Privacy Policy

This Privacy Policy explains what LiftyVerse does with your data, why, and what you can do about it. It describes the app as it actually works — not as it might work later.

1. Who is responsible

The controller for the processing described here is:

Gregor Brutter
1060 Vienna, Austria
privacy@liftyverse.com

LiftyVerse is operated by an individual, not a company with a data protection officer. We are not required to appoint one, because we do not carry out large-scale monitoring and are not a public authority.

2. Where your data is stored

Your data is stored on a server located in Austria. It is transmitted over HTTPS. Passwords are never stored in readable form — only a bcrypt hash. Session refresh tokens are also stored hashed.

Some data is sent outside the EU — for the AI features, push notifications, the review of coach conversations, and email you send us. Each case is described in section 4.

3. What we collect, and why

We collect only what the app needs to work. There is no analytics, no advertising, no tracking, and no third-party crash reporting in this app.

Account

• Name, email address, and either a password (stored hashed) or an identifier from Apple or Google if you sign in that way.
• Legal basis: Art. 6(1)(b) GDPR — necessary to provide the account you asked for.

Health and fitness data

• Body data: weight and weight history, height, date of birth, gender, activity level, and your goal.
• Nutrition: food and meal entries, water intake, custom foods and recipes you create.
• Training: exercises, sets, reps, weights, session duration, notes, personal records, templates and planned sessions.
• Activity: your step count, read from your phone's motion sensor (not from the Health app), and activities you log, with the calories they burn.
• Wellness: sleep times, supplement logs.
• Progress: streaks, trophies and personal records the app works out from the above.
• Legal basis: your explicit consent under Art. 9(2)(a) GDPR, together with Art. 6(1)(a). This is health data and receives stricter protection than ordinary account data. You give this consent when you create your account, and it is required — the app cannot function without processing it. You can withdraw it by deleting your account, which erases the data immediately (section 5).

AI features

• The AI coach, the day review, food tips and logging a meal by describing it send a summary of your logged data to an AI provider, which generates the answer. The provider keeps nothing: it may not store what is sent or use it to train its AI models. Section 4 says exactly what is sent and what is not.
• The AI coach also keeps short notes about what you have told it in chat, so it does not ask you the same thing twice.
• Legal basis: your explicit consent under Art. 9(2)(a) and Art. 6(1)(a), and for the transfer outside the EU Art. 49(1)(a). This consent is asked separately from the health data consent, and it is required to create an account. You can withdraw it at any time afterwards in Settings → Privacy settings; the app keeps working, without the AI features.
• What your AI use costs us is recorded per day and feature: how many AI requests were made for you, how many tokens they used and what they cost. It contains no message text and none of your logged data. Legal basis: Art. 6(1)(f) — our legitimate interest in knowing what the service costs and in spotting abuse. Kept 120 days, and deleted with your account.

Coach conversations

• Your conversations with the coach are stored on our server as threads, so you can reopen them and so a follow-up question knows what came before. You can delete a conversation in the app at any time. They are covered by your AI consent, and are deleted when you withdraw it or delete your account.
• How each answer was produced is recorded for every coach turn: which AI models were tried, how long each took, which data areas were read and how many entries they held, and whether something went wrong. This record contains no message text and none of your data. Legal basis: Art. 6(1)(f) — our legitimate interest in a coach that works. Kept 90 days.
• Reviewing conversations that went wrong — only if you agree. The first time you open the coach, we ask whether conversations in which an answer failed may be kept for review. If you say yes, such a conversation (the failed answer and the few messages before it) is kept so the developer can find out what went wrong. The coach works exactly the same if you say no.
• "Bad answer". Under every coach answer you can send that conversation to us yourself, with an optional comment. It is sent only when you confirm.
• Reviewed conversations are read only by the developer. To analyse them, the developer may use an AI tool (Anthropic, USA — see section 4) on a copy from which your name, email address, account identifier and dates have been removed.
• Legal basis for both kinds of review: your explicit consent under Art. 9(2)(a) and Art. 6(1)(a). Not available to users under 14. Kept until reviewed, and 90 days at most. You can turn automatic review off in Privacy settings, which deletes what was already kept, and withdraw any conversation you sent yourself there as well.

