Effective: 13 October 2026 · Last updated: 24 October 2026
Supalifts Privacy Policy
Supalifts is a strength-training app for Android and iPhone. It is operated by Nirmal Singh Rathore, an individual based in Jaipur, India (“we”, “us”). This policy explains what information the app handles, where it goes, and the choices you have. If you have a question, write to hello@supalifts.com.
The short version
—
You can use Supalifts without an account. Then everything you log stays on your phone. The one exception is an error report: if the app breaks, it can include a picture of the workout screen you were on, with your private details blacked out (section 4).
—
An account only adds backup. If you sign in, a copy of your data is stored in your private backup so it can come back on a new phone.
—
We never sell your data, show ads, or use advertising trackers.
—
You can delete your account and backup at any time, inside the app or from our website.
1. Information on your phone
When you use the app, it stores the following on your phone only:
—
Profile: your name, gender, age, height and body weight, which the app uses to suggest starting weights and to compare your lifts with other lifters.
—
Training: workouts, exercises, sets, reps, weights, effort ratings, the calories each workout burned, plans, gyms and equipment, favourite exercises, badges and levels.
—
Body: body measurements and progress photos you add, a profile picture, and photos of exercises you create.
—
Settings: units, theme, rest-timer and training preferences.
Without an account, none of this leaves your phone, except as described in sections 3 and 4.
2. Information we keep if you create an account
An account is optional. If you sign in:
—
Account details. Your email address. If you sign in with Google, Google also shares your name and profile picture address with us; we use only your email and the account identifier.
—
Your backup. A copy of everything listed in section 1, including your progress photos, stored in a private backup that only your account can open. It is updated when you leave the app after making changes, and is used only to restore your data, for example on a new phone.
—
Sign-in records. Our authentication provider keeps standard security records, such as when you signed in and from what IP address, to protect your account.
—
Feature requests. Ideas, comments and votes you post on the in-app Feature requests board. Other people see your ideas and comments, but never your name or email address; your votes are seen only by you. The board also keeps when you agreed to its rules and whom you blocked there: you see only how many people you blocked, and nobody else sees it. Both are deleted with your account.
—
Support chat. If you use Chat with us: your messages and any photos you send, your account’s name and email address, when your account was made, its identifier, the app version and your phone’s operating system and its version. The conversation is stored with your account and our team reads and answers it in Telegram, a messaging service, so a copy is kept there too. Nothing about your training is sent unless you write it or send it in the chat.
—
AI features. If you use them: Import from image or PDF sends the images or PDF you pick to Anthropic, whose Claude model reads the exercises, sets and reps in them. AI coach tips send the name of a lift, the note you left on it last time and the app’s own tips for it, so the tip can answer your note. Nothing else about your training is sent. Your weights, targets and scores are always worked out by the app, never by the AI. You can turn coach tips off in Settings → Training.
Sign-in codes are sent to your email address through Google Workspace.
3. Exercise videos
Exercise videos stream to your phone over the internet when you play them, and like any website, the server delivering a video sees your device’s IP address while it streams. To stop abuse, our server counts how many videos each person plays per day and month: by a scrambled (hashed) form of your email address if you are signed in, or by a scrambled form of a random identifier the app keeps on your phone, and of your connection’s IP address, if not. The scrambled forms cannot be turned back into the address or identifier. These counts are kept for no more than 40 days.
4. Crash reports, app updates and voice search
—
Crash reports. If the app crashes or hits an error, it sends a report to Sentry, our error-tracking service. A report holds: the error itself and where in the app it happened; your phone’s model, its operating system version and the app version; the names of the screens you visited just before it; a screenshot of the screen at the moment of the error; and a screen recording of up to about a minute before the error, showing the app’s screens and where you tapped.
The screenshot and recording show the app as you saw it. Your workout screens can appear in them: exercise names, weights, reps, sets, plans, workout history and any notes you wrote on a workout.
These are always blacked out of the recording, and while any of them is on screen, no screenshot is sent at all: your name, email address and sign-in code; your sex, age, height and the rest of Basic info; your body weight (including a weight read from Health Connect or Apple Health), body measurements and their charts; your progress photos and profile photo; the calories on a workout, and the starting-weight suggestion worked out from your body weight.
Reports do not include your account, your email address or your IP address, and no screenshot or recording leaves your phone unless an error happens. Separately, for about one app session in five, the app sends Sentry how long each screen took to open (the screen’s name and the time, with your phone model and app version, never what was on the screen). We use crash reports and these timings only to find and fix bugs and slow screens.
—
App updates. When the app opens, it checks with Expo, the service we use to deliver app updates, whether a newer version is available. This sends technical information such as the app version and your device’s IP address.
—
Voice search. When you tap the microphone in the exercise search, your phone asks for permission to use the microphone (and, on iPhone, for speech recognition). While you speak, your voice goes to your phone’s own speech service, run by Google on Android and Apple on iPhone, which turns it into the words in the search box. That service may process your voice on Google’s or Apple’s servers, under their own privacy terms. Supalifts never records or keeps the audio, never sends it to us, and does not save what you said: the words are only used for that search. The microphone is used only while you are searching, and never in the background.
