Privacy Policy
Last updated 24 October 2026
This policy explains how Liftbound handles your personal data. Liftbound is a gym workout log with a social side, so it holds things people care about: what you lift, how often and, if you add them, what you weigh, how much you walk, what you drink and what you eat.
The short version
- We do collect personal data. Your email address, your profile, the training you log and, if you add them, your bodyweight, your steps, your water and your food. The full list is below.
- We use it to run Liftbound: to sign you in, keep your log, show it to the people you choose and work out the leaderboards.
- We do not sell it, show ads or track you. There is no advertising and no analytics in the app.
- We do not use AI on your data. Nothing you log or write is sent to an AI service.
- Your health information is optional and yours. You decide what to log. You can delete any of it, or your whole account, from Settings.
- You must be at least 16. We ask for your date of birth when you sign up to check.
- New accounts are private. Nobody sees your workouts until you approve them or switch to public.
Who is responsible
Zsombor Toreky, Hungary, 9024, Gyor, Dery Tibor u. 4 (Hungary), is the controller of your personal data: it decides why and how it is used. For anything about your data, write to liftbound [dot] support [at] gmail [dot] com.
We follow the General Data Protection Regulation (GDPR) and Hungarian data protection law. The app is offered in the European Economic Area only.
What we collect
This is everything we hold about you, and where each part comes from: you, or your phone as you use the app.
- Account. Your email address, a hashed password, your date of birth, the version of the terms you accepted, the consents you gave when you signed up, and when you sign in and from what kind of device. Why: To create your account, keep it secure and sign you in, and to check that you are old enough to use the service. Who can see it: Nobody else. Your email address and your date of birth are never shown to other people.
- Profile. Your handle, an optional display name, your picture if you add one or your sign-in provides one, and your settings: units, privacy choice, weekly goal, daily step and water goals, your calorie target and macro split if you set them, which of the food, step and water trackers you chose to show, whether you have been through the welcome setup, which Monthly review you have seen or dismissed, and chosen badges. New accounts start private. Why: To show who you are to the people you train with, and to keep the app set up the way you like. Who can see it: Other signed-in users see your handle, display name and picture, whether your account is public or private, unless they have blocked you or you have blocked them. A picture you add is kept at a public web address: only signed-in people are given it, but anyone who has it can open the picture without signing in.
- Training log. Your workouts with their titles, notes, times, exercises and sets (weights, repetitions, distances, durations, effort, and whether a set was a warm-up, a drop set, taken to failure or done one side at a time), which exercises you train as a superset, your saved plans, your own exercises, your rest times and the notes you keep on exercises. Why: To be your training log, to show you your progress and to work out the weekly leaderboards. Who can see it: With a public account, any signed-in user. With a private account, only the followers you approve. Notes are part of a workout. Your notes on exercises are never shown to anyone else. Someone who can see a workout of yours can copy its exercises and sets into their own plans; your notes are not copied.
- Bodyweight. The bodyweight readings you choose to log, with their dates. Why: To rank you fairly in the Strength League and to value bodyweight exercises in your own volume. Who can see it: Never shown to others. It can be calculated from the aggregate value the Strength League shows for you.
- Steps. The steps you type in, each with its date and, if you connect Health Connect, your step total for each day as Health Connect reports it, for up to 30 days before you connected and every day since. When you last agreed to Health Connect being read. Why: To show you your steps against your daily goal. Steps are not scored, not compared with anyone and not used for advertising. Who can see it: Never shown to others.
- Water. The drinks you log, each with the amount and the time you logged it. Why: To show you today's water against your daily goal, and how your day is going. Water is not compared with anyone and not used for advertising. The one way it touches a score is the daily challenge: reaching your goal can be that day's challenge, worth a few bonus points (see Daily challenges). Who can see it: Never shown to others.
