Consumer Health Data Privacy Policy
This Consumer Health Data Privacy Policy describes how Liftkin collects, uses, shares, and deletes Consumer Health Data, and the rights available to you with respect to that data. It is Liftkin’s notice under Washington’s My Health My Data Act, Nevada’s consumer health data law (SB 370), Connecticut’s Data Privacy Act, and similar U.S. state laws. It applies in addition to the Privacy Policy, which covers all Personal Information that Liftkin handles. Capitalized terms are defined in Section 1.
1. Introduction and Scope
1.1 The Operator
Liftkin is operated by Gavin Maggio, a sole proprietor based in Irvine, California, United States (“Liftkin,” “we,” “us,” or “our”).
1.2 Scope
This policy applies to the Liftkin iOS app (the “App”) and the website at liftkin.fit (together, the “Service”).
1.3 Definitions
In this policy, the following terms have the meanings set out below:
- “Consumer Health Data” means Personal Information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status, as defined in the laws listed in the introduction to this policy.
- “Personal Information” and “Health Data” have the meanings given in the Privacy Policy.
- “Content,” “Your Content,” and “Liftkin Pro” have the meanings given in the Terms of Use.
2. Consumer Health Data We Collect
Depending on the features you choose to use, Liftkin may collect the following categories of Consumer Health Data:
- Apple Health metrics that you allow, consisting of daily summaries of sleep, heart rate variability (HRV), resting heart rate (RHR), steps, active energy, bodyweight, and body fat percentage.
- Heart rate summaries for a workout, consisting of the number of heart rate samples, the average and highest heart rate, and the number of overlapping workouts from other apps or devices. Individual readings are never sent or stored.
- Readiness and scores that Liftkin calculates, consisting of your daily readiness and your weekly Sleep and Recovery scores.
- Data from Oura or Polar, only if you connected them previously, consisting of daily summaries of sleep duration, time in bed, bedtime and wake time, sleep score, heart rate variability, resting (overnight) heart rate, steps, and active calories, and, from Oura only, the readiness score and minutes of high stress and of high recovery.
- Daily check-in answers, consisting of your energy, soreness, and stress ratings and the body areas you mark as sore.
- Body measurements, consisting of bodyweight, body fat, other measurements you log, and your goal weight.
- Progress photos that you add.
- Food logs, consisting of the foods you log, their nutrition values, your nutrition targets, meal preferences, any allergies you disclose to an AI feature, and food photos you scan.
- Physique scans, if you subscribe to Liftkin Pro and start one, consisting of the Liftkin Fitness Score, subscores, and written results that Liftkin stores, including neutral notes on any progress photos you choose to include in the scan, as described in the Privacy Policy.
- Gym visits, consisting of the gym at which you checked in or arrived and the time, to the extent this information is considered Consumer Health Data. Liftkin never stores your precise location.
Liftkin never reads clinical health records.
3. Sources of Consumer Health Data
Liftkin collects Consumer Health Data from the following sources:
- You, when you log food, measurements, photos, or a daily check-in.
- Apple Health on your iPhone, for the data types you allow on Apple’s permission screen.
- Oura and Polar, only if you connected them previously, through their official APIs, which you authorized on their sign-in pages.
- Liftkin, which calculates readiness and Sleep and Recovery scores from the data described above and your workouts.
4. Purposes of Collection and Use
4.1 Purposes
Liftkin collects and uses Consumer Health Data for the following purposes:
- to provide the features you turn on, including sleep and recovery trends, readiness, Sleep and Recovery scores, your body log, nutrition tracking, and training suggestions that adjust to your level of recovery;
- if you turn on AI features, to produce the AI result you request, such as a plan, a weekly recap, a physique scan, an answer from Ask your coach, a food photo estimate, or the wording of your morning brief;
- to confirm that a workout was genuine before it can earn a free day of Liftkin Pro (heart rate summaries only); and
- to keep the Service secure and to comply with the law.
4.2 Restrictions on Use
Liftkin never uses Consumer Health Data for advertising, marketing, or data mining, and does not use it to train AI models.
5. Sharing of Consumer Health Data
5.1 Processors
Liftkin shares Consumer Health Data only with the following processors, which handle it on Liftkin’s behalf, under contract, and only to provide the Service:
- Supabase hosts Liftkin’s database and photo storage, where your Consumer Health Data is stored.
- Anthropic (Claude) receives the data that an AI feature needs to produce its result, only if you have turned on AI features. Progress photos are sent only when you choose to include them. Under Anthropic’s commercial terms, this data is not used to train Anthropic’s models, and Anthropic deletes it within 30 days unless Anthropic must retain it longer to enforce its usage policies or to comply with the law.