5. How we use information
We use information only to run the app: to build your plans and suggest weights, to back up and restore your data, to sign you in, to answer you when you write to us, to prevent abuse, and to fix bugs. We do not use your data for advertising, we do not sell or rent it, and we do not share it with anyone except the service providers below, who process it on our behalf.
6. Service providers
Provider
What it does
Where
Supabase
Accounts, backups, the video server, feature requests, the support chat
South Korea (Seoul)
Telegram
Where our team reads and answers the support chat (your messages and photos, name, email, app and phone details)
Worldwide
Google (Google Sign-In, Google Workspace)
Signing in with Google; sending sign-in codes
Worldwide
Sentry
Crash reports, with a screenshot and screen recording from before the error
United States
Expo
App updates
United States
Google (Android) or Apple (iPhone) speech service
Turning your voice into words, only when you use voice search
Worldwide
Anthropic
Reading plans from your images and PDFs, and wording coach tips, only when you use them
United States
Your information may therefore be processed outside your country. Where the law requires it, we rely on the safeguards these providers offer for international transfers.
On Android, Supalifts switches off the phone’s own system backup, so your workouts, measurements and photos are not copied into your Google account’s phone backup. The only backup is the one in the app, when you sign in.
7. How long we keep information
—
On your phone: until you delete it, sign out, or uninstall the app. Signing out removes your data from the phone after backing it up.
—
Your account and backup: until you delete your account. Deleting it removes your account, your backup, your backed-up photos and your feature requests, comments, votes, board-rules agreement and blocks immediately.
—
Support chat: kept with your account so the conversation is there when you come back, and in our team’s Telegram. Deleting your account deletes both, with any photos you sent. To delete just the chat, ask in the chat or email us.
—
AI requests: we keep only how many you made each day, under a scrambled form of your email, for up to 40 days. Anthropic does not use them to train its models.
—
Video counts: up to 40 days. Crash reports: up to 90 days. Sign-in security records: as long as our authentication provider keeps them, normally a short time.
8. Your choices and rights
—
Use the app without an account, so nothing leaves your phone.
—
See and change your data in the app at any time.
—
Export your data from Settings → Account.
—
Delete your account and backup in Settings → Account → Delete account, or on our website at supalifts.com/delete-account.
—
Ask us to access, correct or delete your information, or to stop processing it, by writing to hello@supalifts.com. We answer within 30 days.
Depending on where you live (for example under India’s Digital Personal Data Protection Act, the EU and UK GDPR, or US state laws), you may have further rights, including the right to complain to your data protection authority. We handle your data on the basis of your consent and to provide the app you asked for; you can withdraw consent at any time by deleting your account.
Grievance and data contact: Nirmal Singh Rathore, hello@supalifts.com.
9. Health information
Body weight, measurements and progress photos are sensitive. We treat them with extra care: they stay on your phone unless you sign in, and in your backup they are readable only through your own account. Supalifts is a training tool, not a medical service, and does not diagnose or treat any condition.
Apple Health and Health Connect
Supalifts can connect to Apple Health on iPhone or Health Connect on Android. It is off until you switch it on in Settings → Health, and your phone asks your permission for each kind of data first.
—
What Supalifts reads: active calories that another app or device, such as a watch, recorded during a workout you finished in Supalifts (checked again for up to three days, in case the watch syncs late); and the most recent body weight that another app, such as a smart scale, recorded. Nothing else: not your heart rate, steps, sleep or any other health data.
—
What Supalifts saves there: each workout you finish, as a strength-training session with its start and end time (and, on Android, its name); our estimate of its calories, only when no watch measured them; and the body weights you log in Supalifts. If you delete a workout in Supalifts while connected, it is removed from Apple Health or Health Connect too.
—
How it is used: a watch’s calories replace our estimate on that workout. The newest body weight is shown on Settings → Health and is added to your body-weight log only if you tap Use it. We use this data only to show your workouts’ calories and keep your body weight up to date, and for nothing else.
—
Where it goes: the calories on each workout, and any weight you chose to add, become part of your Supalifts data (section 1), so they are in your backup if you sign in (section 2). They are blacked out of crash reports (section 4). We never send data from Apple Health or Health Connect to anyone else, never use it for advertising, and never sell it. Our use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
—
Turning it off: switching it off in Settings → Health stops Supalifts reading or saving anything at once. To remove its access completely, use Apple Health or Health Connect. What Supalifts already saved there stays until you delete it in that app; deleting your Supalifts account does not remove it.
10. Children
Supalifts is for people aged 16 and over, or 18 and over where the law treats younger people as children whose data needs a parent’s consent, including India, Indonesia and Saudi Arabia. The app applies the right age using your phone’s region setting and asks your age during setup. We do not knowingly collect information from anyone under these ages. If you believe a child has used the app, write to us and we will delete their information.
11. Security
Information travels encrypted, backups are stored encrypted, and each account can reach only its own backup. No system is perfectly secure, but we take care to protect your information and will tell you and the authorities about a breach where the law requires it.
12. Changes to this policy
If we change this policy, we will update the date above and, for important changes, tell you in the app before they take effect.
13. Contact
Nirmal Singh Rathore · Jaipur, India · hello@supalifts.com