Version: USER-PRIVACY-v1.11-2026-10-20 · Effective/updated: October 20, 2026
Lift Like Technologies Inc. operates the Lift Like website, checkout, app and services. The service is not directed to children under 13. Users must meet any higher minimum age required in their location. If we learn we collected an under-13 user's information, we restrict the account and delete information not needed for safety or law.
Information and sources
We collect account, profile, birth date/age-gate, creator selection, onboarding, subscription, entitlement, support, message, report, block, preference, workout, set, meal, nutrition, progress, body, image, audio, prompt, output and other information you provide. We collect device, app, browser, IP, cookie, identifier, session, usage, content-view/follow/save/activity, diagnostic, crash, push, security, attribution and approximate-location information. Sources include Stripe, Supabase, Apple/Google authentication and platforms, creators, referrals, vendors, public sources, complainants and other users.
Stripe directly collects payment credentials. Lift Like receives customer, Checkout Session, subscription, invoice, amount, currency, tax, coupon, refund, dispute and payment-method status information and may receive billing name/address, brand, last four digits and expiry. We do not claim to store full card numbers or bank credentials.
Optional Apple Health permissions allow the app to read authorized steps, active energy, workouts, heart rate during workouts, workout routes and sleep, and to write completed Lift Like workouts, body weight check-ins and logged nutrition (dietary energy, protein, carbohydrates and fat). Optional Google Health authorization allows the app to read authorized steps and active calories from supported Fitbit and Google devices. Current code stores app-facing activity summaries, connection metadata and Google OAuth refresh tokens. We do not use health-derived information for advertising, data brokerage, insurance scoring or creator rankings.
Finding friends from your contacts. If you tap Find friends and allow access to your contacts, the app reads the phone numbers and email addresses in your address book on your phone. It turns each one into a one-way code (a SHA-256 hash) before anything leaves your device. We compare those codes with the codes of LiftLike accounts and show you the matches. We do not store your contact list or the codes made from it, and we never message your contacts. To make matching work, we keep the same kind of code for your own verified phone number and email. You can turn off "Let people find me by phone or email" in Settings → Privacy, and people who have your number or email will no longer see you in their matches. Contacts access is optional; you can remove it any time in iPhone Settings.
Invite and download links. When you tap Download on a Lift Like invite or download page, the website records the tap (the link's inviter or creator, campaign tags and time; an invite's private token is stored only as a SHA-256 hash) and copies a one-time code to your clipboard. The newest app versions do not read your clipboard but can use a code an older version saved. Older versions read the clipboard only when you tap Paste, and also let you type a code, to connect you to the friend or creator who shared it. A code works only for an account less than 30 days old; a one-time code also expires 30 days after the tap. A creator is credited when you pay for their coaching: in the app, when you subscribe to them; on the web, when you pay through their page or link. We record which creator and how. We delete the record of an unclaimed tap after 180 days.
Uses and disclosures
We use information for age gating, account/authentication, onboarding, entitlement, content delivery, personalization, recommendations, payments, renewals, refunds, support, safety, moderation, fraud, analytics, experiments, communications, security and legal compliance. Viewer activity may be visible to creators only through authorized aggregate or interaction features.
What a creator you follow sees. When you follow a creator, that creator can see the specific fields the coaching and kudos features run on: your name, profile photo and age; up to 20 dated weigh-ins from the last 90 days, with your starting and current weight; your starting and current body-fat percentage; your current streak and active days (days in the last 28 with any logged workout, meal or daily tracking); weekly meal and workout logging counts; your training volume trend and personal records (exercise, weight, reps and date); your alignment score with its food and training parts and the date it was calculated; the date a weigh-in moved you closer to your goal weight; and the date you joined their community. While birthday sharing is on (Profile → Settings → Birthday celebrations), they also see the month and day of your birthday; with it off, they see your age but not your birthday. Creators do not see your messages, precise location, or connected health-platform data. The app discloses this the first time you follow a creator, and unfollowing stops the sharing.
Friends, followers and your feed. Your profile shows your name, handle, photo, streak, the date you joined and the creators you follow. People you are friends with (you follow each other) see the workouts, meals and kudos you post to your feed. Only you and your friends can see your follower and following lists. If someone signs up from the invite link you shared, you become friends automatically the first time that link is used. Anyone else who uses the link, types your handle or finds you in search follows you instead, and you decide whether to follow back. You can block or report anyone.
Requested photo/audio recognition, transcription and generation can use Google Gemini, Groq and OpenAI through a server proxy. Specifically: food photos you scan, dictation audio and the transcripts made from it, and meal and workout details you type, dictate or log (used to fill in your log, draft post captions, explain meal adjustments and estimate the muscles a workout trained) are sent to these third-party AI processors (Google Gemini, Groq, OpenAI) to provide the feature you requested, and for nothing else. Posts, comments and photos you publish to the feed or a community are checked for safety by OpenAI's moderation service when you publish them. Exercise names from workouts you log in the app (not workouts imported from Apple Health or other connected platforms) are also sent to TypeSafe, a third-party AI processor, which classifies each name (for example, the muscle group and activity type it matches) so we can check and improve how workouts are organized in your log; exercise names come without your name or account details. We require these processors to protect submitted data and limit their use of it to providing, securing and supporting the requested service. We do not authorize broad model training with this information unless we first disclose that use and obtain consent where required. Free accounts include a weekly AI allowance of 5 photo scans, 10 food entries and 15 voice workouts, resetting each Monday at midnight in your time zone; to apply it, we count how many of each you use per week and keep that count for up to 90 days.
