Lift Ledger

Privacy Policy

Last updated: 25 June 2026

Lift Ledger ("the app") is a personal workout tracker. This policy explains what data the app collects, why, where it is stored, and the choices you have over it. It is written to be read, not to be hidden behind jargon.

The app is operated by Jawaz Illavia ("we", "us"), based in the United Kingdom. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), we are the data controller for the personal data described below.

What we collect

We only collect what the app needs to function. There are two categories.

Account details. Your email address and a password, used to create your account and sign you in. Passwords are never stored in readable form — they are stored as a one-way cryptographic hash by our authentication provider.
Workout data. The training content you create or log: plans, routines, exercises, workout sessions, the sets, weights and reps you record, and your in-app preferences (such as which plan you are following). This data is tied to your account.

We do not collect your name, location, contacts, photos, health data from Apple Health, advertising identifiers, or device tracking data. The app contains no advertising and no third-party analytics or tracking SDKs.

The workout scanner

The app includes an optional feature that reads a workout plan from a PDF you upload or a web link you paste, and turns it into a structured routine. When you use it — and only when you choose to use it — the content of that file or page is sent to our server and then to Anthropic, the provider of the AI model that extracts the exercises. It is used solely to perform that extraction and to return the result to you. If you never use the scanner, no such data is sent.

How your data is used

To create and secure your account and keep you signed in.
To store and display your workouts, history and progress.
To provide the optional scanner feature when you invoke it.
To operate, maintain and debug the service.

We do not sell your data, and we do not share it for advertising or marketing. We do not use it to build a profile of you for any purpose beyond running the app.

Where your data is stored

Account and workout data are stored using Supabase, our hosting, authentication and database provider, in a data centre in the European Union (London / EU-West region). Access is restricted by database row-level security, so each account can only ever read or write its own data. The scanner's AI processing is carried out by Anthropic. These providers process data on our behalf under their own data-processing terms.

How long we keep it

We keep your account and workout data for as long as your account exists. When you delete your account, the data is removed (see below). Transient operational logs may persist for a short period for security and debugging before being discarded.

Deleting your account and data

You can permanently delete your account at any time from inside the app: open the Account screen and choose Delete account. This immediately and irreversibly erases your account and all associated workout data — sessions, exercises, sets and preferences — from our database. There is no recovery once deleted.

Your rights

Under UK GDPR you have the right to access, correct, export or erase your personal data, and to object to or restrict its processing. Most of these you can exercise directly in the app (your data is visible to you, and the delete function erases it). For anything else, contact us using the details below and we will respond within one month.

Children

The app is not directed at children and is not intended for anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Security

Data is transmitted over encrypted connections (HTTPS) and stored by our providers with access controls and row-level security. No system is perfectly secure, but we take reasonable measures appropriate to a small personal application to protect your data.

Changes to this policy

If this policy changes, we will update the date at the top of this page. Material changes will be reflected here before they take effect.

Contact

Questions about this policy or your data? Email ILLAVIA@gmail.com.

This policy covers the Lift Ledger mobile app and its web version. It describes the app as built: a personal workout tracker with no advertising and no third-party tracking.