Last updated: March 3, 2026
Everlift ("we", "us", "our", "the app") is a workout logging application designed to help you track your fitness progress. We are committed to protecting your privacy and being transparent about how your data is handled.
This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using Everlift, you agree to the collection and use of information in accordance with this policy.
The data controller responsible for your personal data is Everlift. For privacy-related inquiries, contact us at support@everlift.fit.
Under GDPR, workout and body measurement data linked to an identifiable person is classified as "health data" (Article 9 special category data). We process this data only with your explicit consent.
Under GDPR, we process your data on the following legal bases:
Health & Fitness Data
Basis: Explicit consent (GDPR Article 9(2)(a))
Purpose: Core app functionality — logging workouts, tracking body measurements, calculating progress and personal records.
Account Data (email, name)
Basis: Contract performance (GDPR Article 6(1)(b))
Purpose: Account creation, authentication, and cloud sync service delivery.
Analytics Data (usage patterns)
Basis: Legitimate interest (GDPR Article 6(1)(f))
Purpose: Understanding which features are used to improve the app. You can opt out at any time in Settings → Privacy.
Crash & Performance Data
Basis: Legitimate interest (GDPR Article 6(1)(f))
Purpose: Identifying and fixing bugs to maintain app stability.
All workout data is stored locally on your device using SQLite. The app works entirely offline — no internet connection is required to log workouts or access your history.
If you create an account and enable cloud sync:
We use your information to:
We use the following third-party services to operate the app:
Supabase — Cloud database and authentication (only if you create an account). Supabase is SOC 2 Type 2 compliant and GDPR-ready. Data is hosted on AWS infrastructure in the United States.
PostHog — Product analytics to understand which features are used and improve the app. PostHog receives aggregated usage data (screen views, feature interactions). We do not send personal workout data to PostHog. Only your anonymous user ID is linked — never your email. You can opt out entirely in Settings → Privacy.
Sentry — Crash reporting and error tracking. When the app crashes or encounters an error, Sentry receives device information, app state, and error traces to help us identify and fix bugs. No personal workout data is sent to Sentry.
Apple HealthKit (Future) — If enabled, workout data may be shared with Apple Health. HealthKit data stays on your device and is not uploaded to our servers. You control which data types are shared.
None of these services use your data for advertising. We have data processing agreements with each provider.
Local Data: Stored on your device until you delete it or uninstall the app.
Cloud Data: Retained as long as your account is active. Upon account deletion, all data is permanently removed within 30 days.
Analytics Data (PostHog): Usage events are retained for up to 12 months, then automatically purged.
Crash Data (Sentry): Error reports are retained for up to 90 days for debugging purposes.
Depending on your location, you have the following rights regarding your personal data:
Access — View all data we have about you through the app's export feature (JSON/CSV format).
Correction — Edit your workout data and profile information directly in the app.
Deletion — Delete all local data via Settings → Delete All Data. Delete your cloud account and all associated data via Settings → Delete Account.
Portability — Export your complete workout history in machine-readable formats (JSON, CSV).
Withdraw Consent — Withdraw health data consent or disable cloud sync at any time. Note: withdrawing health data consent means the app can no longer function, as workout tracking requires processing health data.
Restriction — Request that we limit processing of your data while a complaint is being resolved.
Objection — Object to processing based on legitimate interest (analytics and crash reporting). Use the opt-out toggle in Settings → Privacy.
Lodge a Complaint — If you are in the EU, you have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France, ICO in the UK, BfDI in Germany).
To exercise your rights, contact us at support@everlift.fit. We will respond within one month (GDPR) or 45 days (CCPA).
Under the California Consumer Privacy Act, California residents have specific rights including:
Categories of personal information collected in the last 12 months:
We implement industry-standard security measures including:
While we take security seriously, no method of electronic transmission is 100% secure. We recommend using a strong, unique password for your account.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33. If the breach is likely to result in a high risk to you, we will also notify you directly via email (if you have an account) or through an in-app notice, as required by GDPR Article 34.
Everlift does not engage in automated decision-making or profiling that produces legal or similarly significant effects. All analytics features (personal records, training load, progress charts) are informational tools computed on your device to help you track your fitness — they do not affect your access to any services or produce consequences beyond the app.
Everlift is not directed at children under 13 years of age (or under 16 in the European Union). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can take appropriate action to delete the information.
If you are located outside the United States, please be aware that your data may be transferred to and processed in the United States where our service providers (Supabase, PostHog, Sentry) operate.
For EU/UK users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and UK adequacy decisions to ensure appropriate safeguards for international data transfers.
We may update this Privacy Policy from time to time. Changes will be reflected in the app with an updated "Last updated" date.
For material changes, we will notify you through the app or via email (if you have an account). Continued use of the app after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us at:
Email: support@everlift.fit
We aim to respond to all privacy inquiries within one month.