Consumer Health Data Privacy Policy

This policy covers the consumer health data that Liftcue (“we”, “the app”) collects. It is written for the Washington My Health My Data Act, Nevada’s consumer health data law (NRS 603A) and the Connecticut Data Privacy Act. We apply it to every Liftcue user, wherever you live. Our general Privacy Policy covers everything else.

Who we are

Liftcue is run by Stefano Troia, the controller responsible for your personal data. Contact: support@liftcue.com.

The short version

• From app version 1.7.1, we collect health data only after you agree to it in the app, and only to build your training plan and let Spotter, the app’s AI spotter, answer you.
• We never sell your health data and we don’t share it with third parties. The companies listed below only process it for us, under contract.
• We don’t use it for advertising, and we don’t use it to train AI models.
• You can see it, download it, delete it or withdraw your consent at any time.

Health data we collect

• Body and profile — sex, age, height, body weight, body-fat percentage, lean and fat mass and other body-composition values, and the body goals you set.
• Injuries and pain — injuries, pain or limits you tell us about, and the pain check-ins you log during a workout.
• Recovery — sleep hours and quality, and stress level.
• Data from Apple Health or Health Connect (only if you connect them) — the types you allow, such as body weight, body fat, height, steps, active and resting energy, heart rate, resting heart rate, heart-rate variability, VO2 max, sleep and workouts. On iPhone, also sex and date of birth if you allow them.
• Workout heart data — heart rate and calories recorded during a Liftcue workout, for example by Apple Watch.
• Photos you choose to analyze — the front, side and back photos for Spotter’s eye, and body-scan images or files you upload. We use them to estimate physique, posture and body composition. We don’t use them to recognize who you are.
• Your conversations with Spotter — what you write may describe your body or health.
• What we work out from this data — for example a posture verdict, a body-composition estimate, or the fact that an exercise should avoid a sore joint.

Where it comes from

• You, when you answer Spotter’s questions, log data, chat or take photos in the app.
• Apple Health, Health Connect and Apple Watch, only for the types you allow in your phone’s settings.
• Files you import, such as a body-scan report or a CSV export.

Why we collect it and how we use it

• To build your training plan and adjust it: choosing exercises that suit your injuries, setting volume and weights, and planning recovery.
• To let Spotter answer your questions, explain your progress and write your session debriefs.
• To show your body and recovery trends in the app.
• To keep the service secure and working, for example to fix a bug that affects your data.

We don’t use your health data for advertising or marketing, we don’t sell it, and we don’t use it, or let anyone use it, to train AI models, including large language models. We don’t use location data and don’t place geofences around health care facilities.

Your consent

Starting with app version 1.7.1, the app asks for your consent before it collects any health data. That consent is separate from our Terms and from the consent to use AI features. If you don’t give it, or withdraw it later, we collect nothing new from Apple Health or Health Connect, and no new measurements or scans, and, within 15 days at most, we stop using the health data we already hold; logging workouts with your current routine keeps working. Chat messages you still type are saved so the chat keeps working; you can delete them with Delete my data instead or Delete my account. Withdrawing consent doesn’t delete what we already hold. To delete it, see Your rights.

If we ever wanted to share your health data with a third party, or use it for a new purpose, we would ask for a separate consent first.

Who receives it

We share no health data with third parties or affiliates, and we have no affiliates. The companies below are processors: they handle health data only on our instructions and under a written contract, to run Liftcue for you.

• Amazon Web Services (AWS) — hosting, database and accounts, in the EU (Ireland). It also runs most of Spotter’s AI through Amazon Bedrock, including photo and body-scan analysis.
• Anthropic — runs part of Spotter’s AI chat through its own API, and may be used for photo analysis. Data may be processed in the United States.

Data goes to the AI services only after you allow AI features in the app. We keep health details out of what our analytics provider (PostHog), crash-reporting provider (Sentry) and payments provider (RevenueCat) receive: they don’t get your body measurements, injuries, pain, sleep, heart data or photos.

Your rights

• Know and access — confirm whether we collect your health data and get a copy: Me → Data & privacy → show advanced → Export my data. You can also ask us for the list of every company that has received it.
• Correct — edit your body entries, injuries and other details in the app, or ask us to correct them.
• Withdraw consent — Me → Data & privacy in the app.
• Delete — to delete only your health data and keep your account and workouts: in Me → Data & privacy, turn off health data, then tap Delete my data instead. This removes your measurements, Apple Health and Health Connect data, heart and pain data, scans and photos, injury and body notes, your Spotter chat history, and the insight cards built from them: injury check-ins, body-scan cards, workout debriefs that mention pain, strength-profile and strength-balance cards, weekly and monthly recaps, goal cards and the end-of-routine overview. These cards are not rebuilt for past weeks and routines. To delete everything: Me → Data & privacy → show advanced → Delete my account deletes your account and all the health data we hold after a 14-day grace period. Our processors delete it too: AWS stores it only for us, and Anthropic normally deletes what we send it within 30 days, and keeps it longer (up to 2 years) only if it is flagged for a safety review or the law requires it. Copies in backups are removed as the backups expire, within 6 months at most. If you ask by email, we delete within 45 days of receiving your request; identity checks do not pause that time.
• By email — write to support@liftcue.com from the email address of your Liftcue account, so we can confirm it’s you. You don’t need to create an account to ask.

We answer within 45 days. If we need more time, we tell you why within those 45 days and take at most 45 more. Requests are free. We won’t treat you differently for using these rights.

Appeal — if we refuse a request, reply to our answer with “Appeal” in the subject. We decide within 45 days and explain our decision in writing. If we still refuse, you can contact your state attorney general: in Washington at atg.wa.gov/file-complaint, in Nevada at ag.nv.gov, and in Connecticut at portal.ct.gov/ag.

Security and access

Health data is encrypted in transit and at rest. Only the people and processors who need it to run Liftcue can access it.

Changes

If we change this policy, we update the date at the top. Before we collect a new kind of health data or use it for a new purpose, we ask for your consent in the app.

Contact

Questions or requests: support@liftcue.com.