Privacy Policy

1. Introduction

Liftory (operated by Sergio Jimenez Jimenez, an individual based in Switzerland) operates the Liftory fitness tracking application and website, and is the controller responsible for your personal data. You can reach us at info@liftory.ch. This Privacy Policy explains how we collect, use, and protect your personal information.

This policy applies to Liftory on Android (package ch.liftory.app), iOS, and the web, published by liftory.ch.

2. Information We Collect

We collect the following types of information:

Account Information

• Email address (required for account creation)
• Display name (optional)
• Profile picture (optional)

Google Sign-In

You may create an account or sign in using Google Sign-In. When you authenticate with Google, we receive and store:

• Your email address (to identify your account)
• Your display name (for your profile)
• Your profile picture (downloaded and stored on our servers)

We only use this information to create and manage your Liftory account. We do not access your Google Drive, Gmail, contacts, or any other Google services.

Workout Data

• Training plans and exercises you create
• Workout history and completed sets
• Weights, reps, and rest times

Messages and Chat Data

• Messages you send and receive within the app (including conversations with the AI trainer)
• Message metadata (timestamps, sender, recipient)

Chat messages are not end-to-end encrypted. Messages are protected by encryption in transit (TLS) and encryption at rest (server-level disk encryption). Conversations with the AI trainer may be analyzed to improve and tune how the AI trainer responds. We do not use them to train AI or large language models.

Assistant Connections

If you connect an AI assistant or other MCP-compatible app to your Liftory account (see Connected AI Assistants under Data Sharing), we also store:

• A record of each connection: the assistant's name and web address, when you connected it, and when it last used Liftory
• The access tokens we issue to the assistant. They expire on their own (after one hour, and renewal tokens after 30 days without use) and are revoked as soon as you disconnect the assistant. Expired and revoked tokens are deleted by a daily clean-up 30 days after they were issued
• An audit log of the actions assistants take in Liftory: which account acted, through which assistant, which action was taken, whose data it concerned, whether it succeeded, and how long it took. It never contains the content of your plans, menus, or messages, or any token. We keep it to protect the service and to investigate misuse, for 15 days, after which it is deleted automatically

Deleting your account deletes its connections.

Usage Analytics (if enabled)

• App usage patterns and page views
• Device information and app version
• General location (country/region, not precise location)

Nutrition, Body Progress, and Profile Data

We store nutrition plans, foods, meals logged or skipped, and nutrition targets to provide meal tracking and coaching. If you choose to log body checks, we store weight, body measurements, and progress photos to show your progress. Optional profile fields include date of birth and maximum heart rate. These records may reveal sensitive health information.

Location, Photos, and Notifications

When you use nearby-coach search and allow location access, your coordinates are sent to our API to find coaches near you. A coach can also save a profile location and choose its public precision. Camera or photo-library access lets you select or take images for features such as profile and progress photos; images you upload are stored by Liftory. If you enable push notifications, we register your device notification token and platform and use Google Firebase Cloud Messaging and, on iOS, Apple notification services to deliver notifications. You can manage these permissions in your device settings.

Coaching, Purchases, and Technical Data

We store coaching relationships, access grants, appointments, reviews, purchases, subscription status, and payment references to deliver coaching and paid features. Stripe processes payments and coach payouts; we use transaction records to manage billing, refunds, and accounting. Technical diagnostics and server logs can include account identifiers, IP addresses, device/app information, request times, and errors to operate and protect the service.

3. How We Use Your Information

We use your information to:

• Provide and maintain the service
• Sync your data across devices
• Improve the app based on usage patterns
• Send important service notifications
• Facilitate communication between users and trainers
• Analyze AI trainer conversations to improve and tune how the AI trainer responds (we do not use them to train AI or large language models)
• Carry out the requests of AI assistants you connect, and keep an audit log of their actions to protect the service

Legal Bases

Where the GDPR applies, we rely on the following legal bases (Art. 6 and 9 GDPR). Under the Swiss FADP we follow its processing principles and ask for your explicit consent where the law requires it.

