Thank you for choosing to be part of our community at Liftosaur ("Company", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our notice, or our practices with regards to your personal information, please contact us at info@liftosaur.com.
When you visit our website https://www.liftosaur.com, and use our services, you trust us with your personal information. We take your privacy very seriously. In this privacy notice, we seek to explain to you in the clearest way possible what information we collect, how we use it and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy notice that you do not agree with, please discontinue use of our Sites and our services.
This privacy notice applies to all information collected through our website (such as https://www.liftosaur.com), and/or any related services, sales, marketing or events (we refer to them collectively in this privacy notice as the "Services").
Please read this privacy notice carefully as it will help you make informed decisions about sharing your personal information with us.
We collect information that you voluntarily provide to us when you create an account, use the Services, or contact us. This includes:
You can use Liftosaur without creating an account. In that case your programs, workouts and measurements stay on your device — they are not sent to or stored on our servers, and we cannot see them. What does reach us is the usage information described below, recorded against a randomly generated identifier rather than a name or email address. If you later create an account, the data on your device is then synced to it.
Your training data is the core of the Services, and we store it so that it stays available to you across your devices. See section 3 for how we use it.
We automatically collect certain information when you visit, use or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
Our app can integrate with Apple Health on iOS and Google Health Connect on Android, if you grant it permission. Both integrations are optional, you choose which categories to allow, and you can withdraw permission at any time in the Health app or in Health Connect. What we read and write is the same on both platforms, with one exception noted below:
Here's how we handle this data:
We collect data through the Apple Health and Google Health Connect integrations to enhance the app's functionality. This data is used solely for tracking and providing insights within the app.
The collected data is stored locally on your device and in the cloud on our servers. We implement strict security measures to protect this data from unauthorized access, ensuring it is stored safely and securely.
The data read from Apple Health or Google Health Connect is not used for any purpose other than to provide app functionality. We do not use it for marketing or advertising, and we do not include it in the aggregated statistics described in section 3.
We do not share, sell, or disclose your health data to third parties. Your data is private and is only accessible within the app for your use.
You retain control over your data. You can withdraw any permission at any time in the Apple Health app or in Health Connect, which stops further syncing in both directions. You can delete or update your body measurements at any time within the app. Sleep and nutrition records are read-only mirrors: you can hide any imported day from view in the app (Me -> Sleep & Nutrition), and you manage or remove the underlying records in Apple Health or Health Connect itself. Workouts we have written are yours to delete there too. If you wish to delete your data stored on our servers, you can do that through the app's settings — see section 10.
We comply with all applicable privacy laws and regulations related to the use and storage of health data.
We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.
We rely on service providers that process data on our behalf:
We may also share limited, anonymized data with analytics and advertising providers to measure usage and ad performance (for example, with Google Analytics 4, Reddit Pixel, and AppsFlyer). We do not sell personal information.
Sharing a program is the one case where you publish your own data. When you create a share link, the program's contents are stored on our servers and become readable by anyone who has the link — no account or sign-in is required, and search engines may index it if the link is posted publicly. Only the program is shared. Your workout history, measurements, email address and account details are never included.
Share links are meant to stay working, so that a link you gave someone a year ago still opens. That means they are not automatically removed when you delete your account. If you want a link taken down, email info@liftosaur.com with the link and we will remove it.
Yes. We use cookies, pixels, and similar technologies to collect information about how you use our site and app. We group them into three categories:
If you are located in the European Economic Area (EEA) or the United Kingdom, we ask for your consent before setting any non-essential (analytics or advertising) cookies. Elsewhere, these are enabled by default and you may opt out. You can change or withdraw your choices at any time using the Privacy Settings link in our footer, and we automatically honor the Global Privacy Control (GPC) browser signal.
Key cookies and similar storage we use:
lft_landing (analytics, first-party) — records the first page you arrived on; up to 12 months.
_ga, _ga_* (analytics, Google) — distinguish users; up to 24 months._gid (analytics, Google) — distinguish users; 24 hours._rdt_uuid (advertising, Reddit) — ad measurement; up to 3 months._gcl_au (advertising, Google) — ad conversion measurement; up to 90 days.We use analytics and advertising services to understand how visitors interact with Liftosaur and to improve our marketing. These include:
If you are located in the EEA or UK, we ask for your consent before enabling analytics or advertising technologies via a cookie banner. Everywhere, you can review, change, or withdraw your choices at any time via the Privacy Settings link in our footer, and we honor the Global Privacy Control (GPC) signal.
We keep your personal information only for as long as we need it for the purposes set out in this notice, unless a longer period is required by law. In practice:
Your data is stored on Amazon Web Services in the United States (Oregon). It is encrypted in transit and at rest, and access to production systems is limited to authorized personnel.
If you are located in the European Economic Area, the United Kingdom, or elsewhere outside the United States, this means your information is transferred to and stored in the United States. Where the law of your country requires a safeguard for that transfer, we rely on the appropriate safeguards available to us under applicable data protection law — currently the Standard Contractual Clauses approved by the European Commission, and the UK Addendum to them, which form part of our data processing agreement with Amazon Web Services.
We implement appropriate technical and organizational security measures to protect your personal information. However, please remember that no internet transmission is 100% secure.
Liftosaur is not directed at children, and we do not knowingly collect personal information from children under 13, or under the minimum age of digital consent in your country where that age is higher. If you believe a child has given us personal information, please contact us at info@liftosaur.com and we will delete it.
You may review, change, or delete your information at any time. You can delete your account and its data from the app's account settings, or by contacting us at info@liftosaur.com.
When you delete your account, we immediately remove your programs, workout history, body measurements, uploaded images, subscription records and account details from our live systems. Residual copies remain in our encrypted database backups for up to 35 days, after which they are overwritten on our normal backup cycle. We do not access or use backup copies for any other purpose in the meantime.
Three things are not affected by deleting your account: programs you published with a share link, which stay readable so that the links keep working (see section 4 — email us to have one removed); aggregated statistics that no longer identify you (see section 3); and records held by the analytics and advertising providers listed in section 6, which you can opt out of separately.
Depending on where you live, you may also have the right to request a copy of your data, correct it, object to or restrict how we process it, or lodge a complaint with your local data protection authority. Email info@liftosaur.com to exercise any of these. We answer within 30 days. We may need to ask you something that confirms the request came from the account holder, and if we cannot establish that, we may not be able to act on it.
Most browsers' legacy "Do Not Track" (DNT) feature has no common standard, so we do not respond to DNT signals. We do, however, honor the Global Privacy Control (GPC): when your browser or an extension sends a GPC signal, we treat it as an opt-out of advertising and of any "sale" or "sharing" of your personal information.
Yes. California residents — and residents of other U.S. states with similar privacy laws — have the right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. You can exercise this using the Privacy Settings link in our footer, or by enabling Global Privacy Control (GPC) in your browser, which we honor automatically. We do not sell personal information for money. California residents may also request details of personal data shared for marketing under the "Shine The Light" law by contacting us at info@liftosaur.com.
We may update this privacy notice from time to time. The updated version will be indicated by a new “Last updated” date. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect, rather than relying on you to re-read this page.
If you have questions or comments about this policy, you may email us at info@liftosaur.com.