deleted or genuinely anonymized when no longer required for operation, security, or a specific investigation, unless law requires longer storage.
We use no analytics or marketing cookies, advertising pixels, session replay, or external web fonts.
03
3. App data
LiftPal processes workouts, routines, training plans, Flow sessions, Daily Goals, settings, rewards, clothing, and room progress on your device. LiftPal requires no account and does not upload this content to a LiftPal cloud.
You can delete local data in LiftPal; uninstalling removes the app data from the device. A .liftpalbackup file exists only at the location you choose and must be deleted there separately. It can be password protected.
04
4. Apple Health
Apple Health is optional and accessed only after your explicit permission. On iPhone, LiftPal may read steps, workouts, body mass, heart-rate variability (SDNN), resting heart rate, and sleep analysis. During a strength workout, the paired Apple Watch may read heart rate and active energy and save the completed strength-workout record to Apple Health.
Permissions can be changed in iOS or Health at any time. Apple Health data is not used for advertising, sold, or sent to RevenueCat. The legal basis is consent under Art. 6(1)(a) and, for health data, Art. 9(2)(a) GDPR.
05
5. Purchases and RevenueCat
Purchases and subscriptions are made through the Apple App Store; Apple handles payment and purchase data under its own terms.
We use RevenueCat, Inc. to verify purchase status and unlock paid features. It processes an SDK-generated pseudonymous App User ID plus product, purchase, transaction, and entitlement information. Pseudonymous does not mean anonymous. RevenueCat receives no workout, Flow, Daily Goal, or Apple Health content. The legal basis is Art. 6(1)(b) GDPR and, where applicable for abuse prevention, Art. 6(1)(f).
06
6. Support
If you email us, Apple iCloud Mail processes the sender address, message, and voluntary attachments. Do not send health data, medical documents, Apple ID passwords, or payment details.
Support messages are deleted after the request is complete unless legal retention duties or possible legal claims require longer storage.
07
7. Release and test lists
We use Brevo for the one-time iPhone release message and the separate Android testing program. It processes your email address, selected purpose, consent time and proof, plus technical delivery and unsubscribe data. Sign-up becomes active only after double opt-in. The legal basis is your consent under Art. 6(1)(a) GDPR.
You can unsubscribe at any time through the email link or by contacting support@liftpal.app. The address is deleted after withdrawal or completion of the selected purpose unless narrowly limited retention is needed to prove consent or defend legal claims.
08
8. Recipients and international transfers
We use providers for hosting, security, email, and purchase management. Where data is processed outside the EEA without an adequacy decision, transfers rely on appropriate safeguards, particularly EU Standard Contractual Clauses.
09
9. Your rights and complaints
Subject to legal requirements, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent for the future at any time by emailing support@liftpal.app.
You may complain to a data protection authority. Our supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, poststelle@lfdi.bwl.de, https://www.baden-wuerttemberg.datenschutz.de/.