Privacy Policy
Lift, by Chewable AS. Last updated: 25 September 2026.
This policy describes what Lift collects, why, who else sees it, and what you can do about it. It was written by reading the code rather than by adapting a template, so every claim below corresponds to something specific: the tables in apps/api, the requests in apps/mobile/src, and the permissions in app.json.
Chewable AS, Norway, is responsible for your data (the "controller" under the GDPR).
The short version
- Lift stores your training, food log and body measurements so they survive a lost phone.
- If you use the AI coach or AI food logging, what you ask, the photos you add, and the training and food data needed to answer are sent to OpenAI, who processes them for us. They are not used to train AI models. Lift asks before anything is sent.
- If you subscribe, Apple handles the payment and RevenueCat tells us whether your subscription is active.
- There is no advertising, no tracking and no analytics SDK. Nothing about you is sold.
- You can delete everything from inside the app, permanently, at any time.
What Lift collects
Your training
| What | Why |
|---|---|
| Routines: days, exercises, sets, rep ranges, rest | So the app can show your plan and prescribe the next session |
| Sessions: every set, its weight and reps, and when it happened | So your history, records and progression exist |
| Exercises you create yourself | So they are available on your other devices |
Your food log and body
| What | Why |
|---|---|
| Food entries: what you ate, how much, and its calories and macros | So the food diary and your daily totals work |
| Foods you save yourself | So you can log them again |
| Body measurements you enter: weight, body fat, and circumferences | So the app can show trends |
| Your targets and goal: calorie target, protein target, lose, hold or gain | So the targets follow your goal |
A barcode you scan is looked up in the Open Food Facts database by our server. Only the barcode number is sent, never anything about you.
The coach (Lift Pro)
| What | Why |
|---|---|
| Things you asked the coach to remember, such as an injury or a preference | So it takes them into account next time |
| Suggestions the coach made, and whether you accepted them | So a suggestion shows once and not again |
| How much of the AI budget your account has used this month | So one account cannot run up an unbounded bill |
Your conversation with the coach is kept on your phone, not on our server.
Photos
Lift uses the camera or your photo library only when you take or attach a photo: to scan a barcode, to read a nutrition label or a meal into your food log, or to show the coach something. A barcode is read on your phone. Other photos are sent to OpenAI to be read and are never stored on our server.
Your identity
Lift is usable without an account you have to create. On first launch the app asks our server for an anonymous account and receives a random credential, stored in your device's keychain. It is not derived from your hardware, phone number, advertising identifier or anything else about you.
If you choose Sign in with Apple, Lift also stores:
- the identifier Apple gives us for you (specific to Lift),
- your email address, if you choose to share it (with Hide My Email we only see the relay address),
- your name, if you choose to share it.
Your subscription
If you subscribe to Lift Pro, Apple takes the payment. We never see your card. RevenueCat receives your purchase from Apple, linked to your Lift account number, and tells our server whether your subscription is active, when it renews, and whether it was refunded.
Who else processes your data
| Who | What they receive | Why |
|---|---|---|
| OpenAI | Your questions to the coach, photos you attach, and the training, food and body data needed to answer | To run the AI coach and AI food logging. Sent only after you agree in the app. Not used to train models |
| RevenueCat | Your Lift account number and your App Store purchase | To manage the Lift Pro subscription |
| Apple | Your payment, and your Apple ID if you sign in with Apple | Payments and sign-in |
| Open Food Facts | A barcode number, nothing else | To look up a scanned product |
Nobody else receives your data. Our server and database run on hardware we control in Norway.
What Lift does not collect
- No location, of any precision.
- No data from Apple Health. Lift does not read HealthKit.
- No contacts, microphone or calendar.
- No advertising identifier and no device fingerprint.
- No analytics or crash-reporting service, and no record of which screens you open or which buttons you press.
How it is stored and who can see it
Your data is stored in a database where every row is tagged with your account and every query is filtered by it. That filtering is enforced centrally, and an automated test fails the build if a table is added without it.
Your data is sent over HTTPS. Nobody else's account can read yours. Lift has no sharing, no social features and no public profiles.
Your data is not sold and not used for advertising. It is shared only with the processors listed above, and only for the reason given there.
Deleting your data
Settings → Account → Delete account (or Delete my data if you never signed in).
This is not a deactivation and not a request queued for a human. It immediately and permanently deletes everything stored for your account: training, routines, exercises you created, food log, saved foods, body measurements, targets, coach memories and suggestions, usage records, subscription status, your account record, and every device credential, so no phone can sign in as you afterwards.
There is no undo and no retention period. An active subscription is billed by Apple, so cancel it in your App Store settings as well.
Deleting the app without deleting your account leaves your data on the server, reachable if you reinstall and sign in with the same Apple ID.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by writing to the address below. You can also complain to Datatilsynet, the Norwegian Data Protection Authority.
Children
Lift is not directed at children under 13 and does not knowingly collect data from them.
Changes
If this policy changes materially, the date at the top changes with it and the change will be noted in the app's release notes.
Contact
privacy@ [domain to be filled in — see the note in the source]