Privacy Policy — liftspot.ai

Who we are

Liftspot.ai is a fitness companion app built and operated by Matthew Schultz. If you have questions about this policy or your data, contact us at hello@liftspot.ai.

This policy explains what information we collect when you use liftspot.ai, how we use it, who we share it with, and your rights over your data.

1. Information we collect

Information you provide

Profile information — your display name, fitness goal, experience level, and any injuries or physical limitations you enter during onboarding.
Workout data — exercises performed, sets, reps, weights, and duration for each workout you log.
Scan data — photos you take of gym equipment are processed to identify the machine and suggest exercises. These photos are transmitted to Anthropic (the company that provides our AI service) for processing and are not permanently stored by us after identification is complete. Recent scan results (without the original photo) are stored to show your scan history.
User code — a random alphanumeric code assigned to your account at setup. This is your identifier within the app.

Information collected automatically

Exercise requests — when you search for an exercise not yet in our catalog, the exercise name and your anonymous user code are logged to help us expand the app's exercise library. This data is used only for product improvement and is not linked to your personal identity.
Firebase Anonymous Authentication — when you first open the app, Firebase creates an anonymous account linked to your device. This gives you a unique identifier without requiring an email address or password.
Analytics events — we use Firebase Analytics to track how the app is used (e.g., when workouts are started, completed, or shared; when machine scans occur; which features are used). This data is aggregated and used to improve the app. No personally identifiable information is attached to these events.
Device information — Firebase Analytics may collect standard device information including device type, operating system version, and app version.

Payment information

If you subscribe to Liftspot Pro, payment is processed by Stripe. We do not store your credit card number or payment credentials. Stripe's privacy policy governs the handling of your payment information.

2. How we use your information

To provide the app's core features: identifying gym machines, generating exercise recommendations, and logging your workouts.
To sync your data across sessions and restore it if you clear your browser cache.
To improve the app through aggregated, anonymized usage analytics.
To process payments and manage your subscription (when applicable).
To respond to your support or feedback requests.

We do not sell your personal information to third parties. We do not use your data for advertising.

3. Who we share your information with

Recipient	What's shared	Why
Anthropic	Equipment photos (processed as base64), optional hint text	AI machine identification. Anthropic does not use API inputs for model training by default. See Anthropic's Privacy Policy.
Google / Firebase	Anonymous auth ID, Firestore data, analytics events	App infrastructure and database
Stripe	Payment details	Subscription processing (Liftspot Pro)

All third-party processors listed above have their own privacy policies and data processing agreements that govern how they handle data.

International transfers: your data may be processed in the United States. Our third-party processors (Anthropic, Google/Firebase, Stripe) maintain Standard Contractual Clauses or equivalent transfer mechanisms for data originating in the European Economic Area.

Shared workouts: if you use the workout sharing feature, your workout content is associated with a 6-character share code and stored in our database. Anyone with the code can view the workout. Do not share codes containing information you consider private.

4. Data storage and retention

Your profile and workout data is stored in two places:

On your device — using your browser's localStorage. This data stays on your device and is not accessible to us directly. Clearing your browser data or switching devices removes this copy.
In the cloud — using Google Firestore, linked to your anonymous Firebase account. This data persists across sessions and devices.

We retain your data for as long as your anonymous account is active. If you delete your account or request data deletion, your Firestore data will be deleted within 30 days.

Scan photos are processed in real time and not retained in our systems after identification is complete.

5. Cookies and tracking

Liftspot.ai is a Progressive Web App (PWA). We use:

Firebase Authentication — a session token to maintain your anonymous login.
Firebase Analytics — Google's analytics platform, which may use device identifiers to track app usage patterns. This is subject to Google's privacy policy.

We do not use third-party advertising trackers or behavioral advertising cookies.

6. Children's privacy

Liftspot.ai is not directed at children under 13. We do not knowingly collect personal information from anyone under 13 years of age. If you are under 16 and located in the European Union, you may need parental consent to use this app.

If you believe we have inadvertently collected information from a child under 13, contact us at hello@liftspot.ai and we will delete it promptly.

7. Your rights

All users

Access — you can view all your workout history and profile data within the app.
Deletion — you can delete individual workouts within the app. To request full account deletion and removal of all your data from our servers, contact us at hello@liftspot.ai.
Portability — your workout data is available for export in the app (Profile → Data → Export).

European users (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation: the right to access, correct, or erase your personal data; the right to restrict or object to processing; the right to data portability; and the right to lodge a complaint with your national data protection authority.

Our legal basis for processing your data is legitimate interest (providing the service you signed up for) and, where applicable, your consent.

California users (CCPA)

California residents have the right to know what personal information we collect, to request deletion of that information, and to opt out of the sale of personal information. We do not sell personal information. For requests, contact us at hello@liftspot.ai.

8. Changes to this policy

We may update this policy as the app evolves. When we do, we'll update the "Last updated" date at the top. Continued use of the app after an update constitutes acceptance of the revised policy.

9. Contact

For privacy questions, data requests, or concerns:

hello@liftspot.ai

This privacy policy was prepared with the assistance of AI and reviewed for completeness. For questions about your specific legal rights, consult a qualified attorney in your jurisdiction.