LIFT//LOCK

Privacy Policy

Last updated: July 9, 2026 · Effective: July 9, 2026 · Contact: support@liftlockapp.com

1. Who we are (data controller)

LiftLock ("we", "us", "the app") is the controller of any personal data described in this policy. You can reach us at support@liftlockapp.com for any privacy question or request. If we operate as a registered business, the registered name and address are available on request.

2. Data the app handles

2.1 Stored on your device. To provide its features, the app stores the following in its private app storage on your device. In this version, all of it stays only on your device — the app has no accounts and does not upload your training data.

• Training data: workouts, logged sets (weight, reps, and effort ratings such as RPE or RIR), programs, custom exercises you create, body measurements you record, volume and progress history, and any feedback you record.
• App settings and preferences: units, theme, training profile, timers, plate inventory, and your privacy choices.
• App blocking configuration: the apps you choose to block, your blocking schedule, lock and enforcement state, and a small local log of blocking service lifecycle events that helps keep blocking reliable. This category is never uploaded — it always stays on your device. This log holds no personal content.
• Purchase status: whether you have unlocked LiftLock Pro.

Uninstalling the app, or clearing its data in Android settings, permanently deletes the on device copy of all of the above.

2.2 Cloud sync and accounts. This version of LiftLock does not offer accounts or cloud sync. Your training data is stored only on your device (see 2.1); we do not create an account for you, we do not ask you to sign in, and none of your training data is uploaded to us. If a future version adds optional cloud sync, this policy will be updated before that feature ships and the change will be surfaced in the app.

2.3 Crash and diagnostic data (optional, off by switch). If crash reporting is enabled, the app uses Google Firebase Crashlytics to send crash and error diagnostics so we can fix stability problems. This may include a Crashlytics generated installation identifier, your IP address, your device model and operating system version, and the technical state of the app at the time of a crash. It never includes your training data or the names of the apps you block. Crash reporting is on by default, and you can turn it off at any time in Settings, then Privacy, then "Send crash reports." When it is off, no diagnostic data is sent.

2.4 Usage analytics (anonymous, off by switch). To understand which features help and where the app confuses people, we collect anonymous usage statistics using Google Firebase Analytics. We collect only structural, anonymous events — for example that a workout was started or finished, that an onboarding step was reached, or that the block screen was shown — identified by an app-generated, resettable installation identifier. We never send your training data, the names of the apps you block, exercise notes, or any content you create. Ad-identifier collection and ad-personalization are turned off, so this data is not used for advertising. Firebase also records standard anonymous app-usage and device information (such as app session length and device model). Usage analytics is on by default, and you can turn it off at any time in Settings, then Privacy, then "Send usage analytics." When it is off, no analytics data is sent.

2.5 Purchases. LiftLock Pro is sold through Google Play Billing. Google processes the payment and your payment details. We never receive or store your card information. We receive only your purchase and entitlement status, so the app can unlock Pro features.

3. Permissions and why the app asks for them

App blocking can only work with certain Android permissions. Each one is used only to operate blocking.

• Usage access: to detect which app is in the foreground, so the app can show the block screen over a blocked app. It is not used to profile your usage.
• Display over other apps: to draw the block screen on top of a blocked app.
• Optional "stronger blocking" (Accessibility service): optional, and off until you enable it. It reads only the package name of the foreground window, so it can catch ways of bypassing the block such as the app switcher gesture. It never reads the text or content of your screen, and you can disable it at any time in Android Accessibility settings.
• Notifications: the ongoing blocking service notice, rest timer alerts, and blocking status.
• Run at startup: to re enable blocking after your device restarts.
• Ignore battery optimizations (optional): so aggressive battery settings do not silently stop the blocker.
• Vibrate: haptic feedback on in app actions.

4. How we use data, and our legal bases

We use data only to run the app and to keep it stable. For users in the EU and UK, our legal bases under the GDPR are as follows.

• Providing the app's features (training tools and app blocking), using on device data: necessary to provide the service you asked for, and our legitimate interest in a working app.
• Crash and diagnostic data, if enabled: your consent, which you give by leaving crash reporting on and withdraw by turning it off, together with our legitimate interest in app stability.
• Anonymous usage analytics, if enabled: your consent, which you give by leaving usage analytics on and withdraw by turning it off, together with our legitimate interest in improving the app.
• Purchases: necessary to complete the purchase you requested. Google acts as the processor for payment.

We do not use your data for advertising, we do not build advertising profiles, and we do not sell or share your personal information.

5. Who we share data with

We do not sell or share your personal information. The only third parties involved are service providers that act on our behalf.

• Google Play and Google Play Billing: app distribution and purchases.
• Google Firebase Crashlytics: crash diagnostics, and only if crash reporting is enabled.
• Google Firebase Analytics: anonymous usage statistics, and only if usage analytics is enabled.

We may disclose information if the law requires it, or to protect rights and safety. Because your training data stays on your device, we hold no training data to disclose.

6. Data retention and deletion

• On device data: kept until you delete it. You can delete individual records in the app, clear the app's data in Android settings, or uninstall the app, which removes the on device copy.
• Crash diagnostics: retained by Firebase Crashlytics for a limited period, generally up to about 90 days, under Google's policies. To stop collection entirely, turn off crash reporting in Settings.
• Usage analytics: retained by Firebase Analytics under Google's policies. To stop collection entirely, turn off usage analytics in Settings.

Because your training data lives only on your device, its deletion is entirely in your hands. For any request about diagnostic or analytics data, contact support@liftlockapp.com.

7. Security

On device data is held in the app's private storage. Any network communication — including purchases, optional crash reports, and optional anonymous analytics — uses encrypted HTTPS and TLS connections.

8. Children

LiftLock is intended for adults. It is not directed to children under 13, or under the minimum age of digital consent in your region, such as 16 in parts of the EU. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us and we will address it.

9. Your rights and choices

You control your data directly inside the app. You can edit or delete your training records, change your privacy choices in Settings, and remove the on device copy by uninstalling. These in app controls are the primary way to exercise your rights, and they take effect immediately. Depending on where you live, you may also have legal rights, and you can exercise any of them by contacting support@liftlockapp.com.

• EU and UK (GDPR): the rights to access, correct, delete, port, object to, and restrict the processing of your personal data, and the right to withdraw consent for crash reporting and usage analytics at any time. You also have the right to lodge a complaint with your local data protection authority.
• California (CCPA and CPRA): the rights to know what personal information is collected, to delete it, and to correct it. We do not sell or share your personal information, and we have not done so, so there is nothing to opt out of. We treat a Global Privacy Control signal as a valid request where it applies.

10. International data transfers

The app is operated from the United States. Our service providers, Google and Firebase, may process crash and analytics data on servers in the United States and other countries. Where required, these transfers rely on appropriate safeguards, such as the European Commission's standard contractual clauses. By using the app, you understand that your diagnostic data (if enabled) and anonymous analytics data (if enabled) may be processed in these locations.

11. About this website

This privacy page is hosted on Cloudflare. The page does not use cookies, analytics, or tracking. Like any website, our hosting provider may process standard technical logs, including your IP address, for security and reliability.

12. Changes to this policy

We may update this policy as the app evolves. We will revise the "Last updated" date above, and for material changes we will surface a notice in the app. Continued use after an update means you accept the revised policy.

13. Contact

For any question or request about your privacy, contact support@liftlockapp.com.