• Providing your account, the app, sync, messaging, the coach marketplace, and the AI trainer: performance of our contract with you (Art. 6(1)(b) GDPR)
• Health data you choose to enter, such as body checks, progress photos, or health conditions you tell the AI trainer: your explicit consent (Art. 9(2)(a) GDPR, Art. 6(7) FADP), which you give by entering it for that purpose and can withdraw at any time by deleting that data or your account
• Sharing data with an AI assistant you connect: your explicit consent on the consent page (Art. 6(1)(a) and 9(2)(a) GDPR, Art. 6(7) FADP), which you withdraw by disconnecting it
• Personalized ads: your consent (Art. 6(1)(a) GDPR), managed through the consent prompt and your device settings
• Usage analytics, analyzing AI trainer conversations to improve its answers, keeping the service secure, preventing abuse, and the assistant audit log: our legitimate interest in running, improving, and protecting Liftory (Art. 6(1)(f) GDPR); you can object at any time, and you can switch analytics off in Settings > Privacy
• Keeping payment records: our legal obligation under accounting law (Art. 6(1)(c) GDPR)

What you must provide. You need an email address to create an account; everything else is optional. If you do not provide something, only the feature that needs it is unavailable.

Automated decisions. We do not make decisions based solely on automated processing that have legal effects on you or similarly significantly affect you (Art. 22 GDPR, Art. 21 FADP). Plans and advice from the AI trainer or a connected assistant are suggestions; you decide whether to follow them.

4. Data Sharing

We do not sell your personal data for money. We share limited data with advertising partners to display ads (see Advertising); some laws, such as the California CCPA/CPRA, may treat this sharing as a "sale" or "share," and you can limit it through your device settings. We may share data with:

• Service providers who process data on our behalf to operate the app: hosting, analytics, payment processing (Stripe), and the AI service that powers the AI trainer (currently OpenAI)
• Advertising partners (for displaying ads, subject to your consent)
• AI assistants and other MCP-compatible apps you choose to connect, and their providers (see below)

Your coach can access the training, nutrition, and body-progress data covered by the permissions you grant. Messages are shared with their recipients. Coach profiles and reviews intended for publication are visible to other users and visitors. When you use the AI trainer, your requests and relevant account data are processed by OpenAI to provide answers and carry out the requested coaching tasks.

Connected AI Assistants

You can connect an AI assistant or other MCP-compatible app you choose, such as Claude (Anthropic), ChatGPT (OpenAI), or Gemini (Google), to your Liftory account (an "assistant" in this policy). This includes apps that run on your own device, such as Claude Code or Gemini CLI. We never do this for you: you start the connection in the assistant, sign in to Liftory, and approve it on Liftory's consent page, which names the assistant and lists what it will be able to do. From then on the assistant acts in Liftory as you, with the access you have, and we send it the data it asks for to carry out your requests. Depending on what you ask, that can include:

• Your name, your email address, and your Liftory roles (for example, whether you coach)
• Your training plans, workout history, and statistics
• Your nutrition plans (menus) and the nutrition settings they are built on
• Your conversations in Liftory, including messages other people sent you, and the messages the assistant sends for you

If you coach, the assistant can also reach the data of the clients you coach (their names, plans, menus, and workout history, and your conversations with them), within the access each client has given you and only while the coaching relationship lasts. Coaches may connect an assistant only where their clients agreed to it (see the Coach Agreement). If you are coached, you can withdraw your coach's access at any time, which also ends the access to your data of any assistant your coach has connected.

Where the data goes next depends on the app you connected and the AI service behind it. That provider processes the data as an independent controller, under its own terms and privacy policy, not on our behalf; once it has received the data, this policy no longer covers what it does with it. For users in Switzerland and the EU/EEA, Anthropic, OpenAI, and Google each name a company in Ireland as the controller in their privacy policies, and may transfer data to the United States and other countries under their own safeguards, such as standard contractual clauses. An app on your own device sends the data to whichever AI service you set it up with (see Data Storage and Security).

