Last updated: June 30, 2026
This Privacy Policy describes how Liftaroo ("we," "us," or "our") collects, uses, stores, shares, and protects information about you when you use our mobile application and our website at liftaroo.app (collectively, the "Services"). It also explains the choices you have and the rights you can exercise. By using Liftaroo, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
We have tried to write this policy plainly. If anything is unclear, email us at support@liftaroo.app and we will explain.
Liftaroo is an independently operated fitness application created and run by Jamal Ahmed Khan in the United States. We are the controller of the personal information described in this policy, which means we decide why and how it is processed. Liftaroo is available internationally through the Apple App Store and Google Play, and our servers and service providers are located primarily in the United States. If you access Liftaroo from outside the United States, you understand that your information will be processed and stored in the United States, where data protection laws may differ from those in your country; we describe your rights and the legal bases we rely on in Sections 5, 23, and 24. We do not have a physical retail presence; the best way to reach us about privacy is the contact details in the final section.
Information you provide to us.
Health and fitness data (only with your permission). The categories we can read depend on your platform. On iOS, if you grant access, Liftaroo can read the following from Apple Health: steps, body weight, body composition (body fat percentage, lean body mass, BMI), resting heart rate, heart rate variability (HRV), VO2 max, sleep stages, floors climbed, walking and running distance, and workouts recorded by your Apple Watch, Garmin, Withings, or other connected devices. On Android, Liftaroo reads only two categories from Health Connect: steps and body weight (including data your other apps, such as Samsung Health, sync into Health Connect). On Android this access is read-only; we do not write any data to Health Connect. If you are a coached client on iOS and grant nutrition access, we can also read your logged nutrition totals (calories consumed, protein, carbohydrates, and fat), which works with apps such as MyFitnessPal, Lose It, and Cronometer. Health data is a special, sensitive category and is treated as described in Section 6.
Information collected automatically. When you use the app we collect device and usage information, including device model, operating system and version, app version, your Liftaroo runtime/update identifier, general in-app activity (such as which screens you view and which features you use), and crash and performance diagnostics. We do not collect precise GPS location, and we do not use advertising identifiers or third-party advertising trackers.
Understanding where data lives is important, so here is the breakdown:
We use the information we collect to:
We rely on the following bases for processing: performing the contract you enter into by using the app, your consent (for optional features such as Health access, the AI Coach, and Coaching), and our legitimate interests in keeping the app secure and functional. Where we process sensitive health data, we do so only on the basis of your explicit consent, which you can withdraw at any time.
Health and fitness data is some of the most personal information there is, so we handle it carefully. We read the categories listed in Section 3 only after you grant permission on your device. We use this data to display your progress inside the app (for example, your step ring and weight trend on both platforms, and your VO2 max trend and recent runs on iOS), to power Auto Export if you enable it, and, for coached clients, to show your coach the summary described in Section 11. On Android, the only categories we read through Health Connect are steps and body weight.
On iOS, we also write your completed Liftaroo workouts and your logged weight back to Apple Health so that all of your fitness data stays together in one place; we do not write any other categories. On Android, Liftaroo's Health Connect access is read-only: we do not write any data to Health Connect.
Your health data stays on your device and is never sent to our servers. It only leaves your device if you personally enable Auto Export (which sends it to a destination you control) or if you become a coached client (which mirrors a limited summary to your private storage so your coach can see it). We never use health data for advertising, and we never sell it. You can revoke health access at any time in Settings, Privacy and Security, Health, Liftaroo on iOS, or in Settings, Apps, Health Connect on Android. Nutrition access for coached clients is requested separately from other health categories, so granting one does not grant the other.
You sign in to Liftaroo using Sign in with Apple or Sign in with Google. When you do, we receive basic profile information (your name and email address, or Apple's private relay address if you hide your email) from the provider. We use this only to create and manage your account. We do not receive your password. We recommend reviewing Apple's and Google's own privacy policies for how they handle your sign-in.
If you choose AI Guided mode and grant explicit in-app consent, Liftaroo sends a limited subset of your data to Anthropic's Claude API (model claude-haiku-4-5) to generate personalized program suggestions and weekly check-in insights. The data we send is limited to: your workout history (exercise names, sets, reps, and weights), your training preferences (goals, equipment, and schedule), and your current program structure. We do not send your name, email, body weight, body composition, heart rate, sleep, location, or any other identifier. Under Anthropic's commercial API terms, your data is not used to train Anthropic's models. AI Coach is optional, requires your explicit consent before any data is transmitted, and can be disabled at any time in Settings. You can review Anthropic's privacy practices at anthropic.com/legal/privacy.
Liftaroo offers an optional connector that lets you link your own AI assistant (such as your personal Claude account) so you can build, edit, and read your own programs and workouts in plain language. This is entirely your choice and is off until you set it up. When you connect, you sign in with your Liftaroo (Firebase) account through a secure authorization flow, and the connector is permanently scoped to your account only: it can read and write your programs, read your recent workouts, and save exercise notes for you, and it can never access another user's data. Any AI assistant you connect operates under that provider's own terms and privacy policy, which govern what that assistant does with the conversation. You can disconnect at any time.
Auto Export is an optional feature that forwards your own fitness data to a destination you control, such as a personal webhook endpoint, Notion, or a Google Sheet. You configure the destination URL and any authentication token yourself; we never select destinations on your behalf. When enabled, Liftaroo sends only the metric categories you select (weigh-ins, daily metrics, and workouts) to the destination you specified, on the schedule you choose. Authentication tokens are stored only on your device in the iOS Keychain or Android Keystore (via Expo SecureStore) and are never transmitted to or stored on our servers. Once data reaches a destination you control, it is governed by that destination's own terms, not this policy. You can disable Auto Export or delete any destination at any time in Settings, Data, Auto Export.