- Food. The foods you log, each with its name, amount, calories, any protein, carbohydrate and fat you give, the meal you put it in and the time you logged it, and the foods you save for yourself. On your phone only: the products you looked up on Open Food Facts. Why: To show you today’s food, against a daily calorie target if you choose to set one. Food is not compared with anyone and not used for advertising. The one way it touches a score is the daily challenge: logging a few foods can be that day’s challenge, worth a few bonus points, and it counts the foods logged, never what or how much you eat (see Daily challenges). If you tap Estimate my calories, the answers you type (age, gender, height, weight, activity) are used on your phone for one figure and are not saved or sent anywhere; only a target you choose to set is kept. Who can see it: Never shown to others.
- Social activity. Who you follow and who follows you, follow requests, likes, comments, and the accounts you have blocked. Why: To let you follow friends, see their workouts and talk about them, and to let you stop seeing someone. Who can see it: Comments and likes are visible to anyone who can see the workout they are on. Your list of blocked accounts is visible to nobody, and a blocked account is not told.
- Weekly results. Your weekly scores, league group and rank, promotions and relegations, and the badges you earn. Weekly detail is kept for three months; badges and your league tier are kept. Why: To run the Effort board (including the bonus points from daily challenges) and the Strength League. Who can see it: The people in your league group and, for the Effort board, the people who follow each other. A private account shows its rank but not the details behind it.
- Daily challenges. For each day, the one challenge you were offered (an exercise and a number of sets, a number of minutes of cardio, reaching your water goal, or logging a number of foods), the water goal at the time, when it was offered, whether and when you completed it, and, once the day is settled, the bonus points it earned and which week they count in. Why: To offer you one challenge a day, keep it the same on every phone you use, check from your log whether you completed it, and add the bonus points to your Effort score when the day ends. Who can see it: Never shown to others. The bonus points are added to your weekly Effort score, which other people see as one number together with the rest of your week; nothing shows which challenge it was or that it was about water or food. If you delete your water or food data, that tracker’s challenges are deleted and the points you earned stay without saying where they came from.
- Duels. The Duels you take part in: who invited whom, which week, the kind of challenge, the exercises, the target each of you was given, and how the week ended with the percentage each of you reached. Your targets are worked out from your own log and nothing is added to it. Why: To run one-week challenges between two friends and to keep the score between them. Who can see it: The friend in the Duel sees that you are in it, the exercises, and how far along you are as a percentage; never your weights, your points or your bodyweight. Nobody else sees it. Invitations nobody answered and Duels that were called off are deleted after two weeks; a Duel that was played is kept as the record between the two of you until one of your accounts is deleted. If either of you blocks the other, the Duel ends with no result.
- On your phone. An encrypted copy of your log, with today’s and the last few days’ challenges, so the app works offline, your sign-in session, the key that unlocks the copy, and local settings such as light or dark mode, your language, rest-timer alerts, whether you connected Health Connect, whether calories left are hidden and whether the app has already asked you to rate it. Why: To work without a connection and keep you signed in. Who can see it: Nobody. It stays on your phone, in encrypted or protected storage.
- Reports. A report you make about a comment, workout or profile: what it is, why you reported it, your note, who made it, and a copy of the words and names as they were when you reported. The same record exists, about you, if someone reports your content. Why: To act on content that breaks the rules, to tell the person who reported what we decided, and to keep the record of a decision. Who can see it: Us only. The person reported is never told who reported them. A decided report is deleted after twelve months, and either account being deleted deletes it at once.
- Request counters. How many requests of each kind your account has made in the last day, as counts. No content. Why: To keep the service available by slowing down an account that asks far more often than a person would. Who can see it: Nobody.
- Messages to us. What you send when you contact us, including copyright notices and anything you write to us about a report. Why: To answer you and to act on what you tell us. Who can see it: Us only.
Our hosting provider also keeps technical logs of requests to the service, such as the IP address and the type of device, for security and to find faults. These are covered by its own policy, linked below.
