English
See pricing Get the app
← Back to liftcue.com

Privacy Policy

Liftcue · Last updated November 3, 2026 · Version 2026-11-03

This policy explains what Liftcue (“we”, “the app”) collects, why, who processes it, and the choices and rights you have. We try to collect as little as possible and never sell your data.

Who we are

Liftcue is run by Stefano Troia, the controller responsible for your personal data. Contact: support@liftcue.com.

What we collect

  • Account — your email address and display name (used to create and secure your account and to send essential service messages).
  • Age check — where the law requires one, the app reads only an age range from Apple or Google. The check runs on your phone, and the age range is not stored or sent to us.
  • Training data — the programs you generate, workout sessions and set logs, goals, body-composition entries, posture/body scans, and any health metrics you enter or import.
  • Apple Health / Health Connect (optional) — if you connect Apple Health (iPhone) or Health Connect (Android), we read the metrics you authorize (e.g. weight, sleep, resting heart rate, active energy, workouts) to personalize your training. Health data is processed to provide the feature and is never sold or used for advertising. You can revoke access any time in iOS Settings or in Health Connect.
  • Subscription status — whether you hold a free, Premium, or Elite entitlement and its expiry (managed by our payments provider; we never receive your card details).
  • Usage analytics & diagnostics — Until you choose, the app sends only anonymous usage events, not linked to you or your account: screens, taps and errors, with no account ID, no profile and no install source. Right after you sign up, we ask once whether you will share usage data linked to your account. If you say yes, PostHog (analytics) also receives your account ID, app version, country, language, subscription plan, experience level and install source. You can change your answer at any time in Me → Data & privacy. If we know you are under 18 (from the age you tell us or your phone’s age check), we never ask and keep analytics anonymous. Our legal basis is your consent for usage data linked to your account, and our legitimate interest in knowing how the app is used for the anonymous counts. While you’ve agreed to receive Liftcue emails (“tips & offers” in the app, or the newsletter), PostHog also holds your email address to send them. This does not depend on your usage-data choice: it rests on your consent to receive the emails, and PostHog gets only your email address, language and email settings for it, no usage data. Crash reports are unchanged: they stay on so we can fix bugs, and they are linked to your account by a random account ID, not by your name or email. No health values, such as body measurements, injuries, sleep or heart data, are sent with analytics events or crash reports.
  • Install source — which store listing, ad, or shared link brought you to the app (on iOS via Apple’s own AdServices attribution, on Android via the Play install referrer). No advertising identifier is read, and it is collected only if you agree to share usage data linked to your account.
  • Website visits (liftcue.com) — page views and clicks on the store buttons, counted by PostHog without cookies or any other storage on your device. Visitors are counted with an anonymous identifier that changes every day, so a visit can’t be linked to you or to your app account.
  • Newsletter (only if you sign up) — your email address and language, stored by PostHog (EU), which sends the Liftcue emails you asked for on our behalf; used only for that, until you unsubscribe.

How AI features use your data

Spotter chat, post-session debriefs, and body/posture analysis send the relevant training inputs (and, for scans, the image you submit) to our AI providers (listed below) to produce a response. This data is processed to deliver the feature you requested. It is not used to train third-party foundation models.

Before any of your data is sent to an AI provider, the app asks for your permission in the app and explains what is sent and to whom. You can withdraw that permission at any time in Me → Data & privacy. If you don’t allow it, AI features stay off and the rest of the app keeps working.

Each AI provider is bound by a written agreement to protect your data with the same or an equal level of protection as described in this policy, to use it only to provide the feature you requested, and not to use it to train its models.

If you write to Spotter about harming yourself, Spotter replies with a fixed message pointing you to a local helpline and emergency number instead of an AI answer. What you wrote is not sent to an AI model, and neither it nor the reply is saved to your chat history or analytics. Your phone’s region setting is sent with requests to our servers so we can pick the right helpline. Read more on the Spotter safety page.

Who processes your data (subprocessors)

