Privacy Policy

Last updated: July 9, 2026

The short version

We collect only what's needed to make the app work. We don't sell your data. We don't show you ads. Your workout data is yours.

What we collect

Account information

When you sign up with Google, we receive:

  • Email address - to identify your account
  • Name (optional) - if provided by Google

We do not have access to your Google password.

Workout data

When you use the app, we store:

  • Your workout history (exercises, weights, sets, reps)
  • Your current working weights
  • Your settings (rest timer duration, units preference)
  • Workout dates and completion status

Apple Health (optional, iOS only)

If you turn on Apple Health in Settings, the app — only with your explicit permission — can:

  • Read your bodyweight from Apple Health, so your Strength Score and ranking stay accurate without re-entering it.
  • Write your completed workouts (as a strength-training session with an estimated active-energy value) and your bodyweight to Apple Health, so they count toward your activity rings.

This is off by default. You control it in the app's Settings and in iOS Settings → Health → Lift5x5, and can turn it off at any time. We use Apple Health data only to provide these features — we never use it for advertising, never sell it, and never share it with other users. The only Apple Health value we store on our servers is the bodyweight you choose to import (which becomes your account bodyweight); we do not store any other Apple Health data.

Health Connect (optional, Android only)

If you turn on Health Connect in Settings, the app — only with your explicit permission — can:

  • Write your completed workouts to Health Connect as a strength-training session with an estimated active-energy value, so they count toward your daily activity.
  • Read your bodyweight from Health Connect (only when you tap Import), so your Strength Score and ranking stay accurate without re-entering it.

This is off by default. You control it in the app's Settings and in Health Connect's own permission manager, and can turn it off or revoke access at any time. We use Health Connect data only to provide these features — we never use it for advertising or other commercial purposes, never sell it, and never share it with third parties or other users. The only Health Connect value we store on our servers is the bodyweight you choose to import (which becomes your account bodyweight); we do not store any other Health Connect data.

Subscription data (Pro Programs)

If you subscribe to Pro Programs, the app shares an anonymized user ID and purchase events with RevenueCat, our subscription management provider. We share:

  • An anonymous identifier (not linked to your email or name)
  • Subscription status (active, expired, cancelled)
  • Purchase and renewal events from Apple or Google

Apple and Google handle the actual payment — we never see or store your card details or financial information. Refunds and cancellations are managed by Apple or Google directly.

Analytics

We use Umami, a privacy-focused analytics tool, on our website. It collects:

  • Page views (anonymized)
  • Browser type and device
  • Country (from IP, not stored)

Umami does not use cookies and does not track you across sites.

What we don't collect

  • Location data
  • Contacts
  • Photos or media
  • Health data beyond the bodyweight you choose to import (see "Apple Health" and "Health Connect" above)
  • Payment card details (handled entirely by Apple or Google)

How we use your data

Your data is used to:

  • Sync your workouts across devices
  • Calculate your progression and show statistics
  • Restore your data if you reinstall the app

We do not:

  • Sell your data to third parties
  • Use your data for advertising
  • Share your data with other users

Where your data is stored

Your data is stored on our servers hosted in Europe (Sweden). We use industry-standard security practices to protect your data.

Third-party services

We use the following providers to deliver core functionality:

  • Firebase Authentication (Google) — sign-in via Google or Apple. Receives your email when you authenticate.
  • RevenueCat — subscription management for Pro Programs. Receives anonymized user IDs and purchase events. Privacy policy
  • Apple App Store / Google Play Store — process all subscription payments. We never see card or banking details.

We do not share your workout history, weights, or training data with any of these providers.

Your rights

You can:

  • Export your data - Contact us and we'll send you everything we have
  • Delete your account - Contact us and we'll permanently delete all your data
  • Update your information - Through the app settings

Data retention

We keep your data as long as you have an account. If you delete your account, all your data is permanently deleted within 30 days.

Children's privacy

The app is not intended for children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

If we make significant changes, we'll notify you through the app or by email. Minor clarifications may be made without notice.

Contact

Questions about privacy? Email us at privacy@lift5x5.app