01
1. Controller
Nikolaj Haak, Schwaigerner Str. 29, 75050 Gemmingen, Germany. Email: support@liftpal.app.
02
2. Website
When you visit the website, technically necessary connection data such as IP address, time, requested page, HTTP status, browser, and device information may be processed to deliver and secure the service and investigate errors. The legal basis is Art. 6(1)(f) GDPR.
This connection data is not anonymous when first collected; an IP address may be personal data. We do not combine it into user or advertising profiles. Technical hosting and security service providers support delivery and protection. Logs are deleted or genuinely anonymized when no longer required for operation, security, or a specific investigation, unless law requires longer storage.
We use no analytics or marketing cookies, advertising pixels, session replay, or external web fonts.
03
3. App data
LiftPal processes workouts, routines, training plans, Flow sessions, Daily Goals, settings, rewards, clothing, and room progress on your device. LiftPal requires no account and does not upload this content to a LiftPal cloud.
You can delete local data in LiftPal; uninstalling also removes local backups from the device. A .liftpalbackup file is created only after your action in LiftPal's local folder, which is excluded from automatic device and iCloud backups. Every new backup is encrypted with AES-256-GCM and a password of at least eight characters; LiftPal cannot recover that password. You can manually copy important backups from On My iPhone > LiftPal or Finder to another secure local location.
04
3a. Optional iCloud game backup
During setup, game backup is preselected. Only after you confirm this choice or enable backup in LiftPal's Settings does the app save a game-only copy in your Apple account's private CloudKit database. This includes your Wombat and its appearance, coins, tickets, owned items, room, Arcade progress and selected Flow game scores and levels. A random identifier for this installation, the generic device model, such as iPhone or iPad, and the backup time distinguish your copies. Workouts, training plans, goals, habits, recovery information, health data and values read from Apple Health are not included.
LiftPal uses these copies to save and restore your game progress. The app accesses your private CloudKit database on your device while you are signed in to iCloud. Your private records are not visible to us in CloudKit Console. We do not receive their contents on a LiftPal server, forward them to RevenueCat or analytics, or use them for advertising. Apple provides the iCloud storage service. No separate LiftPal account is required.
The copies use your iCloud storage. Each installation keeps its latest copy, and progress from different devices is not combined. Restoring replaces the game progress on the device you are using; it does not replace workouts, goals or health records. LiftPal retains a local safety copy before restoring. Turning automatic backup off stops future uploads but does not delete existing iCloud copies or local progress. You can remove stored copies through Apple's iCloud storage controls.
Backup and restore need an available iCloud account, an internet connection and sufficient storage. Check the last successful backup in LiftPal before deleting the app or changing devices. The separate encrypted file backup remains available for local LiftPal app data.
05
4. Apple Health
Apple Health is optional and accessed only after your explicit permission. On iPhone, LiftPal may read steps, workouts, body mass, heart-rate variability (SDNN), resting heart rate, and sleep analysis. During a strength workout, the paired Apple Watch may read heart rate and active energy and save the completed strength-workout record to Apple Health.
Permissions can be changed in iOS or Health at any time. Apple Health data is not used for advertising, sold, or sent to RevenueCat. The legal basis is consent under Art. 6(1)(a) and, for health data, Art. 9(2)(a) GDPR.
06
5. Purchases and RevenueCat
Purchases and subscriptions are made through the Apple App Store; Apple handles payment and purchase data under its own terms.
We use RevenueCat, Inc. to verify purchase status and unlock paid features. It processes an SDK-generated pseudonymous App User ID plus product, purchase, transaction, and entitlement information. Pseudonymous does not mean anonymous. RevenueCat receives no workout, Flow, Daily Goal, or Apple Health content. The legal basis is Art. 6(1)(b) GDPR and, where applicable for abuse prevention, Art. 6(1)(f).
07
6. Support
If you email us, Apple iCloud Mail processes the sender address, message, and voluntary attachments. Do not send health data, medical documents, Apple ID passwords, or payment details.
Support messages are deleted after the request is complete unless legal retention duties or possible legal claims require longer storage.
08
7. Android testing program and former release list
For new sign-ups, we now use Brevo only for the Android testing program. It processes your email address, sign-up purpose, consent time and proof, plus technical delivery and unsubscribe data. Sign-up becomes active only after double opt-in. The legal basis is your consent under Art. 6(1)(a) GDPR.
The former list for the one-time iPhone release message is no longer offered for new sign-ups. You can withdraw consent at any time through the unsubscribe link or by contacting support@liftpal.app. The address is deleted after withdrawal or completion of the respective purpose unless narrowly limited retention is needed to prove consent or defend legal claims.
09
8. Recipients and international transfers
We use providers for hosting, security, email, and purchase management. Where data is processed outside the EEA without an adequacy decision, transfers rely on appropriate safeguards, particularly EU Standard Contractual Clauses.
If you enable game backup, Apple also processes the game data and backup information described above to provide iCloud through CloudKit. This is separate from Apple Health and App Store purchase processing. Apple's iCloud terms and privacy information apply to its provision of that service.
10
9. Your rights and complaints
Subject to legal requirements, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent for the future at any time by emailing support@liftpal.app.
You may complain to a data protection authority. Our supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany, poststelle@lfdi.bwl.de, https://www.baden-wuerttemberg.datenschutz.de/.