Privacy Policy - OneLyft

At OneLyft ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service").

Please read this Privacy Policy carefully. By using OneLyft, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Personal Information

When you create an account, we collect:

Email address - Used for account authentication and important service communications
Display name - Optional, used to personalize your experience
Profile preferences - Such as your preferred theme (light/dark mode) and measurement units

Fitness and Workout Data

To provide our core service, we collect:

Workout logs - Exercises performed, sets, reps, and weights
Workout templates - Custom routines you create
Exercise history - Your progress over time
Workout duration and timestamps - When and how long you trained

Technical Information

We automatically collect certain technical information:

Device information - Device type, operating system, and app version
Usage data - How you interact with the app (features used, screens visited)
Error logs - Technical issues to help us improve the app

2. How We Use Your Information

We use the information we collect to:

Provide the Service - Store and sync your workouts across devices
Personalize your experience - Remember your preferences and show relevant data
Improve the Service - Analyze usage patterns to enhance features and fix bugs
Communicate with you - Send important updates about your account or the Service
Ensure security - Protect against unauthorized access and abuse

We do not sell your personal information. We do not sell your workout data to third parties.

Legal Basis for Processing (EEA/UK)

If you are located in the EEA or the United Kingdom, we process personal data under the following legal bases:

Contract - To provide the Service (create and manage your account, sync and display your workouts).
Legitimate interests - To secure, maintain, and improve the Service (fraud prevention, troubleshooting, performance and reliability improvements).
Consent - Where required by law (for example, optional marketing communications).

3. Data Storage and Security

Your data is stored using Supabase, a cloud database provider. We implement appropriate technical and organizational measures to protect your personal information, including:

Encrypted data transmission (HTTPS/TLS)
Secure authentication with password hashing
Row-level security policies intended to ensure you can only access your own data
Regular security updates and monitoring

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Data Sharing and Disclosure

We may share your information only in the following circumstances:

Service providers - We use Supabase for database hosting and authentication. They process data on our behalf under contractual obligations.
Legal requirements - If required by law, court order, or governmental authority
Protection of rights - To protect our rights, privacy, safety, or property, or that of our users
Business transfers - In connection with a merger, acquisition, or sale of assets (you would be notified where required)

We do not share your workout data with advertisers or marketing companies.

5. Your Rights and Choices

You have the following rights regarding your personal information (subject to applicable law):

Access - View your data within the app at any time
Correction - Update your profile information in the app settings
Deletion - Request deletion of your account and associated data by contacting us
Export / Portability - Request a copy of your workout data in a usable format
Restriction - Request we limit how we process your data in certain cases
Objection - Object to processing based on legitimate interests in certain cases
Opt-out - You can opt out of non-essential communications

To exercise these rights, please contact us at [email protected].

If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.

6. How to Delete Your Account and Data

You can delete your account and all associated data at any time. When you delete your account, the following data will be permanently removed:

Your email address and profile information
All workout history and logs
Custom exercises you've created
Workout templates
All fitness statistics and progress data

To delete your account:

Open the OneLyft app
Go to the Profile tab
Scroll down and tap "Delete Account"
Confirm your decision when prompted

Your data will be deleted immediately upon confirmation. This action cannot be undone.

If you are unable to access the app, you can request account deletion by emailing us at [email protected] from the email address associated with your account.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period (typically within 30 days), except where we are required to retain it for legal or legitimate business purposes (such as security, fraud prevention, and compliance).

Backup copies and server logs may persist for a limited period after deletion for security and disaster recovery purposes.

Workout data stored locally on your device (for offline use) remains on your device until you clear it or uninstall the app.

7. Children's Privacy

OneLyft is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it. If you believe we may have information from a child under 13, please contact us at [email protected].

8. International Data Transfers

Your information may be processed in countries other than your country of residence. Where required by law, we use appropriate safeguards and lawful transfer mechanisms to protect personal data when it is transferred internationally.

9. Third-Party Services

Our Service uses the following third-party services:

Supabase - Database hosting, authentication, and backend services (Privacy Policy)
Google Play Services - For Android app distribution and updates (Privacy Policy)

We may also use additional service providers for infrastructure, analytics, and error monitoring to operate and improve the Service. If we add new providers that materially affect how we process personal data, we will update this Privacy Policy.

These services have their own privacy policies, and we encourage you to review them.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, your personal information, or would like to exercise your rights, please contact us:

Email: [email protected]
Website: https://onelyft.com