Privacy policy
Draft pending legal review · Updated October 30, 2026
Summary
Privalift is a privacy-first fitness app and gym tracker. Your workouts, measurements, routines, and preferences stay in a local SQLite database on your device.
Privalift works without an account. Free users keep their fitness data locally and can export or import it whenever they choose. We do not run behavioral analytics or advertising trackers.
Data we process
| Data | Purpose | Location/recipient | Retention |
|---|---|---|---|
| Workouts, sets, notes, measurements, routines, settings | Core app functionality | Local SQLite database | Until device erasure or local deletion |
| Local photos | User-selected app-local media | App-private device storage | Until removed or device erasure |
| Encrypted photo objects and opaque references | Premium recovery | Private Supabase Storage/Postgres | Restore-point policy; 1 GiB account quota |
| Encrypted database artifact | Premium recovery | Private Supabase Storage | Restore-point policy |
| Backup metadata and device authorization | Upload, restore, retention, abuse prevention | Supabase Postgres | Account lifetime and backup-retention period |
| Account/OAuth identity | Authentication | Supabase Auth and selected identity provider | Until account deletion/provider policy |
| 1–5 star rating and account ID | Aggregate catalog rating and duplicate prevention | Supabase Postgres | Until rating/account deletion |
| Sanitized exception type, code location, app/build, OS, and device model | Crash diagnosis | Sentry | Configure and disclose the final Sentry retention period |
| Health Connect data | User-requested platform integration | Device/Health Connect; reset on restored device | Controlled by device and integration settings |
| Backup entitlement status | Premium backup access | Supabase Postgres | Account lifetime or entitlement revocation |
Privalift does not sell personal data, run advertising trackers, or send behavioral fitness analytics.
Encrypted backups
Premium backups protect an encrypted snapshot of your local database and app-local photos. The Recovery Key is created and stored on your device and is never uploaded to Privalift. Our servers store ciphertext and limited operational metadata, not readable fitness data or photos.
If you lose both your device and Recovery Key, Privalift cannot decrypt or recover the backup.
How backups are protected and how long restore points are kept is on the Security page.
Crash reporting
Crash reporting is required so Privalift can detect app failures. Reports are limited to exception type and sanitized code locations, app release/build, OS, device model/architecture, and whether the error was handled. Reports remove raw exception messages, account identity, fitness values, request bodies, breadcrumbs, arbitrary contexts, stack variables, device names, screenshots, replay data, and tracing data. Privalift does not use behavioral analytics.
Contact
Email support@privalift.app