If you record an outdoor workout, location and route data from that workout are processed to render your outdoor workout map. Map rendering uses Mapbox as a processor for this feature. We do not use workout location data for advertising or sell it.
We disclose information as necessary to Supabase, Stripe, Vercel, Apple, Google, PostHog where configured, Meta and TikTok where you permit advertising measurement, AI/transcription providers (Google Gemini, Groq, OpenAI, TypeSafe), Mapbox for outdoor workout maps, email/push/crash/support/moderation vendors, creators and users through authorized features, contractors and advisers, transaction counterparties, and authorities or affected parties for law, safety, rights and fraud. We require service providers to give personal information protection that is consistent with this policy and applicable law. Providers may process information in Canada, the United States and other operating locations, subject to required contractual and transfer safeguards.
Necessary cookies support sessions and onboarding. Product analytics and experiments operate where configured. Where website analytics are allowed (in regions that require consent, only after you accept), PostHog session replay records how pages on our website are used so we can find and fix problems; text you type into fields is masked, and images and video are blocked, in your browser before a recording is sent. Advertising measurement and the App Tracking Transparency prompt are described in the next paragraph. Any other ATT-triggering tracking, targeted advertising, sale/share, data brokerage, sensitive profiling or email-pixel practice must be disclosed with required controls before activation. You may unsubscribe from marketing while receiving service and legal notices.
Lift Like advertises on Facebook, Instagram and TikTok, and measures the results. Where advertising measurement is allowed, the website loads the Meta Pixel and the TikTok Pixel. In the EU, UK, EEA and Switzerland these pixels load only after you accept. The pixels report page views, the welcome call to action, plan and paywall views, checkout starts, and subscription or trial conversions. Paid conversions and trial starts are also sent from our Stripe webhook to Meta's Conversions API. That server event carries a SHA-256 hash of your Lift Like account identifier. It also carries the amount, currency and plan name, and the _fbp and _fbc browser identifiers Meta sets on this site. After you enter a valid checkout email, the browser sends TikTok a SHA-256 hash of that email. We do not send Meta or TikTok a plain-text email address, a phone number, a name, quiz answers, or any workout, nutrition, body-measurement or connected health-provider information. You can refuse or withdraw advertising measurement in the cookie consent control, which stops these tools and clears their cookies. In the iPhone app, the optional Meta SDK asks through Apple's App Tracking Transparency prompt. The advertising identifier and Meta's automatic app-event logging stay off unless you accept that prompt.
Where advertising measurement is allowed, TikTok Pixel measures website funnel and conversion events. After a buyer provides a valid checkout email, we normalize it, hash it with SHA-256 in the browser, and share only the hash with TikTok to match later checkout and conversion events. We do not use or share the buyer's phone number, name, quiz answers, health data, workout data, nutrition data, body metrics, creator selection or free text for this matching. Automatic form scanning and enhanced page-data collection are disabled.
Text messages (SMS)
If you sign in with a phone number, we text a one-time passcode to that number to verify you control it. Members with a phone-based account may also receive transactional account texts, such as a post-purchase welcome message that tells you to sign in to the app with the same number. Marketing or promotional texts are sent only if you give express consent through a separate, unchecked checkbox, and you can withdraw that consent at any time. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out; reply HELP for help. We use Twilio as a processor solely to deliver these messages.
We do not share, sell, rent, or provide your mobile phone number, SMS opt-in status, or text-messaging consent data to third parties or affiliates for marketing or promotional purposes. Mobile opt-in and consent information is used only to send the messages described above and to honor your opt-out.
Retention, deletion and security
We retain accounts while active and for a reasonable closure period. We retain subscription, tax, refund and dispute records for applicable legal and accounting periods. We retain user content and logs while needed to provide the requested features. We retain moderation, fraud and security evidence while reasonably needed to protect users and the service. Backups remain until their ordinary overwrite cycle completes. We delete or de-identify personal information when it is no longer needed, unless law, a dispute, fraud prevention, security or a legal hold requires continued retention.
You can delete your account inside the app: Profile → Settings (gear icon) → Delete Account, at the bottom. Deletion cancels any active Stripe subscription, permanently deletes your workouts, meals, streaks, body metrics, posts, kudos, community activity, photos and voice notes, and removes your sign-in. Moderation reports and case records are kept with your identity removed (audit integrity), and retained transactions, disputes, fraud, security, backups and legal records are not immediately erased. Deletion is not a refund; it cannot be undone. Email deletion requests remain available (below) if you cannot access the app. We use risk-appropriate administrative, technical and organizational safeguards, but no system is perfectly secure.
Rights and choices
Depending on location, you may request access, correction, deletion, portability, disclosure information, consent withdrawal, objection/restriction, opt-outs and qualifying automated-decision review or appeal. Account deletion is available directly in the app (open Profile, tap the Settings gear icon, then Delete Account at the bottom) without contacting us. Exceptions may apply. Device settings control Apple Health, notifications, camera, microphone, photos, contacts and ATT. LiftLike Settings controls the Google Health connection. Contact our Privacy Officer at support@liftlike.app; we verify requests proportionately. Canadians may complain to the Office of the Privacy Commissioner of Canada or an applicable provincial regulator; other regulators may be available locally.
Each policy version is archived with identifier, date and preferably hash. Material changes receive notice and reacknowledgement or consent where required; history is never overwritten.
Privacy Officer · Lift Like Technologies Inc. · 375 University Avenue, Suite 3278, Toronto, Ontario M5G 2J5, Canada · support@liftlike.app (virtual mailing address; not a walk-in office)