Draft pending legal review. The app admin can remove this notice in Admin → Settings once an attorney approves it.

Privacy Policy

Effective 2026-10-15

The short version. We collect only what LiftLab needs to work: your account, the progress you log, and what you choose to share with friends. We don't sell your information, we don't show ads, and we don't use third-party analytics or tracking. Progress photos are private unless you're an adult and choose to share one. You can download your data or delete your account at any time in the app.

1. Who we are

LiftLab is operated by [Operator name — set in Admin → Settings] ("we," "us"). This policy explains what information LiftLab collects, how we use it, who can see it and the choices you have. Questions: [contact email — set in Admin → Settings].

2. Information we collect

What	Details	Why
Account information	Username, display name, password (stored only as a salted, one-way hash), age group (13–17 or 18+), the date you accepted these terms, and your email address if you choose to add one.	To create and secure your account, apply teen protections, and let you reset your password.
Birth month and year	Asked once at sign-up to confirm you're 13 or older and set your age group. We don't store your birth month or year — only the resulting age group.	Age eligibility and teen safety features.
Fitness records	Personal records (exercise, weight and reps, or distance and time, and date).	To show your progress and, if you allow, alert friends to new records.
Progress photos	Photos you take or upload, with optional notes. Photos are re-encoded on your device before upload, which removes location and other hidden data (EXIF).	Your private progress story. Adults may choose to share a photo with friends after admin approval.
Body profile and progress points	If you choose to add them: the sex and age used for nutrition formulas, activity level, goal and unit preference; your height; and dated weight, blood pressure, resting heart rate and notes (optionally linked to a progress photo). Stats are private to you.	To show your progress over time and calculate your estimated calorie and nutrient needs.
Food log, saved foods and meals	Foods you log (name, amount, calories and nutrients), foods you save, and meal-prep recipes. Food searches you type are sent from our server to the USDA FoodData Central database without your name or account.	To track what you eat against your targets and make logging faster.
Posts and social activity	Workout posts, shared records, cheers, friend connections and requests, blocks, and reports you make.	The Friends feature, safety and moderation.
Notification data	If you turn on push notifications, a unique push address and encryption keys issued by your device's notification service, and your notification preferences.	To deliver announcements and friend PR alerts you've opted into.
Security and technical data	A session cookie that keeps you signed in. Your IP address is used briefly to limit sign-in and sign-up attempts; these short-lived records expire within about an hour. Our hosting provider may process standard request logs for security and reliability.	To keep accounts secure and the Service running.
Messages to us	Anything you send us by email.	To respond to you.

We don't collect your precise location, contacts, microphone, health-app data, or advertising identifiers. LiftLab uses your camera only when you choose to take a progress photo.

3. How we use information

To provide LiftLab's features and keep your data in sync across your devices.
To keep the community safe: reviewing shared photos and reported content, enforcing the Terms, and protecting teens.
To secure accounts: password hashing, sign-in limits, email verification and password reset codes.
To send notifications you've turned on.
To comply with the law and respond to lawful requests.

We do not sell or rent personal information, share it for targeted or cross-context advertising, show ads, use third-party analytics or tracking tools, or use your content to train AI models.

4. Who can see your information

You can see all of your own data.
Your friends (people you've accepted) can see your display name, username, the posts and records you share, cheers, and progress photos you choose to share after they're approved (by the administrator for adults, or by a linked parent or guardian for members under 18).
A linked parent or guardian of a member under 18 can see the friend requests and shared photos waiting for their approval, and that teen's list of friends. They don't see the teen's body stats, food log, or unshared photos.
Other members can find you by your exact username to send a friend request.
App administrators can see account details (not passwords), shared posts and shared photos for moderation, reports, and settings. Administrators can't see private progress photos that haven't been shared.
Service providers who process data for us under their own security and privacy terms:
- Cloudflare — hosts the app and database and delivers our emails.
- U.S. Department of Agriculture FoodData Central — receives the words you search for foods (from our server, with no information about you) and returns nutrition data.
- Apple, Google, Mozilla or Microsoft push services — deliver notifications to your device. Notification contents are encrypted end to end between our server and your device.
- Google Fonts — the app loads font files from Google's servers, so Google receives your IP address and browser information when the app loads.
Legal reasons. We may disclose information if required by law, or if we believe it's necessary to protect someone's safety, including reporting child exploitation to the National Center for Missing & Exploited Children.
Business changes. If LiftLab is transferred to a new operator, your information may be transferred, and this policy (or one at least as protective) will continue to apply.

5. Children and teens

LiftLab is not directed to children under 13, and we don't knowingly collect personal information from them. Sign-up is blocked if someone indicates they're under 13. If we learn we've collected information from a child under 13, we'll delete it. Parents who believe this happened can contact us at [contact email — set in Admin → Settings].
Members aged 13–17 should use LiftLab with a parent or guardian's permission. Teen protections include: a teen can't share with friends until a parent or guardian links their account; the linked parent or guardian approves every friend request and every photo the teen shares; teens get no weight-loss targets and see teen-specific supplement information; and teens' data is never used for advertising.
A parent or guardian can ask us to review, export or delete their teen's account by contacting us. We'll take reasonable steps to verify the request.

6. Health-related information

Your personal records, progress photos, body stats (height, weight, sex, age, blood pressure, resting heart rate) and food logs may reveal information about your health or body. Body stats and food logs are never shared with friends and aren't visible to administrators. We use this information only to provide the features you use, we never sell it or use it for advertising, and we treat it with the same protections as the rest of your data. LiftLab's educational content isn't medical advice.

7. How long we keep information

We keep your account data while your account is active.
When you delete your account, your profile, records, photos, posts, cheers, friend connections, blocks and notification registrations are removed from our live database immediately. Copies may remain in our hosting provider's automatic database backups for up to 30 days, after which they're permanently erased.
Content you delete individually is removed the same way.
Password reset and email verification codes expire after 15 minutes. Sign-in limit records expire within about an hour.
Records of suspended accounts may be kept as long as needed to prevent abuse.

8. Your choices and rights

Download your data: account button → Download my data.
Delete your account: account button → Delete account.
Correct information: change your display name, email or password, or contact us.
Notifications: turn push notifications and friend PR alerts on or off in the app.
Blocking: block any user to stop seeing each other's content.

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Texas, Utah or other states, or outside the U.S.), you may have rights to know, access, correct, delete or obtain a copy of your personal information, and to opt out of sale, sharing for targeted advertising, or profiling. We don't sell or share personal information for targeted advertising or profiling. To make a request, use the in-app tools or email [contact email — set in Admin → Settings]. We'll respond within the time required by law and won't treat you differently for exercising your rights. If we deny your request, you can appeal by replying to our response.

9. Security

We protect your information with encrypted connections (HTTPS), salted password hashing, encrypted notification contents, sign-in attempt limits and restricted administrator access. No system is perfectly secure, so please use a strong, unique password. If we learn of a breach affecting your information, we'll notify you as required by law.

10. Where information is processed

LiftLab is operated from the United States. Our hosting provider runs a global network, so your information may be processed in the U.S. and other countries.

11. Changes to this policy

When we make material changes, we'll update the effective date and ask you to review the updated policy in the app before continuing.

12. Contact

[Operator name — set in Admin → Settings] · [contact email — set in Admin → Settings]