Friends

• Every account has a username, created when you sign up and changeable in your profile, and can have a profile photo. Other LiftyVerse users can find you by your username; the search shows your username, the name on your account and whether you have a photo.
• What your friends see — only people you accepted, or who accepted you: today's calories and macros with your targets; your finished workouts (exercises, sets, weights, duration, personal records) your workout templates and the meals and recipes you publish, which they can copy; your streak, number of workouts and records, the three trophies you picked and your training weeks over the last 12 weeks; your photo and your goal; and whether you are online or training right now, and when you were last active.
• Friends can react to your workouts. A 🔥 or 👍 reaction reaches you as a push notification with the friend's name; you can turn that off under Notifications. Pro users can send a friend motivation during a workout or a nudge on a day without one; it arrives as a push notification with the sender's name. We keep a record of each one sent, so the daily limit works.
• If you add a Friends widget to your home screen, your friends' names, streaks and workout counts are stored on your device for it. They are removed when you sign out.
• Your invite link (liftyverse.com/f/your-username) is a public page. It shows only that the username exists — not your name, photo or any data.
• Legal basis: your explicit consent under Art. 9(2)(a) and Art. 6(1)(a). Sharing with friends is part of the app, so this consent is part of the health-data consent you give when you create your account; accounts created before 29 September 2026 are asked once in the app. Nothing is shared with anyone you have not accepted as a friend, and removing a friend stops it for that person immediately. Withdrawing the consent entirely means deleting your account, as with the health-data consent.

Progress photos — optional, Pro

• With Pro you can save one photo a day together with that day's weight. The weight goes into your normal weight log; the photo is stored on our server in Austria, next to it. It is shrunk and re-encoded on your phone before upload, which removes location and device information from the file.
• Only you can see them. They are never shown to friends, never sent to the AI coach or any AI provider, never put in home-screen widgets, and not visible in our admin tools. They are only ever sent to your own logged-in app, and your phone does not store them.
• You can delete one photo or all of them in the app at any time, and they are deleted with your account. Deleted photos can remain in a backup for up to 24 hours (section 5). Your data export includes them.
• Legal basis: your explicit consent under Art. 9(2)(a) and Art. 6(1)(a), asked before your first photo — a photo of your body is health data, and storing it is a purpose of its own. Withdrawing it in Privacy settings deletes every progress photo immediately. If your Pro ends, you keep seeing and deleting your photos; only new photos need Pro.

Notifications — optional

• If you enable notifications, we store a push token for your device.
• Legal basis: Art. 6(1)(a) — consent, given by enabling notifications. Turn them off and the token is removed.

Subscription

• If you subscribe to Pro, we store Apple's transaction identifier, the product identifier, the status and expiry, and whether it came from the sandbox or production. We never see or store your payment details — Apple handles payment entirely.
• Legal basis: Art. 6(1)(b) — necessary to give you what you paid for.

Security

• Server logs record requests for operating and securing the service. Passwords, tokens and verification codes are stripped from logs before they are written.
• Legal basis: Art. 6(1)(f) — our legitimate interest in keeping the service running and preventing abuse.

4. Who else processes your data

OpenRouter and AI model providers — AI features

OpenRouter Inc. (USA) forwards AI requests to the providers that run the AI models. For the coach, the day review, food tips and logging by text, what is sent is a summary of your logged data: your weight, goal, maintenance calories, recent meals, training, sleep and targets, and what you write to the coach.

Your name is not sent. Neither is your email address or any account identifier.

Every request goes only to providers that keep nothing. Each one is restricted to providers that neither store what is sent nor use it to train AI models (zero data retention), and that are based in the USA or the EU. Which of them answers a given request can change from one request to the next. In the USA, the same level of protection as in the EU cannot be guaranteed.

OpenRouter itself acts as our processor under its Data Processing Agreement, which incorporates Module 2 of the EU Standard Contractual Clauses (Art. 46 GDPR). For the model providers, the transfer rests on your explicit consent (Art. 49(1)(a)).

A photo you attach when estimating a meal is sent together with your description, under the same restriction. LiftyVerse does not store the photo; it exists only for the length of that one request.

Two AI jobs carry no data about you at all: estimating the nutrients of a food product, and working out which muscles an exercise trains. They send only the product or exercise.

If you switch the AI features off in Privacy settings, nothing about you is sent to OpenRouter any more.

