Privacy Policy

Lyfta AI · Effective November 2, 2026

This Privacy Policy explains what information Lyfta AI ("we", "us", "the app") collects when you use the Lyfta AI apps for iPhone and Android and related services, how we use it, who processes it for us, and the choices you have.

The short version: we collect what we need to run your workouts, nutrition tracking, cardio and AI coaching. We do not sell your data, we do not show ads, and we do not use your health data for advertising. You can delete your account and data at any time.

1. Information We Collect

Account information

• Username and password (the password is hashed with bcrypt and never stored in plain text).
• Email address, which is required to create an account. We use it to verify your account, help you recover it, and send account-related emails.

Profile information

• Age, sex, height, weight, activity level, training experience, equipment, fitness goals, and preferences you enter during onboarding or in Settings.
• Injury or limitation notes you choose to add.

Health and fitness information

• Workout logs (exercises, sets, reps, weights), personal records, and training check-ins (energy, soreness, stress, sleep, readiness).
• Food and water logs, meal plans and saved meals.
• Body weight history and body measurements.
• Cardio sessions: distance, duration, pace, splits and elevation.
• Menstrual cycle information (optional): if you turn on Cycle-Aware Training, the cycle details you enter, used to adapt your training.
• Heart rate (optional): if you connect a Bluetooth heart-rate strap, heart-rate readings during workouts and cardio.
• Apple Health (optional, iPhone only): if you connect Apple Health, we read steps, active energy, heart rate, resting heart rate, heart-rate variability, sleep, blood oxygen, respiratory rate, distance and workouts, and we can write your Lyfta AI workouts back to Apple Health. Information from Apple Health is used only to provide app features, and is never used for advertising or sold.

Location (optional)

• When you track a cardio session, the app uses your device's precise GPS location to draw your route and measure distance and pace. The route (a series of map coordinates) is saved with that session on our servers so you can view it later. We only use location while you are tracking a session you started.
• Map backgrounds are loaded from Esri's map service, which receives the map area being displayed.

Photos (optional)

• If you use Photo meal scan or AI progress-photo analysis, the photo is sent to our server and to our AI provider to produce the result. We do not store these photos on our servers after processing.
• Progress photos you save in the app are stored on your device.
• Exercise form checks run on your device; only movement measurements (such as joint angles) are sent for AI feedback, never the camera video.

Voice (optional)

• Voice logging and voice commands are converted to text on your device. We receive only the text, not the audio.

Messages and AI coach conversations

• Messages between you and your trainer in the app are stored so both of you can see the conversation.
• Messages you send to the AI coach are processed by our AI provider to generate a reply, and a summary may be stored to give you more relevant coaching over time.

Purchases

• Your subscription status, plan, product, trial and renewal dates. Payments are handled by Apple (App Store) or Google (Google Play); we never receive your card details.

Device information, usage and diagnostics

• Device identifier: an identifier for your device, used to prevent abuse of free trials (one trial per device).
• Push notification token, if you enable notifications.
• App usage events, such as "workout completed", "meal logged" or "paywall opened", linked to your account, to understand how the app is used and improve it.
• Crash reports and diagnostics (app version, device model, error details), linked to your user ID and username so we can fix problems you run into.
• Food search text, which is sent to food databases to return results and is not stored.

2. How We Use Information

• To provide the app's features: workout plans, progress tracking, calorie and nutrient tracking, cardio tracking and AI coaching.
• To personalize recommendations, such as weights to lift, meal suggestions and nutrient gap analysis.
• To create and secure your account, and to prevent fraud and trial abuse.
• To send push notifications you enable (workout, meal and water reminders, rest timers).
• To send emails about your account (verification, password reset) and occasional product emails, such as progress milestones or reminders. Every product email includes an unsubscribe link.
• To understand app usage and fix bugs.

We do not sell your personal information, we do not show ads, and we do not use your data for advertising or share it with advertisers.

3. AI Features

To generate AI coaching, plans, meal analysis and insights, we send the information needed for that feature to our AI provider. Depending on the feature, this can include your username, profile details, workout and food logs, check-ins, injury notes, cycle phase (if enabled), photos you submit, and your messages to the AI coach. Our AI provider is OpenAI; some features may be processed by Anthropic. They process this data on our behalf under their API terms, which do not allow them to use it to train their models.

4. Who Processes Your Information

We share information only with the service providers that run parts of the app for us, under confidentiality and data-protection obligations, and only for the purposes above:

We also share information:

• With your trainer, if you choose to link your account to a trainer in the app. Your trainer can see your username, food logs, workout history, weight and check-ins, and can message you. You can unlink at any time in Settings.
• When required by law, or to protect the safety and rights of our users and the app.

5. Data Retention and Deletion

We keep your data for as long as your account is active. You can permanently delete your account at any time in the app under Settings → Delete Account, or request deletion at our account deletion page. Deletion immediately removes your account, profile, workout, food, cardio and weight logs, meal plans, messages, push tokens and subscription record from our active databases. Encrypted backups are purged on a rolling 7-day cycle. Fully anonymized, aggregated statistics that cannot identify you may be kept.

Deleting your account does not cancel a subscription. Cancel it first in your App Store or Google Play subscription settings.

6. Security

All traffic between the app and our servers is encrypted in transit with TLS (HTTPS). Passwords are hashed with bcrypt, and refresh tokens are stored in HTTP-only cookies. No online service is 100% secure, so please use a strong, unique password.

7. Your Choices and Rights

• Optional features: location, camera, photos, Bluetooth, notifications, Apple Health and cycle tracking are only used if you allow or turn them on. You can turn them off at any time in the app or in your device settings.
• Access and export: export your food log and workout history from Settings → Export Data.
• Correction: edit your profile and logs in the app at any time.
• Deletion: delete your account as described in section 5.
• Emails: unsubscribe from product emails using the link in any email.

Depending on where you live (for example in the EU, UK, Canada or California), you may have additional rights to access, correct, delete or restrict the use of your personal information. To make a request, contact us at the address below.

8. AI-Generated Content Disclaimer

Lyfta AI uses AI to generate workout suggestions, meal plans and coaching feedback. AI output may be inaccurate or inappropriate for your individual situation. The app is for general informational and educational purposes only and is not a substitute for professional medical, nutritional or fitness advice. Consult a qualified healthcare provider before starting any new diet or exercise program, especially if you have a medical condition, are pregnant, or are taking medication.

9. Children's Privacy

Lyfta AI is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

10. International Users

Our servers are in the United States. If you use the app from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated in the app or by email. The "Effective" date above shows when this policy was last updated.

12. Contact

Questions, requests or concerns: lyfta.support@gmail.com