Liftaroo includes an optional 1:1 coaching feature. If you choose to connect with a coach by entering a coach code, you are choosing to share certain data with that specific coach so they can guide your training and check on your progress. A coach you are linked to can see: the programs they assign or build for you, your logged workout history, the weekly check-ins you submit (body weight, your training, nutrition, energy, sleep, and hunger ratings, plus wins, struggles, and any questions), the daily targets they set for you, and any coaching notes. On iOS, if you grant Health and nutrition permissions as a coached client, your coach can also see a rolling summary (approximately the last 14 days) of steps, sleep, resting heart rate, body weight, and nutrition totals so they can support your progress. We do not handle progress photos inside the app; if you send your coach photos, you do so directly, outside of Liftaroo. Coaching is entirely optional, only the coach you explicitly link to can see this data, and you can unlink from a coach at any time, after which their access ends. Coaches are independent individuals; the coaching advice they provide is theirs, not ours.
If you are a coach using Liftaroo, you are responsible for handling your clients' information lawfully and respectfully, using it only to coach the clients who have connected with you.
Liftaroo may ask for access to your device calendar to schedule workout reminders. If you allow it, we write only to a dedicated Liftaroo calendar on your device, and we never read or modify your existing calendar events. You can revoke calendar access at any time in your device settings.
With your permission, Liftaroo sends local notifications from your device, for example when a rest timer completes while the app is in the background. These are generated on your device. You can turn notifications off at any time in your device settings.
Liftaroo is currently free to use, and we do not collect any payment or credit card information. If we offer an optional paid subscription in the future, all payment processing is handled entirely by Apple's App Store or Google Play and by our subscription management provider, RevenueCat; we never receive or store your card details. Any external payments related to 1:1 Coaching are arranged directly between you and your coach, outside of the app, and are not processed by Liftaroo. You can review the relevant privacy practices at apple.com/legal/privacy and revenuecat.com/privacy.
We use PostHog to understand how the app is used in aggregate (for example, how many people complete a workout or select a mode) so we can improve it. We configure PostHog to collect product-usage events tied to your Firebase user identifier; we do not send it your name, email, health data, or precise location, and we do not use it for advertising. You can review PostHog's privacy practices at posthog.com/privacy.
We use Sentry to collect crash reports and performance diagnostics so we can find and fix bugs. A crash report includes the technical stack trace, your app version, and your Firebase user identifier (so we can investigate which user hit a specific issue), but excludes other personal information. Sentry processes this data on our behalf as a service provider. You can review Sentry's privacy practices at sentry.io/privacy.
The core of Liftaroo, browsing and building programs, logging workouts, and tracking your progress, works without granting any of the optional permissions. You can decline Health access, the AI Coach, Auto Export, the AI connector, Calendar access, and Notifications and still use the app to train and track your workouts. Declining a permission only disables the specific feature that needs it; it does not lock you out of the app.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these limited ways:
Liftaroo uses the following third-party services, each of which processes information as described in its own privacy policy:
We use reasonable technical and organizational measures to protect your information, including encrypted transmission (HTTPS), account-scoped access rules in our database, on-device secure storage for sensitive tokens, and limiting access to the minimum needed to operate the Services. No method of transmission or storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security.
We retain your personal information for as long as your account is active or as needed to provide the Services. Crash and analytics data is retained for a limited period for diagnostics and product improvement. When you delete your account, we delete or anonymize your personal information within a reasonable time, except where we are required to retain certain records to comply with the law. Health data on your device is controlled by you and is removed when you revoke access or delete the app.
You can request deletion of your account and the personal data associated with it at any time by contacting us at support@liftaroo.app. Deleting the app from your device removes the data stored locally on that device. To also remove the data stored in your cloud account, please send us a deletion request and we will process it.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to object to or restrict certain processing, and to withdraw consent you previously gave. To exercise any of these rights, email us at support@liftaroo.app and we will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.
California residents. Under the California Consumer Privacy Act (as amended), you have the right to know what personal information we collect, to request access and deletion, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law. You may submit a request, or appeal a decision, using the email above.
Liftaroo is operated from the United States and our service providers are located primarily in the United States. If you use the Services from another country, your information will be transferred to and processed in the United States. By using the Services, you understand that your information will be handled as described in this policy. If you are in a region with specific data protection laws and have questions about the legal basis or transfer of your data, contact us and we will assist you.
Liftaroo is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us at support@liftaroo.app and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date above. We encourage you to review this policy periodically. Your continued use of the Services after an update means you accept the revised policy.
We also operate the @liftaroo Instagram account, and use automated tools to run it. Those tools process comments and direct messages left on our own posts and account, used solely to respond to people who interact with us — for example, replying automatically to a keyword comment, or drafting a reply to a direct message. We do not collect data from any account other than @liftaroo, we do not sell this data, and we do not share it with third parties beyond the service providers (like Meta/Instagram) required to operate the feature. We retain it only as long as needed to run this feature. To request deletion of any data tied to your Instagram interactions with us, see our Data Deletion page.
If you have any questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us at:
Liftaroo (operated by Jamal Khan, United States)
Email: support@liftaroo.app
Website: liftaroo.app