Privacy Policy

Effective date: April 29, 2026

LiftSlate ("we", "our", or "the app") is operated by Ezequiel Garcia. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the LiftSlate mobile application.

By using LiftSlate, you agree to the collection and use of information as described in this policy.

1. Information We Collect

We collect the following information to provide and improve the app:

a) Account Information

• Email address
• Display name
• Authentication credentials (securely managed by our authentication provider)

b) Fitness and Exercise Data

• Exercise data and lift records (max weights, sets, reps, percentages)
• Workout logs and history
• Notes added to exercises or workouts

This data is used exclusively for app functionality (tracking your lifts and calculating training weights). It is not used for health analysis, diagnostics, or shared with health platforms.

c) Gym and Membership Data

• Gym information (name, description, logo image) if you create or join a gym
• Gym membership and role information (athlete, coach, admin)

d) Preferences

• Unit preference (kg or lbs)
• Rounding increment settings

e) Automatically Collected Information

• Device type and operating system version
• App crash reports and error logs (via Sentry)
• General app performance metrics

2. Information We Do NOT Collect

• We do not collect your location data.
• We do not collect biometric data.
• We do not collect financial or payment information.
• We do not use advertising identifiers or tracking pixels.
• We do not access your device contacts, camera, or microphone (camera access is only requested if you choose to upload a gym logo via the photo library).
• We do not integrate with Apple HealthKit, Google Health Connect, or any health platform.

3. How We Use Your Information

We use your information solely to:

• Provide the core app functionality (tracking lifts, calculating training weights, managing workouts)
• Authenticate your account and maintain your session
• Enable gym features (creating, joining, and managing gyms)
• Send essential account-related communications (e.g., password resets, security alerts)
• Monitor and fix app errors and crashes
• Improve app performance and reliability

We do not use your information for advertising, marketing, profiling, or training AI/ML models. We do not sell, rent, or trade your personal information to third parties.

4. Third-Party Services

We use the following third-party services to operate the app:

• Supabase (database and authentication) — stores your account and app data on secure cloud servers hosted on Amazon Web Services (AWS) in the West EU (Ireland) region (eu-west-1). Supabase Privacy Policy.
• Sentry (error tracking) — captures crash reports and technical diagnostic data only. We do not intentionally send user-entered content to Sentry. Sentry Privacy Policy.
• Google OAuth (optional sign-in) — if you choose to sign in with Google, we only receive your email and name. Google Privacy Policy.
• Apple Sign-In (optional sign-in) — you may choose to hide your email. Apple Privacy Policy.

5. Data Storage and Security

• All data is transmitted over encrypted connections (TLS/HTTPS).
• Your data is stored on Supabase-managed servers hosted on AWS in the West EU (Ireland) region (eu-west-1).
• Authentication tokens are stored securely on your device using platform-native secure storage (Keychain on iOS, Keystore on Android).
• Database access is controlled through row-level security policies, ensuring users can only access their own data.

6. Data Retention

• Your data is retained for as long as your account is active.
• When you delete your account, all your data is permanently deleted immediately. This action is irreversible.
• Anonymized crash data retained by Sentry may persist per their own retention policies but cannot be linked back to your identity.

7. Data Sharing

• Within your gym: your display name and role are visible to other gym members. Coaches and admins may view workouts assigned to you.
• Error reports: anonymized crash data is sent to Sentry for debugging.
• Legal requirements: we may disclose your information if required by law or court order.

8. Your Rights

• Access — all your data is visible within the app.
• Correct — you can update your profile, exercises, and maxes at any time.
• Delete — permanently delete your account from the Profile screen or by contacting us.
• Data portability — contact us to request a copy of your data.

To exercise any of these rights, contact us at liftslate.support@gmail.com.

9. Account Deletion

You can delete your account at any time from the Profile screen. All your data is permanently and immediately removed. If you cannot access the app, email liftslate.support@gmail.com and we will process your request within 7 business days.

10. Children's Privacy

LiftSlate is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

11. EEA and UK Residents (GDPR)

• Legal basis: contract performance for core features; legitimate interests for diagnostic data.
• Your data is stored within the EEA on AWS servers in Ireland (eu-west-1).
• You have the right to restrict processing, object, and lodge a complaint with your local data protection authority.

12. California Residents (CCPA/CPRA)

We do not sell your personal information. You have the right to know what data we collect, request deletion, and opt-out of sale (not applicable). Contact liftslate.support@gmail.com to exercise these rights.

13. Changes to This Policy

We may update this policy from time to time. Changes will be posted here with an updated effective date. Continued use of the app after changes constitutes acceptance.

14. Contact

Ezequiel Garcia
Location: Israel
Email: liftslate.support@gmail.com