LiftPilot

Privacy Policy – LiftPilot

Data controller

Francesco Pacenza, Via Mesca 46 (CS), Italy, VAT no. 03994800781 (“Controller”). Contact for any privacy request: support@liftpilot.fit.

Data processed

  • Account: email, name; with Google or Apple sign-in, the name and email provided by that service.
  • Body data and goals: sex, date of birth, height, weight, activity level, goal, body measurements, body fat and progress photos.
  • Training: routines, exercises, sets, weights, reps, duration and workout notes.
  • Nutrition: foods and amounts logged, water, supplements taken, activities added manually.
  • Apple Health or Health Connect data, only if you connect them: steps, active calories, resting calories and weight.
  • Preferences stored on your device (language, theme, training settings) and the workout in progress.

Health data

Weight, measurements, nutrition, supplements, workouts and Health data may be data concerning health (Art. 9 GDPR). We only process them with your explicit consent, which you give when you first sign in and can withdraw at any time by deleting your account. Without this consent the app cannot work.

Purposes and legal basis

Providing the app’s features (calculating targets, logging and analysing workouts and nutrition): performance of a contract (Art. 6(1)(b) GDPR) and explicit consent for health data (Art. 9(2)(a) GDPR). We do not use your data for advertising or commercial profiling and we do not sell it.

Apple Health and Health Connect

Data read from Apple Health (HealthKit) or Health Connect is only used to calculate your calorie balance and show steps and calories in the app. It is not used for advertising, not shared with third parties and not sold. You grant and revoke access in the Health or Health Connect settings.

Who can see the data

Only you. Every piece of data is tied to your account and access rules are enforced by the database. Progress photos are kept in private storage.

Providers

  • Supabase (database, file storage and authentication; project in the EU region).
  • Open Food Facts: when you search for a product or scan a barcode, the search text or code is sent to Open Food Facts without any account data.
  • Expo (app updates) and, for reminders, your phone’s notification system.
  • Google and Apple, only if you use their sign-in. Of the data received from Google, only name and email are used to create the account (Limited Use).

Retention

Data is kept as long as your account exists. From Settings you can export it (JSON file) or delete your account with all data and photos.

Cookies

LiftPilot uses no profiling or third-party cookies. Details on the Cookies page.

Rights

You can exercise your rights under Arts. 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) and withdraw consent by writing to the controller, and lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).