Liftbound asks for two things from your phone, each only if you choose to use it: permission to read your daily step totals from Health Connect (see "Health Connect" below), and permission to use the camera to read a barcode on the food screen (see "Food and food databases" below). It does not ask for your location, contacts or microphone. It gets no access to your photo library either: if you choose a profile picture, your phone’s own photo picker hands the app only that one photo (see "Your profile picture" below). It reads no other health data and no other apps. Rest-timer alerts are scheduled on your phone and are not sent from a server.
Health Connect
On Android you can connect Liftbound to Health Connect, so the steps your phone or watch already counts show up in the app. It is optional: typed-in steps work without it, and nothing is read until you connect it.
- What we read: your step total for each day, and nothing else. Not your location, heart rate, exercise sessions or any other health data. We write nothing to Health Connect.
- When: only after you tap Connect on the steps screen, which explains this first, and Android asks for your permission. Then when you open the app, at most every 15 minutes, for the last 30 days. Never in the background.
- Your consent: connecting is your explicit consent to us reading and keeping your daily step totals. We record when you gave it. You withdraw it by disconnecting on the steps screen, which stops the reading at once, or by taking the permission back in Health Connect.
- Where it goes: the totals are stored with your account in our database (the European Union (Ireland)) and in the encrypted copy on your phone, so they are there on every phone you sign in on. Nobody else can see them.
- How long: until you delete them or your account. You can remove any day in the app, or all of them under Settings, Features, and when you disconnect you choose whether to keep or delete the days already brought in. Removing a day in the app does not delete anything in Health Connect, and a removed day is not read again.
Liftbound's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. In particular, we use it only to show you your steps; we never sell it, never use it for advertising, and never share it with anyone except the hosting provider that stores it for us, or where the law requires it. It is not used to make decisions about credit, insurance or employment, and no person at Liftbound reads it unless you ask us to, it is needed for security, or the law requires it.
Food and food databases
The food screen lets you write down what you eat and, if you want one, set a daily calorie target. Liftbound does not tell you what to eat, and a calorie target is only ever one you chose. Estimate my calories is optional: only when you tap it, the app asks for your age, gender, height, weight and how active you are, works out a rough figure of what a body uses in a day on your phone, and offers it as a target that you can accept or ignore. The answers are used for that figure only. They are not saved on your phone, not sent to us or anyone else, and are gone when you close the sheet. Your age is filled in from the date of birth your account already holds (the app reads it from our database when you open the sheet, and keeps only the age while the sheet is open) and your weight from your last bodyweight; you can change both. Only the target you choose to set is kept, like any target. It is an estimate for adults, not medical advice, and not a recommendation of what to eat.
- Food tracking is your choice. It starts switched on if you gave the health consent when you created your account, in the version that names food. Every other account switches it on itself, with one button on the food screen, and until then no food is stored, searched or shown. We record when you switched it on. Under Settings, Features you can hide food tracking, which deletes nothing, and you can delete it all with a separate button, Delete all food data, which deletes every food you logged and saved and your target, on all your phones and cannot be undone; our servers keep a marker for up to 30 days so that your other devices learn of it, then remove it.
- What we keep: the foods you log, the foods you save and your target, with your account in our database (the European Union (Ireland)) and in the encrypted copy on your phone. Nobody else can see them, and they are not compared with anyone. The only way food can touch a score is the daily challenge (see "Daily challenges"), which counts foods logged, never what or how much you eat.
- The food database: a copy of USDA FoodData Central, which is public domain, is part of our own database. When you search it, the words you type come to us and to nobody else. The USDA receives nothing.
- Open Food Facts: only when you tap Search online or look up a barcode. Your phone then asks Open Food Facts directly, and it receives the barcode or the words, the language of the app, your IP address as any website would, and the name and version of the app with our support address. Nothing passes through our servers and we send nothing else to it. The last products you looked up are remembered on your phone, up to 200, and erased when you sign out.
