Trust

Where your data lives

Training logs, meals, check-ins and health readings are personal. This page says plainly where Liftscribe keeps them, who processes them for us, what our AI features send and where, and how you take your data with you or delete it.

One server, our own database

The app, its database and your uploads run on a server we rent from Hetzner. Your training data is not kept with any other cloud provider.

No ads, no data sales

We show no ads, sell no personal data and do not use it for third-party advertising.

Take it with you

Download everything we hold about you as one file. Self-coached accounts can delete themselves in a few clicks.

Where each kind of data is stored

WhatWhere
Your sign-in: email address, password, login sessionsSupabase, used for sign-in only, never as our database
Training, nutrition, check-ins, messages, readiness and the health readings you syncOur own PostgreSQL database on our Hetzner server
Photos and videos you upload: meals, progress photos, technique clipsThe disk of the same Hetzner server
BackupsA nightly copy of the database, kept for 14 days

Server location: Hetzner Online GmbH · Nürnberg (nbg1), DE

AI: what is sent, and where

AI features (plans, the AI coach, weekly reviews, meal, voice and label analysis) send only what that one request needs, through our own gateway. The gateway's own usage reporting is switched off.

  • Requests that carry your health context (age, injuries, conditions) go only to OpenAI.
  • Meal and label photos you ask us to analyse go to OpenAI.
  • Less sensitive text tasks, such as turning a spoken meal into a food entry, may be handled by DeepSeek or Moonshot AI, which are based in China, without your name or email address.
  • We do not train AI models on your data. AI output is a suggestion: you or your coach decide what to act on.

What stays on your phone

  • Voice logging uses your phone's speech recognition. Our servers receive the text, not the audio.
  • Matching a food you typed or said to our food database can run against a food index stored on your phone.
  • Apple Health and Health Connect readings you allow (such as sleep, resting heart rate, HRV and weight) are read on your phone and synced to our server, so your readiness and your coach can use them.

Sub-processors

Companies that process personal data on our behalf. Some are only involved when the feature that needs them is used.

ProviderPurposeDataLocation
Hetzner Online GmbHServer hosting: app, database, uploads, backupsAll app dataNürnberg (nbg1), DE
SupabaseSign-inEmail address, password hash, login sessionsFrankfurt (eu-central), DE
OpenAIAI features: plans, coach chat, reviews, photo analysis, searchThe content of each AI request; photos you submit for analysis—
DeepSeek · Moonshot AILess sensitive AI text tasksRequest text, without name or email addressBased in China
AppleIn-app purchases and push notificationsPurchase records; device push token and notification text—
RevenueCatSubscription status for in-app purchasesApp user ID, purchase and renewal events—
SentryCrash and error reportsTechnical error details, with personal data sending switched off—
ResendTransactional email such as invitationsEmail address and message content—
Meta (WhatsApp)WhatsApp messages, only if your coach connects WhatsAppPhone number or chat ID, message content—
TelegramTelegram messages, only if your coach connects TelegramPhone number or chat ID, message content—
StripeCoach plan payments, once coach billing launchesCoach billing details—

Take your data with you, or delete it

  • Export: on the web, Account → Your data → “Download all my data” gives you one JSON file with everything we hold about you. Workouts and measurements are also available as CSV, on the web and in the app.
  • Delete: self-coached accounts can delete themselves under Account, on the web and in the app. This removes your profile, plans, history and food logs from our database, and your sign-in.
  • Coached by someone? Your coach manages your coaching data. Ask them, or contact us, and we will handle the request.
  • Deleted data leaves our nightly backups within 14 days, when those copies expire.

For coaches and studios

When you coach clients on Liftscribe, you decide what happens to their data and we process it on your behalf. The data processing agreement (Art. 28 GDPR) sets out how.

Draft under legal review. Contact us to sign it.

Questions

Responsible for this service: [Legal entity name and registered address].