Liftbound

Privacy Policy

Last updated 24 October 2026

This policy explains how Liftbound handles your personal data. Liftbound is a gym workout log with a social side, so it holds things people care about: what you lift, how often and, if you add them, what you weigh, how much you walk, what you drink and what you eat.

The short version

Who is responsible

Zsombor Toreky, Hungary, 9024, Gyor, Dery Tibor u. 4 (Hungary), is the controller of your personal data: it decides why and how it is used. For anything about your data, write to liftbound [dot] support [at] gmail [dot] com.

We follow the General Data Protection Regulation (GDPR) and Hungarian data protection law. The app is offered in the European Economic Area only.

What we collect

This is everything we hold about you, and where each part comes from: you, or your phone as you use the app.

Our hosting provider also keeps technical logs of requests to the service, such as the IP address and the type of device, for security and to find faults. These are covered by its own policy, linked below.

Liftbound asks for two things from your phone, each only if you choose to use it: permission to read your daily step totals from Health Connect (see "Health Connect" below), and permission to use the camera to read a barcode on the food screen (see "Food and food databases" below). It does not ask for your location, contacts or microphone. It gets no access to your photo library either: if you choose a profile picture, your phone’s own photo picker hands the app only that one photo (see "Your profile picture" below). It reads no other health data and no other apps. Rest-timer alerts are scheduled on your phone and are not sent from a server.

Health Connect

On Android you can connect Liftbound to Health Connect, so the steps your phone or watch already counts show up in the app. It is optional: typed-in steps work without it, and nothing is read until you connect it.

Liftbound's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. In particular, we use it only to show you your steps; we never sell it, never use it for advertising, and never share it with anyone except the hosting provider that stores it for us, or where the law requires it. It is not used to make decisions about credit, insurance or employment, and no person at Liftbound reads it unless you ask us to, it is needed for security, or the law requires it.

Food and food databases

The food screen lets you write down what you eat and, if you want one, set a daily calorie target. Liftbound does not tell you what to eat, and a calorie target is only ever one you chose. Estimate my calories is optional: only when you tap it, the app asks for your age, gender, height, weight and how active you are, works out a rough figure of what a body uses in a day on your phone, and offers it as a target that you can accept or ignore. The answers are used for that figure only. They are not saved on your phone, not sent to us or anyone else, and are gone when you close the sheet. Your age is filled in from the date of birth your account already holds (the app reads it from our database when you open the sheet, and keeps only the age while the sheet is open) and your weight from your last bodyweight; you can change both. Only the target you choose to set is kept, like any target. It is an estimate for adults, not medical advice, and not a recommendation of what to eat.

Daily challenges

Each day Liftbound can offer you one small challenge for a few bonus points on the Effort board: do at least two sets of an exercise you train, do ten minutes of cardio, reach your daily water goal, or log at least three foods. The app picks it on your phone from your own log and settings. It offers a water or a food challenge only if you have that tracker switched on, and a food challenge only if food tracking is on.

Your profile picture

You can add a profile picture from your photo library. It is optional, and Liftbound works the same without one.

Why we use it, and our legal basis

Who receives it

Other people using Liftbound, as set out above: what a public account shows to any signed-in user, what a private account shows to approved followers, what the leaderboards show to the others in your group, and how far along you are, as a percentage, in a Duel with a friend. Your email address is never shown to them.

Services that help us run it. These handle your data for us, under agreements that limit what they may do with it:

Services you reach yourself. When you use a feature that looks something up for you, your phone asks the service directly. These are independent services, not ones that work for us, and their own policies apply to what you send them:

Reports. If you report something, only we see the report. The person you reported is never told who made it. If someone reports your content, we may tell you what we decided and why, but not who reported it.

Authorities, when the law requires it or to protect someone from serious harm. We tell you first where we can.

The app stores. Apple and Google know that you installed the app and, if you pay, what you bought. That is under their own terms and policies.

Rating the app. Once, after a good moment in the app (finishing the first steps on Home, or finishing your day: your workout and anything you chose to track), Liftbound may ask you to rate it, using the app store's own rating sheet. You can close it, and nobody gets anything for rating. The sheet is run by the store, not by us: we send it nothing, we are not told whether you rated or what you wrote, and a review you post is public under your store profile. The app remembers on your phone only that it has asked, so it does not ask again.

We do not sell your personal data and we do not share it for advertising.

Where it goes

Our database is hosted in the European Union (Ireland). Some of the services above are run by companies in the United States, so your data can be processed there. When personal data leaves the European Economic Area for a country without an adequate level of protection, we rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on standard contractual clauses approved by the European Commission.

Artificial intelligence

Liftbound does not use artificial intelligence to process your data, and nothing you log or write is sent to an AI service. If that changes, this policy will say what is sent, to whom and why, and we will tell you before the feature starts.

Automated decisions

Your weekly score, rank, promotion or relegation and badges are worked out automatically by fixed rules from what you log. They decide where you appear on a leaderboard and nothing else, and do not have legal or similarly significant effects on you. You can ask us to explain how a result was reached.

How long we keep it

How we protect it

No system is perfectly secure. If a breach is likely to put you at risk, we tell you and the authorities as the law requires.

Your rights

You can ask us at any time to:

Write to liftbound [dot] support [at] gmail [dot] com from the email address on your account so we know it is you. We answer within 30 days. There is no charge unless a request is clearly abusive.

If you think we have handled your data wrongly, please tell us first so we can put it right. You can also complain to a data protection authority. In Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH). Elsewhere in the European Economic Area, it is the authority of the country where you live (list).

Children

Liftbound is for people aged 16 and over. When you sign up we ask for your date of birth. If it makes you younger than 16, the app does not create the account and the date is not kept. An account that exists without a valid date of birth is locked: it can do nothing except give one or be deleted. We do not knowingly collect data from anyone younger. If you think a child has made an account, write to liftbound [dot] support [at] gmail [dot] com and we will delete it.

New accounts are private, which is the setting that shows the least to other people. You can change it in Settings.

Cookies and similar technologies

Liftbound has no advertising identifiers, analytics or tracking tools, and our web pages set no cookies, load nothing from other sites and have no trackers.

The law (the ePrivacy Directive, Article 5(3)) asks for your consent before anything is stored on your phone or read from it, except what is strictly necessary to give you a service you asked for. This is everything the app stores on your phone, and all of it is of that kind:

Because all of this is needed for Liftbound to work, there is no cookie banner. Health Connect is the one exception you choose yourself: it is read only after you connect it and agree, and you can disconnect it at any time. The bot check is provided by Cloudflare, which processes the signals described above. If we ever add something that is not strictly necessary, we will ask you first, before it runs.

Emails we send

We send only the emails your account needs: confirming your address, resetting your password and telling you when your password or email changes. We send no newsletters or promotions, so there is nothing to unsubscribe from. If we ever start, we will ask you first and every message will have an unsubscribe link.

Changes to this policy

The date at the top is when this text last changed. If we change how we use your data in a way that matters to you, we tell you in the app or by email before it applies.

Contact

Zsombor Toreky, Hungary, 9024, Gyor, Dery Tibor u. 4. Email: liftbound [dot] support [at] gmail [dot] com.