- The camera reads barcodes and nothing else. When you tap Scan a barcode, the app asks for permission to use the camera. It is on only while the scanner is open, the number is read on your phone, and no picture or video is taken, saved or sent anywhere. You can also type the number under the barcode, and the app works without the camera permission. Only the number is then looked up on Open Food Facts, as described above.
- Where the data is from: Open Food Facts data is made available by its contributors under the Open Database License, and the app says so where it shows it. Labels on packaging can differ from any database.
Daily challenges
Each day Liftbound can offer you one small challenge for a few bonus points on the Effort board: do at least two sets of an exercise you train, do ten minutes of cardio, reach your daily water goal, or log at least three foods. The app picks it on your phone from your own log and settings. It offers a water or a food challenge only if you have that tracker switched on, and a food challenge only if food tracking is on.
- What we keep: for each day, the challenge you were offered (the exercise and the number of sets, the minutes of cardio, your water goal at the time, or the number of foods), when it was offered, whether and when you completed it and, once the day is settled, the points it earned. It is stored with your account in our database (the European Union (Ireland)) and in the encrypted copy on your phone, so it is the same on every phone you sign in on.
- How it is decided: our server works out whether you completed it from the workouts, drinks and foods you already logged, not from what the app says. It is checked as your log syncs, and the day is settled about six hours after it ends, so a workout logged without a signal still counts. Until the day is settled a challenge counts only while your log still meets it, so correcting a set or removing a drink can take it back. Once the day is settled the result is final and stays if you later delete the workout, drink or food it was based on.
- Who sees it: nobody but you. The bonus points are added to your weekly Effort score, which other people see as one number together with the rest of your week. Nothing shows which challenge it was or that it was about water or food. A week only gets the bonus if you trained in it.
- Water and food: a food challenge asks only that you log some foods, never that you eat any amount or reach a target. If you switch a tracker off, its challenges are no longer offered.
- How long: with your account, because the points are part of your weekly results.
- Deleting it: if you delete all your water data or all your food data under Settings, Features, that tracker's challenges are deleted at once, and the points you already earned stay on the board without saying where they came from. Deleting your account deletes everything about your challenges and the points with it.
Your profile picture
You can add a profile picture from your photo library. It is optional, and Liftbound works the same without one.
- Choosing it: the app opens your phone’s own photo picker, so it sees only the one photo you choose and gets no access to the rest of your library. It does not use the camera for this.
- On your phone first: you crop the photo to a square, and the app shrinks it and saves a new copy as a plain picture, which leaves out details such as where it was taken, before anything is sent. The temporary copies on your phone are deleted when the upload ends.
- Where it goes: the picture is stored by our hosting provider (the European Union (Ireland)). Other signed-in people see it next to your name, whether your account is public or private. It is kept at a public web address that is long and random, and the app gives it only to signed-in people, but anyone who has the address can open it without signing in. Choose a picture you are happy for others to see.
- Taking it off: choose Remove picture, or replace it, in Settings or on your profile. The file is deleted from storage within 24 hours, and so is the file of an account you delete. If someone reports a picture and we take it down, the same applies. Copies that another phone or a network cache already holds can last a little longer.
- What we do with it: we show it as your picture and nothing else. It is not analysed by software, not used to recognise anyone and not sent to an AI service, and we do not scan pictures automatically. We look at one when it is reported. The Terms say what a picture must not show.
Why we use it, and our legal basis
- To provide the service you asked for (performing our contract with you): your account, your log and syncing it between devices, following people, likes and comments, the leaderboards and the daily challenge.
- Your explicit consent, for health-related information. You give it with a separate tick when you create your account. It covers the workouts, bodyweight, steps, water and food you enter. Food also has its own switch on the food screen, which an account created before food existed has to turn on before anything about food is kept (see "Food and food databases"). You can withdraw your consent at any time by deleting that information (under Settings, Features there is a button for food, steps and water each), or by deleting your account; that does not affect what we did before. Without it we cannot offer Liftbound. Reading your steps from Health Connect is a separate explicit consent, given when you connect it and withdrawn when you disconnect (see "Health Connect").
