Privacy Policy

Effective 15 October 2026

Liftoday is a training app that plans your gym and home sessions and keeps your training log. It works without an account: your profile and training history are stored on your phone. This policy explains the few things that do leave your phone, why, and who receives them.

1. Data that stays on your phone

Everything you enter is saved in the app's storage on your device and is not sent to us, except as described in sections 2–5:

• your profile: goal, experience, training days, session length, units, and, if you enter them, body weight, height and limitations;
• your places and the equipment you have there;
• your workouts: exercises, sets, repetitions, weights, effort ratings, durations and notes;
• readiness check-ins (for example which muscles are sore and how much energy you have);
• the coach's notes and plans, and your settings.

Training reminders and rest alerts are scheduled by the app on your phone; we do not run a server that sends them. If you export your data, the export file is created on your phone and goes only where you send it.

2. AI session planning (only if you turn it on)

The AI planner is optional. The app asks before it is used, and you can switch it off at any time in Settings → AI planner. While it is on, the app sends the following to our planning server, which forwards it to Google's Gemini API to compose your next session and to review a finished one:

• your goal, experience level and how many sessions you have logged;
• the kind and name of the place you train at and its equipment;
• today's check-in answers (sore muscle groups, energy, available time) and the app's estimate of how recovered each muscle group is;
• the exercises in the session with your recent sets, repetitions, weights and effort ratings, and the session's duration;
• notes you write about a session, and short notes the coach has kept about your training;
• your time zone, the app's language, and a random identifier created when the app was installed.

The app does not send your name, email address, body weight, height or the limitations you entered.

Some of this, such as soreness, can be health-related information. We process it only with your explicit consent, which you give by turning the AI planner on (GDPR Art. 6(1)(a) and 9(2)(a)). Withdrawing consent does not affect processing that already took place.

Who processes it: our planning server runs on Vercel (Vercel Inc., USA). It does not store the content of your requests; the hosting provider keeps short-lived technical logs such as the time, the response status and the install identifier, to keep the service running and to stop abuse. Google (Google LLC, USA) processes the request under its terms for the paid Gemini API, which do not allow Google to use it to improve its products; Google may keep it for a limited time to detect abuse.

3. Crash reports

When the app crashes or hits an error, it sends a crash report to Sentry (Functional Software, Inc., USA; data stored in Sentry's EU region in Germany). A report contains technical information: the app version, device model, operating system version, the error and the steps in the app that led to it. Crash reports do not include your workouts, notes, check-in answers or body measurements. Crash reports are on by default because they help us fix problems (our legitimate interest, GDPR Art. 6(1)(f)); you can switch them off in Settings → Privacy. Sentry deletes crash reports after at most 90 days.

4. Anonymous usage statistics (only if you agree)

The app asks whether you want to share anonymous usage statistics. Only if you say yes does it send events such as "app opened", "onboarding finished", "workout started/finished" or "paywall shown" to PostHog (PostHog, Inc., USA; data stored in PostHog's EU region in Germany), together with a random identifier and basic device information. These events do not contain weights, repetitions, body data, notes or check-in answers, and PostHog is set up to discard IP addresses. The legal basis is your consent (GDPR Art. 6(1)(a)); you can withdraw it in Settings → Privacy. Events recorded on your phone shortly before you withdraw may still be delivered. We keep usage statistics for up to 2 years.

5. Subscriptions

Liftoday Premium is sold through Google Play or the Apple App Store. Payment is handled by Google or Apple; we never see your card or bank details. To check whether your subscription is active, the app uses RevenueCat (RevenueCat, Inc., USA), which receives the store's purchase receipt and a random app user identifier, and tells the app which features you have. The legal basis is the performance of our contract with you (GDPR Art. 6(1)(b)). Purchase records are kept for as long as tax and accounting law requires.

6. When you contact us

If you email us, we use your email address and message to answer you, and keep the conversation for up to 3 years in case you write again, unless you ask us to delete it sooner.

7. Transfers outside the EU

Vercel, Google, RevenueCat, Sentry and PostHog are US companies, and some data may be accessed from or stored in the USA. These transfers rely on the EU–US Data Privacy Framework where the company is certified, and otherwise on the European Commission's Standard Contractual Clauses.

8. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw any consent at any time. Most of your data is only on your phone: you can export it in the app, and deleting the app (or its data) deletes it. For data held by our service providers (crash reports, usage statistics, purchase status), email support@liftoday.app; we may ask for details that let us find it, such as the date of a crash.

You can also complain to a data protection authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz); you can also contact the authority in the country where you live.

9. Children

Liftoday is meant for adults aged 18 and over. We do not knowingly collect data from children.

10. No selling, no ads

We do not sell your data, show ads, or use advertising identifiers.

11. Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app.