Effective June 28, 2026

Privacy
Policy

ReadyLift Performance ("we," "us," or "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your personal information.

database 1. Data We Collect

person

Account Data

  • circle Email address
  • circle Authentication credentials (password hashed; never stored in plaintext)
  • circle Account creation date
fitness_center

Fitness Data

  • circle Onboarding preferences (training experience, goals, available days)
  • circle Workout logs (exercises, sets, reps, weight)
  • circle Reps in reserve (RIR) and notes you log with your sets
phone_iphone

Device & Usage Data

  • circle Anonymous usage events
  • circle Device type and OS version
  • circle App version
  • circle Anonymized crash reports

settings 2. How We Use Your Data

We use your data solely to provide and improve the ReadyLift service:

  • 01 Generate personalized workout recommendations based on your training history, logged RIR, and preferences
  • 02 Track your training progress including volume, frequency, and progression trends
  • 03 Authenticate your account and manage your subscription status
  • 04 Send transactional communications (password resets, account notifications)
  • 05 Diagnose technical issues and improve app reliability
block

We Do Not Sell Your Data

We will never sell, rent, or trade your personal information or fitness data to third parties for advertising, marketing, or any other purpose.

share 4. Third-Party Services

We share data with the following categories of third-party services only as necessary to operate ReadyLift. We do not share data for advertising purposes.

Apple Health & Health Connect

Purpose: Optional write-back of completed workouts on your device

Data Shared: When you enable it, ReadyLift writes the workouts you log to Apple Health or Health Connect on your device. This is optional, write-only, and initiated by you; we do not read any data back. See Section 13.

Apple App Store & Google Play

Purpose: App distribution and payment processing

Data Shared: Purchase and subscription data is managed by Apple or Google Play. We receive subscription status confirmations but do not have access to your payment card details.

Cloud Infrastructure Providers

Purpose: Secure data storage, user authentication, and backend services

Data Shared: User data is stored on secure cloud infrastructure with row-level security policies. Data is encrypted in transit via HTTPS and at rest.

Subscription Management Providers

Purpose: Subscription verification and entitlement management

Data Shared: Anonymous user identifiers and subscription status. These providers do not receive your email or fitness data.

Analytics (PostHog)

Purpose: Product analytics to understand how features are used and improve the App

Data Shared: Anonymous usage events, device type, OS version, and app version. No fitness data or personally identifiable information is sent to PostHog.

Error Tracking (Sentry)

Purpose: Crash reporting and error diagnostics to maintain app reliability

Data Shared: Anonymized crash reports, stack traces, device model, and OS version. Sentry does not receive your fitness data or login credentials.

5. Data Retention

Active Accounts: We retain your data for as long as your account is active and you continue to use the App.

Account Deletion: When you delete your account, all your personal data — including workout logs, progression data, and profile information — is removed from our active systems immediately. Residual copies in routine encrypted backups are automatically purged within 30 days. No personal data is retained beyond that window, except where retention is required by law.

Legal Obligations: We may retain certain data longer if required by law, regulation, or legal process.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • check_circle Access: Request a copy of the personal data we hold about you
  • check_circle Deletion: Delete your account and all associated data via Settings in the App, or by contacting us
  • check_circle Correction: Update inaccurate personal data through your profile settings
  • check_circle Portability: Request your data in a portable format
  • check_circle Revoke Consent: Disconnect health integrations (Apple Health, Health Connect) at any time

To exercise any of these rights, contact us at readyliftai@outlook.com.

lock 7. Data Security

We implement reasonable security measures to protect your data:

  • shield Encryption in Transit: All data transmitted between the App and our servers uses HTTPS/TLS encryption
  • shield Row-Level Security: Supabase RLS policies ensure users can only access their own data
  • shield Hashed Passwords: User passwords are hashed using industry-standard algorithms and are never stored in plaintext

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Children's Privacy

ReadyLift is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If we discover that we have collected data from a child under 13 without parental consent, we will delete that data promptly.

If you believe a child under 13 has provided us with personal data, please contact us at readyliftai@outlook.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification or email.

The "Effective" date at the top of this page indicates when the policy was last revised. Continued use of the App after changes constitutes acceptance of the updated policy.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect and how it is used
  • Right to request deletion of your personal information
  • Right to opt out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your privacy rights

public 11. EU & UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data. In addition to the rights listed in Section 6, you have the following rights and protections:

Legal Basis for Processing

  • circle Consent: You provide explicit consent when enabling Health integrations or creating your account
  • circle Contract Performance: Processing necessary to provide the ReadyLift service you subscribed to (workout recommendations, progress tracking)
  • circle Legitimate Interest: App diagnostics, security monitoring, and service improvement

Your Additional Rights

  • check_circle Right to Restrict Processing: Request that we limit how we use your data
  • check_circle Right to Object: Object to processing based on legitimate interest
  • check_circle Right to Lodge a Complaint: You may file a complaint with your local data protection authority (supervisory authority)
  • check_circle Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

International Data Transfers

Your data is stored on cloud infrastructure that may be located outside the EEA/UK, including in the United States. Where data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure your data receives an adequate level of protection.

notification_important 12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, as required by applicable law (including GDPR Article 33 and US state breach notification statutes). Notification will include the nature of the breach, the data affected, and steps you can take to protect yourself.

ecg_heart 13. Health Connect & Apple Health

ReadyLift can save your completed workouts to Android Health Connect and Apple Health, but only after you explicitly grant permission on your device. This integration is optional and write-only — ReadyLift writes the workouts you log and does not read any health or recovery data (such as heart rate, HRV, sleep, or readiness) from Health Connect or Apple Health.

Data Types We Write

  • circle Workout sessions (strength-training type, start and end time)
  • circle Active energy / calories associated with the session, where available

How we use it: When you finish a workout, ReadyLift can add that session to Health Connect or Apple Health so your activity and rings stay in sync with the training you logged. We never read data back from these platforms.

Sharing: We do not sell or share data written to Health Connect or Apple Health with any third party, and we never use it for advertising. It is not transferred to data brokers, advertising networks, analytics providers, or error-tracking providers.

Your control: You can grant or revoke this permission at any time in the Android Health Connect app or the iOS Health app, or by disconnecting the integration in ReadyLift Settings. Revoking access stops further writes immediately. Workouts already written remain in Health Connect or Apple Health under your control and can be deleted there.

Our use of Android Health Connect adheres to the Google Play Health Apps requirements and Health Connect Permissions policy, and our use of Apple Health adheres to Apple's HealthKit guidelines.

Privacy Questions?

Have questions about your data or this policy? Reach out to us.

readyliftai@outlook.com arrow_forward