Privacy Policy
Introduction
Welcome to LIFT PERFECT — an AI-powered sports form analysis application that helps athletes and fitness enthusiasts improve their technique through real-time video feedback and intelligent coaching insights.
This Privacy Policy explains how LIFT PERFECT ("we," "our," or "us") collects, uses, stores, and protects your personal information when you use our mobile application and related services.
- We collect only the data that is strictly necessary to provide and improve our services.
- We will never sell, rent, or trade your personal data to third parties for their marketing purposes.
- All AI provider API keys are stored exclusively on our secure backend servers — they are never embedded in the app or transmitted to your device.
- Your device never directly contacts AI providers. All AI calls are routed server-side through Supabase Edge Functions.
- We process video content as still frames only — full videos are never uploaded or stored on our servers.
By downloading, installing, or using LIFT PERFECT, you agree to the collection and use of your information as described in this Privacy Policy.
Information We Collect
We collect information you provide directly and data generated through your use of the app. Here is a transparent breakdown:
- Name and display name
- Height and weight (for biomechanical analysis calibration)
- Date of birth (for age-appropriate guidance)
- Gender
- Workout frequency and experience level
- Optional profile photo (stored in your Supabase account)
- Email address
- Password (stored as a cryptographic hash — we never store plaintext passwords)
- Individual JPEG still frames extracted from workout recordings (not full videos)
- AI form analysis results, scores, and coaching feedback
- Exercise type, sets, reps, and session metadata
- Progress history and trend data
- App interaction events (features used, screens visited)
- Crash reports and diagnostic error logs
- Device type and operating system version (for compatibility)
How We Use Your Information
We use your information for the following specific purposes, each tied to a legitimate legal basis:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| AI Form Analysis | Video frames, profile metrics (height, weight) | Contract Performance |
| Personalization | Profile info, experience level, workout history | Contract Performance |
| Progress Tracking | Analysis results, session history | Contract Performance |
| App Improvement | Aggregated usage data, crash reports | Legitimate Interest |
| Authentication & Security | Email, hashed password, session tokens | Contract Performance |
| Data Synchronization | All profile and analysis data | Contract Performance |
We do not use your data for advertising profiling, automated decision-making with legal effects, or any purpose not listed above without first obtaining your explicit consent.
Third-Party AI Services
To deliver real-time sports form analysis, LIFT PERFECT integrates with the following AI provider APIs:
- Used for computer vision and pose estimation analysis.
- Only JPEG still frames are sent — no audio, no full video, and no personally identifiable information (PII) is attached to these requests.
- Processing is real-time. NVIDIA does not retain your image data after the analysis response is returned.
- Used for generating natural language coaching feedback and form corrections.
- Receives anonymized analysis output from vision processing — no direct user identifiers.
- Processing is real-time. No message history or user data is retained by OpenRouter beyond the immediate request.
Data Storage and Security
We implement industry-standard security measures to protect your personal information both locally on your device and in the cloud.
- Sensitive preferences and session tokens are stored using encrypted AsyncStorage on your device.
- Local data is protected by your device's operating system security mechanisms.
- Your data is stored on Supabase, which is hosted on Amazon Web Services (AWS) infrastructure.
- Row-Level Security (RLS) policies ensure that users can only access their own data — database-level isolation enforced on every query.
- All data in transit is encrypted using TLS 1.2 or higher.
- Passwords are stored as bcrypt cryptographic hashes — plaintext passwords are never stored or accessible.
- API keys for AI providers are stored in Supabase Edge Function secrets and are never transmitted to the client.
While we take every reasonable measure to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. If you suspect any unauthorized access to your account, please contact us immediately at fg9tm@hotmail.com.
Data Sharing and Disclosure
We may share your data only in the following limited and specific circumstances:
- Service Providers: We share data with vendors who help us operate the app (e.g., Supabase for database hosting, NVIDIA NIM, OpenRouter). All service providers are bound by Data Processing Agreements (DPAs) and are contractually required to protect your data.
- Legal Requirements: We may disclose your data if required to do so by law, court order, or governmental authority, only to the extent required and where legally permissible.
- Safety: We may share data where we believe disclosure is necessary to prevent imminent harm to you or others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via in-app notice before your data becomes subject to a different privacy policy.
Data Retention
We retain your data only for as long as necessary to provide our services and meet legal obligations. The following table outlines our retention schedule:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account & Profile Data | Until account deletion | User Controlled |
| Analysis Results & History | Until account deletion | User Controlled |
| Profile Photos | Until deleted by user or account deletion | User Controlled |
| AI Image Frames | Not retained — real-time processing only | No Retention |
| Error & Crash Logs | 90 days | Legitimate Interest |
Upon account deletion, all your personal data will be permanently removed from our active systems within 30 days. Some anonymized, aggregated data (not linked to your identity) may be retained for statistical purposes.
You can delete your account at any time by navigating to Profile —†’ Delete Account within the app.
Your Rights and Choices
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Correction: Request that we correct inaccurate or incomplete data about you.
- Right to Deletion: Request deletion of your account and personal data. You may also do this directly via Profile —†’ Delete Account.
- Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
- Right to Object: Object to certain types of processing, including processing based on legitimate interests.
To exercise any of these rights, contact us at fg9tm@hotmail.com. We will respond to all verified requests within 30 days.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make changes, we will:
- Update the "Last Updated" date at the top of this page.
- Display a prominent in-app notification to alert you of significant changes before they take effect.
- Give you reasonable advance notice for material changes that affect your rights.
Your continued use of LIFT PERFECT after the effective date of the updated policy constitutes your acceptance of the revised terms. We encourage you to review this policy periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to reach out:
- Email: fg9tm@hotmail.com
- App: Profile —†’ Help & Support
- Response Time: We aim to respond to all inquiries within 30 business days.