Anthropic — reviewing coach conversations, only if you agree to review

Anthropic PBC (USA) provides an AI tool the developer may use to analyse coach conversations kept for review (section 3). It receives a copy with your name, email address, account identifier and dates removed. Nothing is sent unless you agreed to automatic review or sent a conversation yourself.

Expo — push notifications, only if you enable them

Expo (USA) delivers push notifications. It receives your device push token and the text of the notification — for a motivation, nudge or reaction from a friend, that includes the friend's name. Expo acts as processor and relies on Module 2 of the Standard Contractual Clauses. If notifications are off, nothing is sent.

Email delivery

We send email for verification codes, password resets and account notices — for example that your account is about to be deleted for inactivity, or that Pro has ended. These are sent through Brevo (France, EU), which receives your email address and the text of that email, and nothing else.

When you write to one of our addresses (support@liftyverse.com, privacy@liftyverse.com), Cloudflare (USA) receives the message and forwards it to our mailbox at Google (Gmail, USA). Both receive what you choose to write and your email address. Cloudflare is certified under the EU-U.S. Data Privacy Framework and Google relies on it and on the EU Standard Contractual Clauses. Cloudflare only answers for our domain name; the app talks to our server in Austria directly, not through Cloudflare.

OpenFoodFacts

When you search for or scan a food product, the search term or barcode is sent to the OpenFoodFacts database. No information about you is sent — not your name, your account, or your identifier. Foods you create yourself are never sent there.

Apple and Google Sign-In

If you sign in with Apple or Google, they verify your identity and we receive a unique identifier and, where you permit it, your email address.

5. How long we keep it

• While your account exists, your data is kept so the app can show it to you.
• When you delete your account, your data is erased from the live system immediately — not marked as deleted, actually removed.
• Backups are kept for 24 hours and then overwritten, so deleted data can persist in a backup for up to that long.
• AI data on withdrawal: if you withdraw AI consent, the coach's notes about you, your coach conversations, any conversations kept for review, your saved day reviews and your food notes are deleted immediately. Your own logged data is not affected.
• Coach diagnostics and conversations kept for review are deleted after 90 days at the latest, whether or not they were reviewed.
• Friends: a friend you remove stops seeing your data immediately. Your username, photo, friendships, reactions and motivations are deleted with your account.
• Inactive accounts: an account that has not been used for 24 months is deleted. We email you 30 days before; opening the app in that time keeps the account.
• Records of what your AI use cost are deleted after 120 days, and with your account.
• Before 28 September 2026, AI requests could also go to providers allowed to store them under their own terms. What such a provider stored then is outside our control, and deleting your account cannot remove it there.

6. Your rights

You can do the following yourself, in the app, without asking us:

• Access and portability (Art. 15, 20) — Settings → Privacy settings → Export my data downloads everything we hold about you as a JSON file.
• Erasure (Art. 17) — Settings → Delete account. Immediate and permanent.
• Rectification (Art. 16) — edit your profile, goals and any logged entry at any time.
• Withdraw consent (Art. 7(3)) — Settings → Privacy settings turns the AI features and conversation review off. The Friends consent is part of the health-data consent and is withdrawn by deleting your account. Withdrawing does not affect processing that already happened.

You also have the right to restrict or object to processing (Art. 18, 21). Contact us at privacy@liftyverse.com.

You have the right to complain to a supervisory authority. In Austria that is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at. You may also complain to the authority where you live.

7. Is providing data required?

To have an account, yes: consent to processing your health data — including that friends you accept can see your day, workouts and photo — is required, because the app is a fitness tracker and cannot work without it. Consent to the AI features is also required when you create the account; you can switch them off afterwards and keep using the app. Without both consents, you cannot create an account.

Conversation review and notifications are optional. Declining any of them costs you that feature and nothing else.

8. Automated decision-making

The AI coach makes suggestions. It does not make decisions about you with legal or similarly significant effects, and nothing it produces is applied to your account without you accepting it.

9. Children

LiftyVerse is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with data, contact us and we will remove it.

10. Changes

If we change this policy in a way that affects what you agreed to, we will ask you to agree again in the app. Minor corrections are published here with an updated date.

11. Contact

Questions about this policy or your data: privacy@liftyverse.com.