GymLift Privacy Policy

What GymLift collects, where it goes, and what stays on your devices — as of GymLift 1.10.1.

The short version

Your readiness score, your plan and every training decision are computed on your iPhone and Apple Watch. Apple Health readings stay on your devices. Your iCloud holds your own entries and the scores derived from your readings. Versions before 1.9 also saved the readings behind each day's score there; an update removes those copies.
Your workouts, check-ins and plan are stored in your private iCloud database, encrypted by Apple. We cannot read it; it restores your data on a new device.
With Pro, GymLift has a coach that writes in plain words: the day's explanation, a brief when you tap Read my day, answers when you write to it, and what it took from a note in the check-in or at the finish. It starts only after you agree on its first screen, and so does the day's explanation. For it, GymLift sends through our server to the model provider (Anthropic) what the coach needs about your day and your training: today's readiness and the Health readings behind it, today's plan and the changes made to it, what you logged yesterday, your goal, what the coach remembers about you, and everything you write or dictate to it — the full list is in the table below. Not your name, your Apple ID or your Sign in with Apple identifier. Our server checks that your subscription is active and keeps nothing. Anthropic keeps requests up to 30 days for abuse monitoring and does not train on them.
Switch off "Wording by Claude" (Settings → Wording by Claude) and nothing is sent to the model provider: the coach is off, the day's explanation comes from built-in templates, and the plan is the same either way.
We use two third-party services: Amplitude for product analytics (events without health content) and Adapty for subscription status and for the onboarding and subscription screens it shows. No advertising SDKs, no tracking across apps.
Delete account inside the app removes your iCloud data, our anonymous identifiers and the Sign in with Apple link.

What we process and why

Data	Where it lives	Purpose
Apple Health data you allow GymLift to read: sleep, heart rate, resting heart rate, HRV, heart-rate recovery, active energy, steps, body mass, height, body fat percentage, waist circumference, nutrition (energy, protein, fat, carbohydrates), sleeping wrist temperature, respiratory rate, blood oxygen, VO₂ max, workouts, your date of birth and sex	On your iPhone and Apple Watch; readiness is computed there	Your daily readiness score, your starting profile and the adaptation of your session, and your measurements
What GymLift writes to Apple Health: your workouts with the heart rate and active energy measured during them, body weight, body fat and waist you enter, and the effort of a finished workout	Apple Health on your devices	Your training counts in Health and Fitness
Workouts, sets, check-ins, notes to the coach and coach conversations, training plan, body-weight entries, readiness scores	Your iCloud private database (CloudKit) and your devices	The app itself; restore on a new device
For the coach (Pro, after you agree): today's readiness band and score and what moved it: sleep, resting heart rate, HRV, recent training load, respiratory rate, blood oxygen, VO₂ max and wrist temperature, each as how far it is from your usual, and how your check-in answers (energy, sleep quality, stress, soreness) moved the score; today's plan with its weights, the changes the app made to it and why (for example short sleep, soreness or pain in a body area, illness, stress, an outside session), and the day's detail — a test, a paused block, a skipped day and its reason; your training days, the week of the cycle and when its deload comes, and your records when they come up; yesterday's steps, active energy, heart-rate recovery and the food you logged (energy, protein, fat, carbohydrates), or that nothing was logged; the four-week trend of up to three of today's lifts; your goal and its milestones; what the coach remembers about you: your goals, limitations and the body areas you marked, your regular outside activities (including ones found in your Apple Health workouts), events you told it about with their dates, and notes you wrote; everything you write or dictate to it (on Today, in the chat, in the check-in, at the finish) with the local date, time and time zone it was written in; the latest turns of the conversation, the coach's replies included, and the coach's notebook about you — older turns are folded into the notebook by a separate request; in your first conversation, your training goals; for lifts you have logged, your current best set, its trend, and the targets with their dates; if you are new, your age, body weight, experience, where and how many days a week you train, and your starting weights. With proof of an active subscription (Apple's purchase record), which our server checks and does not pass on.	Sent through our Cloudflare Worker, which keeps nothing, to Anthropic's API, which keeps requests up to 30 days for abuse monitoring and does not train on them	The coach's words: the day's explanation, Read my day, answers, the notes it took (Pro, after you agree on the coach's first screen, while "Wording by Claude" is on)
For Pro's daily explanation: readiness band and score, reason codes, how far sleep, resting heart rate and HRV are from your usual in percent, your check-in stress answer, today's changes to the plan and the day's detail — with an anonymous per-install identifier that our server counts requests by and the model never sees	Our Cloudflare Worker, which uses your IP address only to limit how often requests come and keeps nothing, then Anthropic's API, as above	The day's explanation in plain words (Pro, after you agree on the coach's first screen, while "Wording by Claude" is on)
Product analytics events — screen and feature use, with categories such as your readiness band, the effort you rate a workout, your training goal, experience and days a week, and the body area you marked when a goal lift is swapped, how you heard about GymLift if you tell us, which subscription screen you saw and, when you buy, the plan with its price and currency (no receipt, no payment details); never a Health reading — a device identifier and an approximate location derived from your IP address. The only text in them: a search in the exercise catalog that found nothing, and the name of an exercise you create — each cut to 60 characters	Amplitude	Understanding which features work, and which exercises the catalog is missing
Subscription status and purchase history, tied to the opaque identifier from Sign in with Apple; which build you run (App Store or TestFlight); your Amplitude identifiers, so purchases and product analytics line up — Adapty passes your trial, purchase, renewal and cancellation events, with the plan and its price, to Amplitude; and, if you installed GymLift from an Apple Ads search result, Apple's attribution for it (campaign and keyword — no advertising identifier, no IP address)	Adapty and Apple	Unlocking Pro on your devices; knowing which builds and which ads bring subscribers; receipts stay with Apple
The onboarding and subscription screens Adapty shows: which of them you saw and the answers you pick on them — your goal, experience, equipment, the body areas you mark and how you heard about GymLift — tied to the same identifier	Adapty; the answers also stay on your iPhone, where your plan is built from them	Showing those screens; knowing where people stop and which screens work
A Hevy export (CSV) you import	Read on your iPhone; the workouts land in your iCloud database like your own	Your training history in GymLift
Sign in with Apple user identifier	Your device and your iCloud database	Account identity; revoked on Delete account
A workout card you choose to share	The app you pick in the share sheet	Sharing
Your email, if you join the waitlist on gymlift.app, with the time and your country	Cloudflare, which hosts gymlift.app	One email when the beta opens

What we never do

Sell or rent your data.
Send your name, your Apple ID or your Sign in with Apple identifier to our server or to the model provider. The model provider gets only what is listed above, and only while "Wording by Claude" is on.
Let a language model make a training decision. It turns your words into notes you see and can undo, and it writes explanations and suggestions. The numbers and the changes come from the on-device engine, and a suggestion changes nothing until you accept it.
Use your data for advertising or track you across apps and websites.

Your controls

Settings → Wording by Claude: switch it off and nothing is sent to the model provider. The coach is off, and texts come from built-in templates.
Settings → Apple Health access: choose what GymLift reads and writes.
Settings → Your data: export everything as CSV, or delete your account and all your data.
The waitlist: write to hello@gymlift.app and we delete your email.

Children

GymLift is for adults and people 16 and older. We do not knowingly collect data from children.

Changes

We update this page before the data flows change and note the version below.

Version 0.5 · 23 October 2026 · GymLift 1.10.1 · Questions: hello@gymlift.app