LiftLock

Privacy Policy

Last updated: June 17, 2026 · Effective: June 17, 2026 · Contact: support@liftlockapp.com

1. Who we are (data controller)

LiftLock ("we", "us", "the app") is the controller of any personal data described in this policy. You can reach us at support@liftlockapp.com for any privacy question or request. If we operate as a registered business, the registered name and address are available on request.

2. Data the app handles

2.1 Stored on your device only. To provide its features, the app stores the following locally, in its private app storage. We cannot see it, and it is never sent to our servers, because we do not operate an app backend.

• Training data: workouts, logged sets (weight, reps, and effort ratings such as RPE or RIR), programs, exercises, volume and progress history, and any feedback you record.
• App settings and preferences: units, theme, training profile, timers, plate inventory, and your privacy choices.
• App blocking configuration: the apps you choose to block, your blocking schedule, and a small local log of blocking service lifecycle events that helps keep blocking reliable. This log holds no personal content.
• Purchase status: whether you have unlocked LiftLock Pro.

Uninstalling the app, or clearing its data in Android settings, permanently deletes all of the above.

2.2 Crash and diagnostic data (optional, off by switch). If crash reporting is enabled, the app uses Google Firebase Crashlytics to send crash and error diagnostics so we can fix stability problems. This may include a Crashlytics generated installation identifier, your IP address, your device model and operating system version, and the technical state of the app at the time of a crash. It never includes your training data or the names of the apps you block. Crash reporting is on by default, and you can turn it off at any time in Settings, then Privacy, then "Send crash reports." When it is off, no diagnostic data is sent.

2.3 Purchases. LiftLock Pro is sold through Google Play Billing. Google processes the payment and your payment details. We never receive or store your card information. We receive only your purchase and entitlement status, so the app can unlock Pro features.

3. Permissions and why the app asks for them

App blocking can only work with certain Android permissions. Each one is used only to operate blocking.

• Usage access: to detect which app is in the foreground, so the app can show the block screen over a blocked app. It is not used to profile your usage.
• Display over other apps: to draw the block screen on top of a blocked app.
• Optional "stronger blocking" (Accessibility service): optional, and off until you enable it. It reads only the package name of the foreground window, so it can catch ways of bypassing the block such as the app switcher gesture. It never reads the text or content of your screen, and you can disable it at any time in Android Accessibility settings.
• Notifications: the ongoing blocking service notice, rest timer alerts, and blocking status.
• Run at startup: to re enable blocking after your device restarts.
• Ignore battery optimizations (optional): so aggressive battery settings do not silently stop the blocker.
• Vibrate: haptic feedback on in app actions.

4. How we use data, and our legal bases

We use data only to run the app and to keep it stable. For users in the EU and UK, our legal bases under the GDPR are as follows.

• Providing the app's features (training tools and app blocking), using on device data: necessary to provide the service you asked for, and our legitimate interest in a working app.
• Crash and diagnostic data, if enabled: your consent, which you give by leaving crash reporting on and withdraw by turning it off, together with our legitimate interest in app stability.
• Purchases: necessary to complete the purchase you requested. Google acts as the processor for payment.

We do not use your data for advertising, we do not build advertising profiles, and we do not sell or share your personal information.

5. Who we share data with

We do not sell or share your personal information. The only third parties involved are service providers that act on our behalf.

• Google Play and Google Play Billing: app distribution and purchases.
• Google Firebase Crashlytics: crash diagnostics, and only if crash reporting is enabled.

We may disclose information if the law requires it, or to protect rights and safety. As noted above, we hold no training data to disclose, because it stays on your device.

6. Data retention and deletion

• On device data: kept until you delete it. You can delete individual records in the app, clear the app's data in Android settings, or uninstall the app, which removes everything.
• Crash diagnostics: retained by Firebase Crashlytics for a limited period, generally up to about 90 days, under Google's policies. To stop collection entirely, turn off crash reporting in Settings.

Because your data lives on your device, deletion is in your hands and takes effect immediately. For any request about diagnostic data, contact support@liftlockapp.com.

7. Security

On device data is held in the app's private storage. Any network communication, such as purchases and optional crash reports, uses encrypted HTTPS and TLS connections.

8. Children

LiftLock is intended for adults. It is not directed to children under 13, or under the minimum age of digital consent in your region, such as 16 in parts of the EU. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us and we will address it.

9. Your rights and choices

You control your data directly inside the app. You can edit or delete your training records, change your privacy choices in Settings, and remove everything by uninstalling. These in app controls are the primary way to exercise your rights, and they take effect immediately. Depending on where you live, you may also have legal rights, and you can exercise any of them by contacting support@liftlockapp.com.

• EU and UK (GDPR): the rights to access, correct, delete, port, object to, and restrict the processing of your personal data, and the right to withdraw consent for crash reporting at any time. You also have the right to lodge a complaint with your local data protection authority.
• California (CCPA and CPRA): the rights to know what personal information is collected, to delete it, and to correct it. We do not sell or share your personal information, and we have not done so, so there is nothing to opt out of. We treat a Global Privacy Control signal as a valid request where it applies.

10. International data transfers

The app is operated from the United States. Our service providers, such as Google and Firebase, may process limited diagnostic data on servers in the United States and other countries. Where required, these transfers rely on appropriate safeguards, such as the European Commission's standard contractual clauses. By using the app, you understand that diagnostic data, if enabled, may be processed in these locations.

11. About this website

This privacy page is hosted on Cloudflare. The page does not use cookies, analytics, or tracking. Like any website, our hosting provider may process standard technical logs, including your IP address, for security and reliability.

12. Changes to this policy

We may update this policy as the app evolves. We will revise the "Last updated" date above, and for material changes we will surface a notice in the app. Continued use after an update means you accept the revised policy.

13. Contact

For any question or request about your privacy, contact support@liftlockapp.com.