Privacy Policy

Information you give us

• Account details: your name, email address, password or one-time sign-in code, and your sign-in method (email, Apple or Google).
• Profile and training setup: gender, age or year of birth, height, body weight, goals, experience, training days, available equipment, gym type, chosen coach, preferred units and an optional event date.
• Health information: injuries, pain, limitations, medical considerations and pregnancy status you tell us about, and how training felt in your weekly check-ins.
• Training records: workouts, sets, repetitions, weights, rest times, exercise notes, cardio sessions, saved and custom workouts, and your progress (body weight, measurements and progress photos).
• Form checks: videos of your lifts that you upload for form analysis.
• Conversations: messages and photos you send to the Engine (our AI coach), and messages you send to Stephanie through Message Stephanie.
• Nutrition: foods, meals and drinks you log, nutrition targets, and food photos or barcodes you scan.
• Community: posts, comments and reactions you share with other members.
• Support: anything you send us when you contact support.

Information collected automatically

• Device and app data: device model, operating system, app version, time zone, language, push notification token and crash reports.
• Usage: the screens and features you use, and when, so we can run and improve the Service.
• Purchases: your plan, trial and subscription status from the App Store, Google Play or Stripe. We never see or store your full card details.
• Website: on our websites, essential cookies and local storage keep your sign-up progress; we may measure visits to see how members find us.

Apple Health

With your permission, Lift Engine can save the workouts you finish to Apple Health and read heart rate during a workout. Health data is used only to provide these features. It is never used for advertising, never sold, and never shared with third parties for marketing. You can turn access off at any time in the Health app or in your iPhone’s Settings.

• To create and secure your account and sign you in.
• To build, adjust and progress your training program, including weekly check-ins, warm-ups, cool-downs and recovery sessions.
• To give coaching through the Engine and form feedback on the videos you upload.
• To pass your messages to Stephanie and bring her replies back to you.
• To calculate nutrition targets and provide food logging (Meal Engine Lite).
• To process subscriptions, trials and refunds, and to restore your purchases.
• To send service messages: sign-in codes, password resets, replies to your messages, workout and check-in reminders, and account notices.
• With your consent, to send product news and offers. Every marketing email has an unsubscribe link.
• To provide support, keep the Service safe, prevent fraud and misuse, fix problems and improve features.
• To meet our legal obligations.

Where the GDPR applies, we rely on performing our contract with you (providing the Service), your consent (health information, Apple Health, marketing, and optional features such as photo scanning), our legitimate interests (security, support and improving the Service), and legal obligations.

Lift Engine uses artificial intelligence to build and adapt training programs, answer questions in the Engine chat, analyse form videos and help with nutrition. To do this, the relevant parts of your profile, training history, check-ins, messages, photos or videos are sent to AI providers that process them on our behalf: Anthropic (Claude), OpenAI and Google (Gemini). They act under their business API terms, which do not permit them to use this data to train their models.

Programs are checked by our own rules for safety, equipment and progression before you see them. AI output can still be wrong. It is general fitness guidance, not medical advice, and does not replace a doctor or physiotherapist. You can change, swap or remove anything the Engine suggests, and you can contact us if you want a person to review a decision.

If Stephanie Sanzo is your coach, you can send her messages from the app. When you do, your message, your first name and an internal member number are sent to a private Telegram group that only Stephanie and the Lift Engine team can see, using the service of Telegram Messenger Inc., which may store the messages outside Australia. Stephanie’s replies come back to you in the app, as a push notification and by email. Message Stephanie is not an emergency or medical service. For pain or injury, ask the Engine for an instant answer; in an emergency, call 000 (or your local emergency number).

We do not sell your personal information. We share it only with the people and services that help us run Lift Engine:

• Development and hosting: Shine Dezign, our development partner, which builds, maintains and hosts the app and its servers; Amazon Web Services (servers, database and file storage, Sydney region); Cloudflare (website hosting and security).
• AI providers: Anthropic, OpenAI and Google, as described in section 3.
• Meal Engine: our sister nutrition service, operated by the same company. Your food searches and the details needed for nutrition targets are sent to it server to server. Your Lift Engine account is not shared with or merged into a Meal Engine account.
• Coach messaging: Telegram, as described in section 4.
• Email: Twilio SendGrid sends our emails; Google Workspace handles our support inbox; Klaviyo manages our marketing email list.
• Notifications: Expo, Apple Push Notification service and Firebase Cloud Messaging deliver push notifications.
• Payments: Apple (App Store), Google (Google Play), RevenueCat (subscription management) and Stripe (web checkout).
• App stability and measurement: Google Firebase Crashlytics (crash reports), Meta (purchase events, to measure our advertising) and Branch (links and install attribution).
• Stephanie Sanzo, for messages you send her.
• Other members, for anything you post in the community.
• Authorities, when the law requires it, or to protect the safety of a person or the Service.
• A buyer or successor, if the business or its assets are sold or restructured, under this policy.

These providers may only use your information to provide their service to us, and must protect it.

Our main servers and files are in Australia (Amazon Web Services, Sydney). Some providers listed above, including the AI providers, Telegram, SendGrid, RevenueCat, Stripe, Expo and Google, process information in other countries, including the United States, the European Union and India. Where we transfer information outside Australia, the EU or the UK, we take reasonable steps to make sure it is protected to the standard of this policy, including the European Commission’s Standard Contractual Clauses where they apply.

• We keep your account and training data while your account is open, so your program and history keep working.
• Form videos and chat photos are kept privately and deleted with your account.
• When you delete your account, we delete your profile, training records, Engine conversations and photos, and your Message Stephanie conversation, including its Telegram topic. Some providers may keep copies for a short time under their own policies.
• We keep records we must keep by law, such as purchase and tax records, for as long as the law requires (usually up to 7 years).
• Backups are overwritten on a rolling cycle.

• Access and correction: see and change most of your details in Account, or ask us for a copy.
• Deletion: delete your account at any time in the app (Account → Delete account), or ask us.
• Consent: withdraw consent for Apple Health, notifications, photo scanning or marketing at any time, in the app, your device settings or the unsubscribe link.
• GDPR and UK GDPR: you can also ask us to restrict or object to processing, and to receive your data in a portable format.
• California: you can ask what we collect and why, and ask us to delete it. We do not sell or share personal information for cross-context behavioural advertising as defined by the CCPA, and we will not treat you differently for using your rights.

To make a request, email support@liftengine.appwith the subject “Privacy request”. We will reply within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority.

We protect your information with encryption in transit, encryption of sensitive content at rest (including Engine and Stephanie conversations), access controls and private file storage. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will tell you and the regulator as the law requires, including under Australia’s Notifiable Data Breaches scheme.

Lift Engine is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has an account, email support@liftengine.app and we will delete it.

We may update this policy as the Service changes. If a change is significant, we will tell you in the app or by email before it takes effect. The date at the top shows when it was last updated.

Fitness Media Company Pty Ltd, Victoria, Australia. For anything about your privacy or this policy, email support@liftengine.app.