Privacy policy

Last updated: 25 September 2026

1. Who is responsible

Liftway (the mobile app and this website, liftway.app) is made and run by Justinas Kairys, an individual developer based in Lithuania. Under the EU General Data Protection Regulation (GDPR), I am the controller for the personal data described in this policy. "We", "us" and "I" all mean me.

For anything about privacy or your data, email [email protected].

2. Data that stays on your phone

Everything you enter into Liftway is stored in a database on your phone. That includes:

• your workouts, sets, exercises, templates, goals and personal records
• bodyweight and body measurements
• supplements you track, if you use that feature
• your settings and the name you enter on your profile

This data is not sent to us or to anyone else. There's no account and no cloud sync, so I have no copy of it and can't see it. You control it:

• Export: Settings lets you export everything as a JSON, Excel or CSV file. You choose where it goes through your phone's share menu, and whatever service you pick (Drive, Files, email…) handles it under its own terms.
• Delete: deleting the app, or clearing its storage, erases this data from your phone.
• Phone backups: depending on your phone's settings, Apple (iCloud) or Google may include app data in your device backups. That happens under your agreement with them, not through Liftway.

Rest timer and supplement reminders are notifications scheduled on your phone itself. They don't go through any server.

3. Data that leaves your phone

3.1 Crash and error reports

When something goes wrong in the app, a report is sent to Sentry, the crash-reporting service I use, so I can find and fix the bug. A report contains:

• technical details of the error (what failed and where in the code), plus technical log messages
• the app version, your phone model and operating system version
• a random identifier for your installation of the app, so repeated crashes can be grouped (it isn't linked to your name or email)
• a short trail of recent app activity leading up to the error, such as which screens were opened
• a short screen recording from around the moment of the error, with all text, images and graphics masked, so it shows what was tapped but not what you had entered

The app is set up not to attach your IP address or other identifying details to these reports, and not to include your workout data. Like any internet connection, the connection to Sentry reveals your IP address to Sentry's servers. Sentry stores Liftway's reports in its EU data region (Germany).

Legal basis: my legitimate interest in keeping the app working and fixing bugs (GDPR Art. 6(1)(f)). The reports are kept minimal and masked so that this interest doesn't outweigh your privacy. You can object at any time (see section 8).

3.2 Feedback you send from the app

Settings has "Report a bug" and "Suggest a feature". These open a form that sends your message to Sentry, along with a technical report like the one above. The form also has optional name and email fields; fill them in only if you'd like a reply.

Legal basis: my legitimate interest in handling feedback and replying to you (Art. 6(1)(f)).

3.3 App updates

When it starts, the app checks Expo's update service (the platform Liftway is built on) for bug fixes and improvements, and downloads them. The check sends the app's version, your phone's platform (iOS or Android) and the release channel, and, as with any connection, reveals your IP address to Expo's servers.

Legal basis: my legitimate interest in delivering fixes and improvements to the app you're using (Art. 6(1)(f)).

3.4 App stores

If you get Liftway from the App Store or Google Play, Apple or Google process data about your download, and may share aggregated statistics and crash data with developers. They do this as independent controllers under their own privacy policies.

3.5 What Liftway doesn't do

• no advertising, advertising IDs or ad networks
• no analytics profiles and no tracking across other apps or websites
• no selling or renting of any data
• no automated decision-making or profiling about you
• no access to your location, contacts, photos, microphone or health apps

4. This website and email

Website. liftway.app is hosted by Cloudflare. When you visit, Cloudflare processes your IP address and browser details to deliver the page and protect the site from attacks. This website sets no cookies and loads nothing from third parties. If I measure visitor numbers, I use Cloudflare Web Analytics, which doesn't use cookies or build profiles of individual visitors. Legal basis: legitimate interest in running and securing the website (Art. 6(1)(f)).

Email. If you email a liftway.app address, the message is forwarded by Cloudflare Email Routing to my mailbox hosted by Google (Gmail). Replies are sent through Brevo, an email delivery service. I use your email and what you write only to answer you. Legal basis: legitimate interest in replying to your message (Art. 6(1)(f)), or taking steps you ask for (Art. 6(1)(b)).

5. Who processes data for us

These providers process personal data on my behalf, only to provide their service:

I don't share personal data with anyone else, except where the law requires it.

6. Transfers outside the EU

Some of these providers are US companies, so personal data may be accessed from or processed in the United States. Where that happens, the transfer is covered by the EU–US Data Privacy Framework (for providers certified under it) or by the European Commission's Standard Contractual Clauses in the provider's data processing terms. You can ask me for more detail at [email protected].

7. How long data is kept

• Your training data: on your phone, for as long as you keep it there. I never hold a copy.
• Crash reports and in-app feedback: deleted automatically by Sentry after at most 90 days.
• Update checks: kept only in Expo's service logs, for their operational and security needs.
• Emails: kept while we're in conversation, then deleted within 2 years, unless needed longer to resolve a dispute.
• Website logs: kept by Cloudflare for a short period for security purposes.

8. Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you, and get a copy
• have inaccurate data corrected
• have your data deleted
• restrict how it's used
• object to processing based on legitimate interests, including crash reports
• data portability (for data on your phone, the in-app export already does this)

Email [email protected] to use any of these rights. I'll reply within one month. Crash reports aren't linked to your name, so to find ones about you I may need details such as roughly when the crash happened and your phone model.

You can also complain to a data protection authority. In Lithuania that's the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, vdai.lrv.lt. You can also contact the authority in the EU country where you live.

9. Children

Liftway isn't aimed at children under 14 and isn't designed to collect data from them. If you think a child has sent us personal data (for example through the feedback form), email [email protected] and it will be deleted.

10. Changes to this policy

When Liftway changes, for example if optional cloud sync and accounts are added, this policy will be updated before the change goes live, and the date at the top will change. Significant changes will also be announced in the app.

Questions? [email protected]