- Our legitimate interest in keeping the service secure and safe: the bot check, limiting how often requests can be made, finding faults, reading reports about content, and enforcing our terms.
- Legal obligations: answering a court or authority, and keeping the records the law requires, such as notices under copyright law and the record of a decision about reported content.
- Checking your age: we ask for your date of birth to make sure you are at least 16, because the law sets that as the age at which a person can agree to this service for themselves.
Where it goes
Our database is hosted in the European Union (Ireland). Some of the services above are run by companies in the United States, so your data can be processed there. When personal data leaves the European Economic Area for a country without an adequate level of protection, we rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on standard contractual clauses approved by the European Commission.
Artificial intelligence
Liftbound does not use artificial intelligence to process your data, and nothing you log or write is sent to an AI service. If that changes, this policy will say what is sent, to whom and why, and we will tell you before the feature starts.
Automated decisions
Your weekly score, rank, promotion or relegation and badges are worked out automatically by fixed rules from what you log. They decide where you appear on a leaderboard and nothing else, and do not have legal or similarly significant effects on you. You can ask us to explain how a result was reached.
How long we keep it
- Your account and log: until you delete them. Deleting your account in Settings removes your account and everything in it straight away.
- Your steps: until you delete them or your account. Disconnecting Health Connect stops the reading at once and lets you delete the days it brought in.
- Your water: until you delete it (one drink in the app, or all of it under Settings, Features) or your account. The app only shows today, but what you logged stays until you remove it or delete your account. Hiding water tracking does not delete it.
- Your profile picture: until you remove or replace it, or delete your account. The file is then deleted from storage within 24 hours.
- Your food: until you delete it (Settings, Features, Delete all food data) or delete your account. Hiding food tracking does not delete it. The app only shows today, but what you logged, and the foods you saved, stay until you remove them. The products your phone remembers from Open Food Facts stay on your phone only and are erased when you sign out.
- Things you delete along the way (a workout, a reading, a plan): they disappear from your screen at once. Our servers keep a marker, with the content, for up to 30 days so that your other devices learn of the deletion, then remove it.
- Weekly leaderboard detail: 3 months. Your badges and league tier last as long as your account.
- Backups: our hosting provider keeps backups for [[backup retention in days]] days. A deleted account is gone from live data immediately and from backups when they expire.
- Reports: until we have decided them, then 12 months, so that we can answer a person who asks us to look again. Deleting either account deletes the report straight away.
- Request counters: up to two days, and they are deleted with your account.
- Messages and notices you send us: as long as needed to deal with them, and no longer than three years afterwards.
- Your date of birth: as long as your account. It is deleted with it.
- Your agreement to the terms and your health consent: the version you agreed to and when, for as long as your account. They are deleted with it.
- An account that has not agreed or has no date of birth: it is locked until it gives them, and deleted if it never does. One that holds nothing is deleted after 30 days. One that holds a log or a plan is deleted 90 days after it was last signed in to, or after 90 days from the day we began asking, whichever is later.
- Provider logs: for the time set out in each provider’s own policy.
How we protect it
- Everything between the app and our servers is sent over encrypted connections (HTTPS).
- The copy of your log on your phone is encrypted, and the key to it is kept in your phone’s secure storage (iOS Keychain or Android Keystore). Your sign-in session is kept there too. When you sign out the copy is erased.
- Passwords are stored hashed, never in clear text. Changing your password or email asks for your password again, and we email you when either changes.
- Each account can read and change only its own rows in the database; other people see what the app is designed to show them and nothing more.
- Our hosting provider encrypts the database at rest.
- A bot check protects sign-up, sign-in and password reset.
No system is perfectly secure. If a breach is likely to put you at risk, we tell you and the authorities as the law requires.
Your rights
You can ask us at any time to:
- show you the personal data we hold about you;
- correct it. Most of it you can edit yourself in the app;
- delete it. Settings, then Account, then Delete account, does this at once;
- give you a copy in a format you can open and take elsewhere;
- restrict how we use it, or object to a use based on our legitimate interests;
- withdraw a consent you gave.