  • Amazon Web Services (AWS) — hosting, database, and authentication, in the EU (eu-west-1, Ireland).
  • RevenueCat — subscription entitlement management. It receives your account ID, email address, display name and purchase records, processed in the United States under Standard Contractual Clauses.
  • Amazon Bedrock (AWS) — AI models hosted by Amazon Web Services, processed in the EU, for most of our AI features, such as Spotter’s chat and image analysis. They receive only what each feature needs (for example your chat message, training data, body measurements, or Spotter’s eye photos), and AWS does not use it to train models or share it with the model makers.
  • Anthropic (Claude API) — the AI service behind the program-editing chat (and possibly other chat features in the future), used through Anthropic’s own API rather than Amazon Bedrock. It may also be used to analyze the photos you submit for Spotter’s eye or body/posture analysis. It receives what the feature needs: your chat message, your routine and training history, profile details such as your injuries and body measurements, and, if it is used for Spotter’s eye or body/posture analysis, the photos you submit. It may be processed outside the EU (for example in the United States) under appropriate safeguards, such as Standard Contractual Clauses. Anthropic does not use API data to train its models.
  • Sentry — crash and error diagnostics (United States, under Standard Contractual Clauses). Crash reports follow Sentry’s own retention period.
  • PostHog — product and website analytics, and marketing email: the newsletter and “tips & offers” (EU region); app analytics stay anonymous until you agree to share usage data linked to your account.
  • Apple and Google — delivering push notifications.
  • Microsoft (outlook.com) — support email.

Where your data is stored

We try to process your data in the European Union whenever possible. Primary storage is in the European Union (AWS eu-west-1). Some subprocessors, such as Anthropic for AI chat and photo analysis, RevenueCat, Sentry, Apple and Google for push notifications, and Microsoft for support email, may process data in other regions (for example the United States) under appropriate safeguards.

Your rights & choices

  • Access / export — download a complete copy of your data in Me → Data & privacy → show advanced → Export my data.
  • Deletion — permanently delete your account and all associated data, after a 14-day grace period, in Me → Data & privacy → show advanced → Delete my account.
  • Correction — edit your profile, body entries, injuries and other details in the app, or ask us to correct anything we hold about you.
  • Analytics choice — decide whether to share usage data linked to your account in Me → Data & privacy.
  • Unsubscribe — every marketing email links to your email settings page on liftcue.com, where you can turn Liftcue news off or unsubscribe from all marketing emails; you can also ask us at the address below. If the address has a Liftcue account, that change also updates the “tips & offers” choice in the app. Emails about your account and its security always arrive. We send marketing email only if you opt in.
  • Where applicable under the GDPR and similar laws, you may also object to or restrict processing and lodge a complaint with your local data-protection authority.

United States residents

Health data such as your body measurements, injuries, sleep, heart data and the photos you analyze is covered by our Consumer Health Data Privacy Policy, written for the Washington, Nevada and Connecticut health-data laws. It explains the separate consent the app asks for, who processes that data, and how to access or delete it, withdraw consent or appeal a decision. We don’t sell personal data, don’t share it for targeted advertising, and don’t use it to train large language models.

Canada (including Quebec)

Person in charge. The person in charge of protecting your personal information is Stefano Troia, Owner. Contact: support@liftcue.com.

Your rights. You can ask to see the personal information we hold about you, to correct it, and to get a copy of the information you gave us in a structured, commonly used format. You can withdraw a consent at any time in Me → Data & privacy, or by writing to us. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, to the Commission d’accès à l’information (cai.gouv.qc.ca).

Where your data goes. We store your data in the European Union (Ireland). Some service providers process it in the United States: Anthropic (the AI behind the program-editing chat), Sentry (crash reports), RevenueCat (subscriptions), Apple and Google (sign-in, push notifications and the app stores) and Microsoft (support email). Before sending personal information outside Quebec, we assessed the protection it would receive there. Amazon Web Services, PostHog, Anthropic, Sentry and RevenueCat process it only for us, under written agreements. Apple and Google handle your data under their own privacy policies when you sign in with them, receive notifications or buy in their stores. Data held in another country may be accessed by that country’s courts, law enforcement or national security authorities.

Profiling. The app analyses your logged training (sets, loads, repetitions and how hard they felt) to set your next loads and adjust your plan. This is how Liftcue works. If you turn on health data, Spotter also uses it, for example sleep and heart rate, to assess your recovery and readiness. This happens only after you turn on health data in the app, and you can turn it off at any time in Me → Data & privacy.

Automated decisions. Your training plan, and the changes to it after each session, are generated automatically from your answers, your training history and, if you allowed it, your health data. The app also decides automatically about age: if your answers in the app show that you are under 16, your account is closed and deleted after the 14-day period (a person can review this: write to support@liftcue.com); if the age check on your phone shows it, the app is blocked on that device and nothing is sent to us. You can ask us which personal information was used, the main reasons and factors behind a decision, and to correct that information. You can also ask a person to review a decision: write to support@liftcue.com. If you are under 16 and think we got it wrong, write to us before the 14 days end. A person will review it and, if the decision was wrong, we stop the deletion.

Australia

We handle your personal information under the Australian Privacy Principles. We are based in the Netherlands.

Overseas disclosure. Your personal information is likely to be disclosed to, or stored by, providers in these countries:

  • Ireland and other EU countries — Amazon Web Services (hosting, database, and AI on Amazon Bedrock) and PostHog (analytics, EU cloud).
  • The United States — Anthropic (AI chat), Sentry (crash reports), RevenueCat (subscriptions), Apple and Google (sign-in, push notifications, app stores) and Microsoft (outlook.com, support email).

