Privacy Policy
Last Updated: 08/15/2026
ApexLift respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the ApexLift mobile application, website, and related services. This policy is not a contract, but it is intended to explain our data practices in plain terms.
1. Information We Collect
Account and Profile Information
When you create or use an account, we may collect email address, authentication identifiers from Google Sign-In, Apple Sign-In, or Supabase email/password authentication, name, profile photo, avatar information, ApexLift handle, display name, privacy settings, account preferences, and subscription entitlement status.
Workout, Fitness, and Performance Data
When you use ApexLift, we may collect workout data including exercises, sets, reps, weights, rest times, set types, effort notes, templates, and training history; performance metrics, ApexScore, muscle contribution data, progress trends, recovery and readiness signals, and coaching-related summaries; bodyweight, body measurement, health-signal, and fitness data you choose to enter or connect; and event, challenge, PvP, leaderboard, rival, hunt target, and match result data.
Health Integrations
If you enable Apple Health, HealthKit, Health Connect, or similar platform health integrations, ApexLift may read or write permission-scoped health and fitness data only with your authorization. The specific data types depend on the permissions you grant and the features you enable. We use health integration data to provide fitness tracking, recovery, coaching, analytics, and related app functionality. We do not sell health data, and we do not use HealthKit or Health Connect data for advertising or unrelated data mining. You can manage or revoke health permissions through your device settings and, where available, through ApexLift settings.
Connected Services
If you connect third-party services such as Strava, we may collect and process data needed to connect, maintain, diagnose, and use that integration, such as authorization status, access tokens, refresh tokens, activity-sharing settings, activity metadata, and integration diagnostics. Your use of connected services is also subject to those services' own terms and privacy policies.
Notifications and Messaging
If you enable notifications, we may collect and process push notification tokens and device messaging identifiers, notification preferences, category settings, delivery status, interaction events, in-app notification records, and notification payload metadata needed to route you to relevant app screens. You can manage system notification permissions through your device settings and supported notification preferences in the app.
Device, Diagnostics, Usage, Payments, and Support
We may collect device type, operating system, app version, locale, log data, crash reports, performance diagnostics, sync diagnostics, error reports, general usage analytics, feature interaction events, and approximate location derived from IP address. Payments and subscriptions are processed by third-party providers such as RevenueCat, Apple App Store, Google Play, and, where applicable, Stripe. We do not store full payment card details. We may receive subscription status, entitlement information, product identifiers, plan type, renewal state, billing status, transaction metadata, and store or processor identifiers. If you contact support or submit feedback, we may collect your message, contact information, diagnostic details, and support history.
Cookies, SDKs, and Similar Technologies
On our website and in some app contexts, we and our service providers may use cookies, SDKs, and similar technologies to maintain sessions, understand feature usage, measure performance, detect abuse, and improve the Service. Where required by law, we request consent for non-essential cookies or similar technologies.
2. How We Use Information
We use information to provide, operate, secure, and maintain the Service; authenticate users and protect accounts; track workouts, scores, analytics, coaching, recovery, and competitive features; process subscriptions, verify purchases, and manage entitlements; provide social, rival, PvP, leaderboard, event, template, notification, and connected-service features; generate coaching insights and training recommendations; respond to support requests and send service communications; monitor, investigate, and prevent fraud, abuse, cheating, security incidents, and platform manipulation; debug, measure, and improve app quality, reliability, and performance; comply with legal obligations; and enforce our Terms.
3. AI and Coaching Processing
ApexLift may use automated systems and artificial intelligence technologies to provide coaching insights, workout analysis, recommendations, summaries, and related features. To support these features, we may process workout history, training metrics, goals, coaching settings, and other relevant app context. Where third-party AI infrastructure is used, we send only the information needed to provide the feature and operate the Service. We do not intend for third-party AI providers to use your personal ApexLift data to train their general-purpose foundation models unless we clearly disclose that practice or obtain consent where required. Coaching outputs are informational only and are not medical advice.