Health data. Assistants can read body-progress summaries, including weight and measurement trends, for you or for a coached client who has granted body-data access. They cannot read progress photos. Training and nutrition data, and anything about your body or health contained in it, can still reveal information about your health. Such data is sensitive personal data under the Swiss FADP (Art. 5 lit. c FADP) and a special category of personal data under the GDPR (Art. 9 GDPR). We share it with an assistant only on the basis of your explicit consent, given on the consent page. You can withdraw that consent at any time by disconnecting the assistant; this does not affect what was shared before.

Disconnecting. You can disconnect an assistant at any time in Settings > Connected assistants. It then loses access to your account within about a minute. You can also remove Liftory in the assistant itself; to be sure the connection is ended on our side, disconnect it in Liftory as well. Data an assistant has already received stays with its provider under that provider's terms; to have it deleted, contact the provider.

5. Advertising

We use Google AdMob to display ads. AdMob may collect device identifiers for personalized advertising, subject to your consent. You can manage ad preferences in your device settings or opt out of personalized ads.

AdMob also processes IP addresses (approximate location), ad interactions, and diagnostics for advertising, measurement, and fraud prevention, including with non-personalized ads.

6. Data Storage and Security

Your data is stored securely on our servers. We use industry-standard encryption for data transmission (TLS) and server-level disk encryption for data at rest. Chat messages are stored on our servers to enable message delivery and history. Your data is retained only while your account is active. You can delete your account at any time from the app settings; when you do, we delete your personal data from our systems and do not keep it, except for records we are legally required to retain and residual copies in routine backups, which are purged on our regular backup cycle. The records we keep are limited to what documents money that changed hands (purchases, payments, refunds and the sessions they paid for); accounting law requires us to keep them for ten years, after which they are deleted too. Your training data, plans, photos and messages are erased straight away, and any subscription is cancelled at that moment. We may also delete accounts that have remained inactive for an extended period, together with their data. We do not guarantee that your data will be stored or available indefinitely, so we recommend keeping your own backups of anything you want to retain. While Liftory is in beta and under active development, we may also reset or migrate data as part of building, improving, or moving the service. Workout data is also stored locally on your device for offline access. We and our service providers may process your data in Switzerland, the EU/EEA, or other countries; where we transfer data outside your country, we rely on appropriate safeguards such as standard contractual clauses. When you connect an assistant, the data it receives is disclosed at your request to the provider of that app. For the best-known assistants, that provider is a company in Ireland for users in Switzerland and the EU/EEA, which may transfer the data to the United States and other countries under its own safeguards; other apps may send it to countries whose law does not protect personal data to the same standard. We make that disclosure on the basis of your explicit consent (Art. 49(1)(a) GDPR, Art. 17(1)(a) FADP).

To request account or personal-data deletion without using the app, email info@liftory.ch from your account email address. We may need to verify account ownership. Coaches with active paid client subscriptions or unused paid sessions must settle those obligations before the in-app account deletion can complete; contact us for help or to exercise your data rights.

7. Your Rights (Swiss FADP and GDPR)

Depending on where you live, Swiss data protection law (the revised FADP) and the EU/EEA GDPR give you the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (via Settings > Delete Account)
• Export your data
• Object to or restrict certain processing, and withdraw consent where processing is based on consent
• Opt out of analytics (via Settings > Privacy)
• Disconnect an AI assistant and withdraw the consent you gave it (via Settings > Connected assistants)
• Lodge a complaint with a data protection authority (in Switzerland, the Federal Data Protection and Information Commissioner; in the EU/EEA, your local supervisory authority)

8. Children's Privacy

Our service is not intended for anyone under 16 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy in the app.

10. Contact Us

For privacy-related questions, contact us at: info@liftory.ch

Report a security issue. If you believe you have found a security vulnerability in Liftory, including the app, its API, or the connector for AI assistants, email info@liftory.ch with enough detail for us to reproduce it. Please do not access, change, or delete other people's data while testing, and give us reasonable time to fix the issue before you disclose it. Our security.txt lists the same contact.