Privacy Policy

LiftLeader ("LiftLeader", "we", "us") operates the LiftLeader iOS app and its backend service (together, the "Service") — a verified strength leaderboard where lifters log lifts, optionally with video, and rank against others. This policy explains what we collect, why, and your choices.

Information we collect

• Account — your full name (kept private), public handle, email address, date of birth, and a securely hashed password. Date of birth is used to compute age classes and to enforce a 16-and-over minimum.
• Lift data & media — the lifts you log (weights, reps, dates), and any photos or videos you upload for your profile or to verify a lift.
• Body weight — the bodyweight you enter, or, only if you grant permission, your bodyweight read from Apple Health. It is used to determine your weight class and relative-strength scores.
• Location — only if you grant permission, your device location, used to find nearby gyms and sort them by distance.
• Notifications — a device push token, if you enable notifications, so we can alert you about verifications, challenges, and followed athletes.
• Usage & diagnostic data — request logs and error reports used to operate the Service, keep it secure, and prevent abuse.

How we use it

To create and secure your account; run leaderboards and compute age/weight classes and scores; verify lifts; power gym discovery; send notifications you opt into; moderate content and keep the Service safe; and provide support.

What is public

LiftLeader is a public leaderboard. Your handle, lifts, rankings, submitted videos, and gym/community affiliations are visible to other users and on public boards. Your real name is kept private and is not shown publicly.

How we share it

We do not sell your personal data or use it for third-party advertising. We share data only with service providers that run the Service on our behalf:

• Cloud hosting and database (compute for the backend).
• Object storage for your videos and avatars.
• Google Places, for gym search — a search query is sent to return matching places; we store only a Google place identifier.
• Email delivery, for account-verification and password-reset messages.
• Apple, for App Store / TestFlight distribution and in-app purchases.
• Modal (modal.com) — serverless GPU compute that runs AI video analysis (pose, form, and bystander-face blur) on your uploaded videos.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

AI video analysis

When you upload a lift video, it is automatically analyzed by AI models to estimate your body pose, count reps and assess your form, and to detect and blur bystanders' faces for privacy.

This processing runs on our own infrastructure and, for GPU-accelerated analysis, on Modal (modal.com), a third-party serverless-GPU provider that processes the video on our behalf. Only the video clip and the lift's identifier are sent — never your name, email, or date of birth. Modal does not retain the video after processing and is contractually bound to protect it to the same standard described in this policy.

The analysis outputs — pose keypoints, form scores, and a face-blurred copy of the video — are stored with your submission.

We ask for your explicit consent before your first video is sent for analysis. You can decline; your video simply won't be AI-analyzed or auto-verified.

Apple Health

If you connect Apple Health, we read your bodyweight solely to keep your weight class and relative-strength scores accurate. We do not write data to Apple Health, and we do not share Health data with third parties or use it for advertising. You can revoke access at any time in iOS Settings → Privacy & Security → Health.

Children

The Service is not directed to children under 16, and you must be at least 16 to create an account.

Retention & deletion

We keep your information while your account is active. You can delete your account at any time in the app (Profile → Settings → Delete account), which removes your account and associated personal data from the live Service, subject to limited retention required by law and to routine backups that roll off over time.

Security

Data is encrypted in transit (HTTPS). Passwords are stored only as salted hashes, and sign-in sessions use revocable tokens. No method of transmission or storage is perfectly secure, but we work to protect your information.

Your choices

You can view and edit your profile in the app, control Health, Location, Notifications, Camera, Photos, and Face ID permissions in iOS Settings, and delete your account at any time. To request access to or deletion of your data, contact us at support@lift-leader.com.

Changes

We may update this policy; we will revise the effective date above when we do.

Contact

Questions about this policy? Email support@lift-leader.com.