We have contracts with Amazon Web Services, PostHog, Anthropic, Sentry and RevenueCat that require them to protect your information. Apple and Google handle your data under their own privacy policies when you sign in with them or use their app stores.

Access and correction. You can ask to see the personal information we hold about you and to correct it. Write to support@liftcue.com.

Automated decisions. We use computer programs, including AI models, to make decisions about you:

  • Personal information used — your answers in the app (goals, experience, schedule, equipment, injuries), your training history and, if you allow it, your health data (such as sleep, heart rate and body measurements).
  • Decisions made by the program alone — the exercises, sets, repetitions and loads in your training plan; changes to it after each session, such as holding a load when you report pain; and closing an account when your answers in the app show that the person is under 16 (it is deleted after a 14-day period; a person can review this: write to support@liftcue.com). If the age check on your phone shows it, the app is blocked on that device and nothing is sent to us.
  • Decisions where a program helps a person — none. A person at Liftcue does not review individual plans.

You can change any plan in the app. You can ask us about a decision, or ask a person to review it, at support@liftcue.com.

Complaints. Contact us first at support@liftcue.com. We reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand

Liftcue is run by Stefano Troia, who is based in the Netherlands. Contact: support@liftcue.com.

Overseas providers. Our service providers in Ireland, other EU countries and the United States (Amazon Web Services, PostHog, Anthropic, Sentry, RevenueCat, Apple and Google for push notifications, and Microsoft for support email) hold and process your information only for us and under our instructions. We remain responsible for it. When you sign in with Apple or Google or use their app stores, they handle your data under their own privacy policies.

Access and correction. You can ask to see the personal information we hold about you and to correct it. Write to support@liftcue.com.

Information from other sources. We also collect information about you from:

  • Apple Health (iPhone) and Health Connect (Android), only with your permission — for example weight, body fat, heart rate, resting heart rate, heart-rate variability, VO2 max, sleep, steps, active energy and workouts. On iPhone also your date of birth and sex, to fill in your profile;
  • Body-composition scans you upload (for example InBody or DEXA reports);
  • Apple or Google, if you sign in with them — your name and email address;
  • The App Store and Google Play, through RevenueCat — records of your purchases and subscriptions;
  • Install attribution (Apple AdServices on iPhone, the Play install referrer on Android) — which listing or link brought you to the app, and only if you agree to share usage data linked to your account.

We use this information to personalise your training, to manage your subscription and to show your progress. It is held by Liftcue (Stefano Troia, the Netherlands) and processed by the providers listed above. The law does not require you to give it. You can see and correct it, and you can stop the Apple Health and Health Connect sync at any time in iOS Settings or in Health Connect.

Complaints. Contact us first at support@liftcue.com. If you are not satisfied, you can complain to the Privacy Commissioner (privacy.org.nz).

Retention

We keep your data while your account is active. When you delete your account, we delete your personal data from our systems, except where we must retain limited records to meet legal obligations, and except crash reports, which Sentry keeps for its own retention period. This includes the inputs and photos you submit to AI features. AI providers receive them only to produce a response. Photos and scan files you submit for analysis are deleted from our servers right after the analysis, and in any case within 1 day; your own copy of Spotter’s eye photos stays on your phone until you delete it. Amazon Bedrock does not store what we send it. Anthropic normally deletes API data within 30 days, and keeps it longer (up to 2 years) only if it is flagged for a safety review or the law requires it.

How we govern your data

Retention and destruction. We keep your data while your account is active. When you delete your account, we delete your personal data after a 14-day grace period, as described in this policy. Photos and scan files you submit for analysis are deleted right after the analysis, and within 1 day at the latest. Access. Only Stefano Troia, the owner, has access to the systems that hold your data. The providers listed above process it only for us. Complaints. We answer every privacy complaint within 30 days.

Security

Data is encrypted in transit and at rest, access is restricted, and authentication is handled by a managed identity provider. No system is perfectly secure, but we work to protect your information.

Children

Liftcue is not directed to children under 16, and we do not knowingly collect their data. If you are 16 or 17 and live where the law requires it (for example in some US states), you can use Liftcue only after a parent or guardian approves it through Apple Family Sharing or Google Family Link. If your answers in the app show that you are under 16, we close the account and delete it after the normal 14-day deletion grace period. If the age check on your phone shows it, the app is blocked on that device and nothing is sent to us. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy; we’ll revise the “last updated” date and, for material changes, notify you in the app.

Contact

Questions or requests: support@liftcue.com.