4. Social, PvP, and Public Visibility
ApexLift includes social and competitive features. Depending on your privacy settings and feature use, some information may be visible to other users, such as handle, display name, avatar, titles, profile summary, privacy mode, ApexScore, rankings, leaderboard placement, league status, events, match outcomes, rival relationships, challenge status, templates or workouts you share, and limited comparison data. Privacy settings such as public, rivals-only, and private modes affect supported visibility surfaces, but they may not remove all historical, already-shared, anonymized, aggregated, or system-required records. We may use snapshots or derived records for match history, rankings, feed items, abuse prevention, integrity, and auditability. When an account is deleted, these records may be deleted, anonymized, detached from your account, or retained where permitted or required.
5. Third-Party Services
We use service providers to operate the Service, including Supabase for authentication, database, storage, Edge Functions, and backend services; RevenueCat for subscription entitlement management and purchase validation; Apple App Store and Google Play for app distribution, in-app purchases, subscriptions, and refunds; Google Sign-In and Apple Sign-In for authentication; Firebase Cloud Messaging for push notification delivery; Amplitude for product analytics; Sentry for crash reporting, diagnostics, and error monitoring; Strava for connected activity sharing and related integration features if you enable it; and AI infrastructure providers for coaching and automated analysis features where enabled. These providers process information as needed to perform their services and under contractual safeguards where required.
6. How We Share Information
We do not sell personal information for money. We may disclose information to service providers and processors that help operate the Service; to connected services you authorize; to other users as part of social, PvP, leaderboard, challenge, shared content, or profile visibility features; to comply with legal obligations, court orders, or lawful government requests; to protect the rights, safety, security, and integrity of ApexLift, users, and the public; and in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable legal requirements. If sale, sharing, or targeted advertising is defined differently under applicable law, you may have additional rights described in Section 10.
7. Health and Fitness Data Restrictions
We treat health and fitness data as sensitive. We do not use HealthKit or Health Connect data for advertising, unrelated profiling, or unrelated data mining. We do not sell health data. We only access permission-scoped health integration data after you grant permission through the relevant platform controls. You may revoke those permissions through your device settings.
8. Data Security
We implement reasonable administrative, technical, and organizational safeguards, including encryption in transit using TLS/HTTPS, secure authentication and session controls, access controls and least-privilege practices on backend systems, and backend rules and policies designed to limit access to user-owned records. No system is completely secure. We cannot guarantee absolute security.
9. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this policy, including to provide the Service, comply with law, resolve disputes, enforce agreements, prevent abuse, and maintain business records. Account, profile, and workout data is retained while your account is active. Support, diagnostic, security, and abuse-prevention records are retained as needed for troubleshooting, safety, and operations. Billing and transaction metadata is retained for tax, accounting, compliance, and entitlement purposes. Social, competitive, and derived records are retained while needed for app functionality, history, integrity, auditability, or legal/business purposes, and may be anonymized or detached when appropriate. Backups may retain deleted data for a limited period until backups expire or are overwritten. When retention is no longer required, data is deleted or de-identified, subject to backups and legal obligations.
10. Your Privacy Rights
Depending on your location, including certain U.S. states, the EEA, UK, and similar jurisdictions, you may have rights to know or access personal information we hold about you; correct inaccurate personal information; delete personal information subject to legal exceptions; receive a portable copy of certain data; object to or restrict certain processing; withdraw consent where processing is based on consent; opt out of certain profiling, targeted advertising, sale, or sharing where applicable; and not be discriminated against for exercising your privacy rights. You can submit privacy requests by emailing support@apexlift.app with the subject line Privacy Request. Please specify your request type and the email associated with your account. We may need to verify your identity before processing your request. If we deny your request and applicable law gives you appeal rights, you may reply to our response and request an appeal.
11. Account Deletion
You may request account deletion by using in-app settings or contacting us at support@apexlift.app. After verification, we will delete or anonymize eligible account data, except where retention is required or permitted by law, security, fraud prevention, billing, tax, compliance, dispute resolution, backups, or legitimate business purposes. Deleting your ApexLift account does not automatically cancel subscriptions managed by Apple, Google, RevenueCat, Stripe, or other third-party billing providers. You may need to cancel through the store or payment provider where you subscribed.
12. Children's Privacy
ApexLift is not intended for children under 13, or older where required by local law. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps.
13. International Data Transfers
We may process and store information in the United States and other countries that may have different data protection laws than your jurisdiction. Where required, we use appropriate safeguards for cross-border transfers and provide additional information on request.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by updating the Last Updated date and/or providing in-app or website notice.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at support@apexlift.app. Company: ApexCo LLC.