CoLift Privacy Policy

What we collect

Account data

When you register by email, you provide your email address and create a password. When you sign in with Apple or Google, we receive an account identifier and available profile information, such as your email address, first name and last name. We do not receive your Apple or Google account password.

Regardless of how you sign in, we store your sign-up date and account identifier. If you registered by email, your CoLift password is stored in an irreversible form — not even we can read it back.

Signing in is required: without an account your training history cannot be tied to you or restored on a new device.

Training data

The programs and workouts you build; exercises, including the ones you create yourself; the sets you complete — weight and reps; workout times; summaries and personal bests; achievements; your height, body weight and interface language.

Apple Health data

Your body weight, if you allowed the Apple Health connection. See the "Apple Health" section below.

Support correspondence

The text of your messages in the support chat, the feedback you leave in the app, and any images you attach. If you email support@getcolift.app, also your email address and the emails themselves.

Diagnostics

When the app crashes, freezes or runs into another technical problem, we receive the information needed to diagnose it, including: app version and build number, platform, the screen where the problem occurred, installation and launch identifiers, your account identifier, the error text and the stack trace. We use this data only to find and fix technical problems.

Product analytics

The app sends our server events about your interaction with its interface and features, how long and how often you use it, and your participation in product experiments. For example, we may record screens being opened, individual actions being taken, and a workout being started or finished. Events carry technical data about the app and the device and an installation identifier and, once you are signed in, your account identifier.

What we do not collect

We do not access your location, contacts, calendar or microphone. The app has no advertising identifier and does no tracking as Apple defines it. We use no third-party analytics, advertising or attribution services. We read no Apple Health data other than body weight — see the section below.

Why we process your data

We process your data in order to:

• give you a working app: store your programs and training history, sync them across your devices and restore them after a reinstall — on the basis of our contract with you, that is, the terms of use;
• answer your support requests — on the basis of our contract with you;
• connect the app to Apple Health — on the basis of your explicit consent, which you give in the system dialog and can withdraw at any time;
• find and fix errors in the app — on the basis of our legitimate interest in the app working;
• understand how the app is used and improve it — on the basis of our legitimate interest in the app being easy to use;
• comply with the law, where a legal obligation applies to us.

We do not make solely automated decisions that produce legal or similarly significant effects concerning you.

Who we share data with

We do not sell data or share it for advertising. Data may be accessed by:

• Apple and Google — if you sign in through them. We receive your email and name from them; they learn that a sign-in happened. Their processing is governed by their own policies;
• infrastructure providers — the hosting our backend and data run on, and the services that carry network traffic and deliver emails and support messages. They process data on our behalf;
• public authorities — if we receive a lawful and binding request.

If the categories of recipients or the purposes of sharing change significantly, we will update this page.

Where data is stored

Data is stored on servers in Germany and on your device. Emails you send to support@getcolift.app are kept by our email provider, Zoho Mail. Our mailbox's primary data center is in the United States; where else Zoho may process data is described in its privacy policy.

On your device the app keeps a local copy of your training data so it works offline, and access tokens — in the iOS system secure storage (Keychain). When you sign out, the local copy is erased.

How long we keep data

• Training data and profile — for as long as your account exists.
• Support chat correspondence — for as long as your account exists.
• Emails to support@getcolift.app — in the support mailbox until you ask us to delete them.
• Diagnostic reports and product analytics events — no longer than 180 days, then deleted automatically.
• Summary statistics across all users, from which no individual can be singled out — may be kept longer.
• After account deletion — see "How to delete your account".

Your rights

You can:

• find out what data of yours we hold and get a copy of it;
• correct inaccurate data;
• delete your data together with your account;
• restrict processing or object to it;
• withdraw consent for the Apple Health connection by switching it off in settings;
• lodge a complaint with the data protection authority in your country if you believe we are infringing your rights.

To exercise any of these rights, write to support@getcolift.app or use the support chat in the app.

How to delete your account

You can delete your account in the app: on the Settings screen, tap "Delete account" at the very bottom, below "Log out", and confirm.

If you change your mind, you can cancel the deletion until the date shown on the "Account queued for deletion" screen: sign in to the app or reset your password, then tap "Cancel deletion" there.

Deleting the account removes your data from our active systems. The local copy on your device is erased immediately. Emails you sent to support@getcolift.app are not linked to your account and are not deleted automatically — ask us, and we will delete them too.

Backup copies expire as backups are rotated on schedule. We may retain some information where the law requires it or where it is needed to investigate failures and disputes.

Workouts the app wrote into Apple Health stay on your device — we have no access to them. You can delete them in the Health app.

If you cannot get into the app, write to support@getcolift.app — if possible, from the address your account is registered to. We may need to verify that the account is yours.

Security

The app talks to our server over a secure connection (HTTPS) only. Passwords are stored in an irreversible form. Access tokens on your device live in the iOS system secure storage.

No system is perfectly secure, so please do not reuse a password you use elsewhere.

Children

CoLift is not intended for children under 13, and we do not knowingly collect their data. If you are a minor under the law of your country, use the app with the consent of a parent or guardian.

If we confirm that an account was created by a child under 13, we will delete it. A parent or guardian can delete the child's account themselves — in the app, Settings → "Delete account" — or contact us from that account: through the in-app support chat or by writing to support@getcolift.app from the email address the account is registered with.

How we change this policy

We may change this policy. For significant changes we will try to notify you separately — in the app or by email. The date of the last update is always shown at the top of this page.