LiftFlow is a strength-training companion with a LiftFlow API backend. This policy describes what data we collect and your choices.
| Data | Purpose | Stored where |
|---|---|---|
| Email and/or Telegram profile | Account, sign-in | Server |
| Workouts, programs, body metrics | Core functionality | Server + device |
| JWT / refresh tokens | Authentication | Device + server hashes |
| Support messages | Feedback | Server |
| Payments (Robokassa) | Premium subscription | Payment provider + subscription server |
| FCM token (optional) | Push reminders | Server |
| Health Connect / Apple Health (optional) | Health summary | On device |
| Crash reports (Sentry, optional) | Stability | Sentry |
We do not sell personal data or use workout data for advertising.
Contract (service), consent (Health, push), legitimate interest (security).
Email delivery, Telegram (optional sign-in), Robokassa, Google Firebase (FCM), Sentry (if enabled), hosting provider.
Until account deletion or logout; local cache until app uninstall.
Access, correction, export (CSV in app), deletion — contact support.
HTTPS, short-lived JWT, rotating refresh tokens. Email is stored only after you confirm the code.
Not directed at children under 13 (16 in the EU).