Write to liftbound [dot] support [at] gmail [dot] com from the email address on your account so we know it is you. We answer within 30 days. There is no charge unless a request is clearly abusive.
If you think we have handled your data wrongly, please tell us first so we can put it right. You can also complain to a data protection authority. In Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH). Elsewhere in the European Economic Area, it is the authority of the country where you live (list).
Children
Liftbound is for people aged 16 and over. When you sign up we ask for your date of birth. If it makes you younger than 16, the app does not create the account and the date is not kept. An account that exists without a valid date of birth is locked: it can do nothing except give one or be deleted. We do not knowingly collect data from anyone younger. If you think a child has made an account, write to liftbound [dot] support [at] gmail [dot] com and we will delete it.
New accounts are private, which is the setting that shows the least to other people. You can change it in Settings.
Cookies and similar technologies
Liftbound has no advertising identifiers, analytics or tracking tools, and our web pages set no cookies, load nothing from other sites and have no trackers.
The law (the ePrivacy Directive, Article 5(3)) asks for your consent before anything is stored on your phone or read from it, except what is strictly necessary to give you a service you asked for. This is everything the app stores on your phone, and all of it is of that kind:
- Your sign-in session, in the iOS Keychain or Android Keystore. To keep you signed in. Without it you would have to sign in every time you open the app.
- An encrypted copy of your log, with the key to it in the same secure storage, the last products you looked up on Open Food Facts (up to 200), today’s and the last few days’ daily challenges, and local settings such as light or dark mode, your language, whether calories left are hidden and whether the app has already asked you to rate it, inside it. So the app works without a connection, in a gym with no signal, and remembers how you set it up.
- Before you have an account: the answers you give in the welcome setup (a first name or nickname, your weekly workout goal, which of the food, step and water trackers you want to see, the units your phone region suggests) and the first workout plan you build, kept in the encrypted copy on your phone. None of it is sent anywhere until you create an account; it is then added to that account and deleted from the phone’s waiting copy. It is also deleted if it is older than 14 days, if you sign out or if you sign in to an account that has already been set up. So the setup you took before creating an account is not lost between the last screen and the sign-up form, and your first plan is waiting for you in your account.
- The latest version of the app’s own code, downloaded by Expo’s update service, and its version number. To deliver fixes without a new download from the store.
- Rest-timer notifications on the phone, if you allow notifications: an alert when your rest is over and, while you rest with the app closed, a silent one that shows the exercise, when the rest ends and buttons to add time or skip. To tell you when your rest is over and let you change it without opening the app. They are made and shown on the phone; no server sends them.
- If you connect Health Connect: your step total for each day, read from Health Connect on your phone, and the setting that says you connected it. To show the steps your phone or watch already counts, which you asked for, and agreed to, when you connected it. Nothing is read unless you connect it, and disconnecting stops it at once.
- The bot check keeps nothing: it runs in a private web view with its storage switched off. It keeps bots out of sign-up, sign-in and password reset.
Because all of this is needed for Liftbound to work, there is no cookie banner. Health Connect is the one exception you choose yourself: it is read only after you connect it and agree, and you can disconnect it at any time. The bot check is provided by Cloudflare, which processes the signals described above. If we ever add something that is not strictly necessary, we will ask you first, before it runs.
Emails we send
We send only the emails your account needs: confirming your address, resetting your password and telling you when your password or email changes. We send no newsletters or promotions, so there is nothing to unsubscribe from. If we ever start, we will ask you first and every message will have an unsubscribe link.
Changes to this policy
The date at the top is when this text last changed. If we change how we use your data in a way that matters to you, we tell you in the app or by email before it applies.
Contact
Zsombor Toreky, Hungary, 9024, Gyor, Dery Tibor u. 4. Email: liftbound [dot] support [at] gmail [dot] com.