5.2 Other Users of the Service
Your Consumer Health Data is never shown to other users in raw form. If you turn on sharing for a weekly Sleep or Recovery score, people in your squads see that score and nothing else. Gym check-ins are visible to your friends, and “here now” status is visible only if you turn on “Show me as here,” as described in the Privacy Policy.
5.3 Other Disclosures
Liftkin may also disclose Consumer Health Data when required by law or valid legal process, to a business entity that Liftkin forms to operate the Service or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply), or with your consent. Liftkin has no affiliates that receive Consumer Health Data.
6. Consent
6.1 Collection
Liftkin collects Consumer Health Data only as necessary to provide a feature you have requested. Any collection beyond that is opt-in. Health integrations, daily check-ins, body and food logging, progress photos, physique scans, and AI features are all off until you choose to use them.
6.2 Apple Health Permissions
The App reads only the Apple Health data types that you allow on Apple’s permission screen. You may change this selection at any time in the Settings app on your iPhone under Health, Data Access & Devices.
6.3 Consent to AI Features
AI features are off until you turn them on, and you may turn them off at any time under Social, Edit profile, AI features. Turning on AI features constitutes your consent to send the data that each feature needs to Anthropic. While AI features are off, no data is sent to Anthropic.
6.4 Withdrawal of Consent
You may withdraw consent at any time by disconnecting a source, turning off a feature, or contacting Liftkin. Withdrawal does not affect processing that took place before the withdrawal.
7. No Sale of Consumer Health Data
Liftkin does not sell Consumer Health Data and will never do so. Liftkin does not share Consumer Health Data with data brokers or advertisers, or for targeted advertising.
8. Gym Arrival Alerts and Geofencing
8.1 Gym Arrival Alerts
Gym arrival alerts are off until you turn them on. When they are on, the App uses iOS region monitoring around the gyms you joined in the App, so that your iPhone can send you an alert when you arrive. Your iPhone determines when you enter or leave one of those areas. Liftkin does not track your route or store your coordinates.
8.2 Health Care Facilities
Liftkin does not establish geofences around health care facilities. Gym search excludes medical and health care locations, such as hospitals, clinics, doctors’ and dental offices, pharmacies, and physical therapy, chiropractic, and rehabilitation practices, so that they cannot be found or joined as gyms. Liftkin does not use geofencing to identify or track people seeking health care services, to collect Consumer Health Data, or to send messages or advertising about health care.
9. Your Rights
9.1 Rights Available to You
You have the right to:
- confirm and access your Consumer Health Data, which includes the right to find out whether Liftkin collects, shares, or sells your Consumer Health Data, to obtain a copy of it, and to obtain a list of all third parties with whom Liftkin has shared it, together with their contact information;
- delete your Consumer Health Data, including from the processors that hold it on Liftkin’s behalf; and
- withdraw consent to Liftkin’s collection and sharing of your Consumer Health Data.
9.2 Exercising Your Rights in the App
To delete only your Health Data, open Social, tap your profile photo, then Edit profile, Health and devices, and disconnect a source. Liftkin then stops syncing and deletes the data it stored from that source. You may delete body log entries and progress photos under Progress, Body. To delete all of your data, use Delete account in Edit profile. Further information is available on the Delete your data page.
9.3 Exercising Your Rights by Email
You may email support@liftkin.fit from the email address associated with your account, with the subject “Consumer health data request,” stating the right you wish to exercise. Liftkin will verify your request, which may include asking you to confirm it from your account’s email address. You may use an authorized agent where the law allows.
9.4 Response Times
Liftkin will respond within 45 days of receiving your request, or within any shorter period that applicable law requires. Where the law permits, Liftkin may extend this period by an additional 45 days if reasonably necessary, and will inform you of the extension and the reason for it. Deleted data may remain in encrypted backups for up to 30 days, until those backups expire. Liftkin will not discriminate against you for exercising your rights.
9.5 Appeals
If Liftkin declines your request, in whole or in part, you may appeal by replying to Liftkin’s response with the subject “Consumer health data appeal.” Liftkin will respond to your appeal in writing within 45 days and will explain its decision and the reasons for it. If your appeal is denied, you may contact the attorney general of your state. In Washington, you may file a complaint with the Washington State Attorney General at atg.wa.gov/file-complaint.
10. Changes to This Policy
Liftkin may update this policy from time to time. Liftkin will post the updated policy on this page and update its effective date. If Liftkin makes a material change, such as collecting a new category of Consumer Health Data or sharing it in a new way, Liftkin will notify you in the App or by email before the change takes effect and will ask for your consent where the law requires it.
11. Contact
Questions or requests about this policy or your Consumer Health Data may be directed to:
Liftkin
Attn: Gavin Maggio, Privacy
17595 Harvard Avenue, Suite C - 10161
Irvine, CA 92614, United States
Email: support@liftkin.fit
