PRIVACY / YOUR DATA

Privacy Policy

This policy explains what Liftrank knows about you, why we need it, who can see it, and the choices you have.

Effective August 20, 2026

1. Who is responsible for your information

Liftrank is currently a pre-formation software project operated from Panama by its founders (collectively, “Liftrank,” “we,” “us,” or “our”). Liftrank is the controller of personal information processed for the service, except where a trainer independently decides how to use an athlete’s information outside Liftrank. Contact us at privacy@liftrank.tech. Before paid service begins, this policy must be updated with the operating company’s legal name and address.

2. Information we collect

  • Account and identity: name, email address, authentication identifiers, role, account status, and security-event information such as device or IP details supplied by our authentication provider.
  • Profile and body data: age, sex, bodyweight, height, optional waist measurement, and preferred units.
  • Training and coaching data: exercises, weights, repetitions, estimated one-rep maxes, strength ranks, notes, programs, assignments, completion, difficulty ratings, and coach or athlete feedback.
  • Sensitive uploads: progress photos, photo-request details, diet-plan PDFs, and associated notes. We treat body and fitness information as sensitive even when applicable law does not label every item as health data.
  • Connections and communications: trainer-athlete relationships, invitations, transactional email delivery records, and support communications.
  • Billing administration: agreed fees, due dates, payment instructions, payment status, references, notes, reminders, and audit history. Liftrank currently does not process payments or store real payment cards.
  • Technical data: session cookies, request metadata, timestamps, file metadata needed to store uploads, and security or error logs generated by our infrastructure. Liftrank does not currently use advertising or behavioral-analytics trackers.

3. How we use information

We use information to create and secure accounts; provide workout logging, strength estimates, coaching, media, and billing-record features; connect trainers and athletes at their request; deliver service and security emails; provide support; prevent abuse; maintain, debug, and improve the service; enforce our terms; and comply with law. We do not sell personal information or use body, training, diet, or progress-photo data for targeted advertising.

4. Legal grounds and sensitive-data permission

Depending on where you live, we process data because it is needed to provide the service you request, to pursue legitimate interests such as security and product reliability, to comply with legal obligations, or with your consent. By intentionally entering body information or uploading progress photos or diet material, you consent to its processing for the features you choose. You may withdraw consent by deleting the relevant content or your account, but withdrawal does not invalidate earlier lawful processing.

5. Who receives information

We disclose only what is reasonably necessary to:

  • Your connected trainer or athlete. Accepted connections can see information required for coaching. Trainers must use athlete information only to provide the agreed coaching service and must not download, publish, or reuse it without permission.
  • Service providers. Clerk provides authentication; Resend delivers email; Cloudflare R2 stores private uploads when enabled; Microsoft Azure is the intended hosted database infrastructure; and our hosting, security, and support providers process limited data to operate Liftrank.
  • Legal and safety recipients. We may disclose information when reasonably necessary to comply with valid legal process, protect a person from serious harm, investigate abuse, or defend legal rights.
  • Business transfers. A buyer, investor, or successor may review or receive information under confidentiality protections as part of a financing, reorganization, or sale.

We do not make progress photos or diet documents public. Each request to retrieve a private upload is checked against the user’s account and coaching relationship.

6. International processing

Liftrank is operated from Panama and uses providers that may process information in the United States and other countries. Those countries may have different privacy laws. Where required, we use contractual or other lawful transfer safeguards. Do not use Liftrank if cross-border processing described here is unacceptable to you.

7. Retention and deletion

We keep account content while your account is active and as needed to provide the service. When you delete your account, Liftrank requests deletion of your authentication account, database records tied to it, and private uploads owned by it. Limited copies may remain temporarily in encrypted backups, security logs, failed-email records, or records we must preserve for fraud prevention, dispute resolution, tax, or other legal duties. Trainer-visible content may disappear when either account or the underlying relationship is deleted. Before deleting, export or save anything you need.

8. Your choices and rights

You can review and update much of your profile in the service, disconnect from a trainer, remove eligible uploads, or delete your account. Depending on your location, you may also request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about disclosures and transfers. Email privacy@liftrank.tech. We may verify your identity before acting. You may complain to Panama’s National Authority for Transparency and Access to Information (ANTAI) or the privacy regulator where you live.

9. Security and incidents

We use role-based access checks, private object storage, signed authentication, upload type and size validation, and removal checks for embedded photo metadata. No system is perfectly secure. If an incident creates a legally reportable risk, we will notify affected people and authorities as required. Tell us promptly if you suspect unauthorized access.

10. Children

Liftrank is not directed to children under 13 and we do not knowingly collect their personal information. Users under 18 may use Liftrank only with permission and supervision from a parent or legal guardian, and only where local law allows. Trainers must obtain any consent required before inviting or entering information about a minor. Contact us to report a child’s account.

11. Changes

We may update this policy as the service, providers, or law changes. Material changes will be announced in the service or by email before they take effect when required. The date at the top identifies the current version.