Lift
Privacy
Last updated: 1 November 2026
In brief
Lift is an iPhone app for strength training, optionally with Apple Watch, with no account and no sign-in. Your training data lives only on your iPhone (and on your watch during a workout). Lift uses Apple Health and the watch only if you connect them; Lift sends workouts, heart rate, energy, HRV, resting heart rate, sleep, motion data and the location of your runs to no server. There is no advertising, no tracking, no analytics SDKs and no third-party SDKs. Only what you trigger yourself reaches our server — feedback, and an exercise’s details for the online AI (only after your consent) — plus two automatic things without content: anonymous error and crash reports, and at launch the question whether a newer version exists.
The app
- Training data on the device only: exercises, sessions, sets, plans, and notes and questions are stored by Lift exclusively on your iPhone; with Apple Watch, the watch receives the day’s plan during a workout and sends your sets back (see below). There is no account, no sign-in and no server storing this data. If you let the online AI recognise an exercise, its name, its note and the other details listed below go to our server — they are not stored there.
- Backup: Lift automatically backs up your data as a file in the app's folder on the device (Files app, "On My iPhone › Lift"). If iCloud Drive is turned on, Lift additionally places a copy in your own iCloud Drive (folder "Lift"). The provider is Apple; we cannot see this copy. Exporting and importing is something you do yourself in the app. From version 1.19 Lift also takes in by itself, when you open it, a Lift file in the backup format that you put in the folder “Lift › Import” in iCloud Drive (such as goals and plans); nothing is sent to a server.
- Exercise catalogue (since 1.16.0): the roughly 100 exercises with guides, muscles and sources ship inside the app and need no internet; search, linking and the muscle statistics are computed on your device — none of it reaches a server. If you link one of your own exercises to the catalogue, Lift only stores the catalogue entry’s identifier with your exercise (also in the backup). If you tap a source link in a guide, your browser opens the study at PubMed (National Library of Medicine, USA) or at the publisher — just like the sources of the online AI.
- Apple Health (only if you connect it): if you connect Apple Health under ⋯ › Apple Health & Watch, Lift saves each strength session as a workout in Apple Health: type (functional or traditional strength training), start, end and an identifier of the session derived from its start time (against duplicates). From version 1.19 the watch also saves your runs from the running programme as running workouts, outdoors with their route (see “Runs with Apple Watch and location”). If you record with Apple Watch, the watch measures your heart rate and energy and saves them with the workout in Apple Health. Your sets, reps, weights and exercise names don’t go to Apple Health. Lift may read from Apple Health heart rate and energy (to show them during the workout), workouts (start, end, source), so that no workout is saved twice and Lift can tell you if starting it ended a running workout of the Workout app, and from version 1.18 — only if you turn on “Readiness today” — your heart rate variability (HRV), resting heart rate and sleep analysis (see the next point). Since 1.17.0 Lift also shows the heart rate per set for each set recorded on the watch in the session (average, peak and how far it drops in the minute after): read from Apple Health, only displayed, never stored. From version 1.19.0, Lift also shows the heart rate curve of a finished workout and the average peak heart rate per exercise – likewise read from Apple Health, only displayed, never stored. From version 1.19, the watch also reads the distance covered during a run (to show it during the run), and the running programme’s history shows the average and peak heart rate of each run – likewise read from Apple Health, only displayed, never stored. Lift sends this heart rate data to no server, shares it with no one, uses it for no advertising and copies it neither into its own data nor into the backup (including the iCloud copy). From version 1.19.0, Lift stores, from the watch’s motion sensor, the duration of each repetition per set (seconds, no raw sensor data); like your sets, it is kept in Lift’s database and in the backup. Whether Apple Health syncs it between your devices via iCloud is up to your Apple settings. You can change what Lift may do at any time in your iPhone’s Settings under Apps › Health › Data Access & Devices › Lift.
- Readiness today (from version 1.18, only if you turn it on): if you turn on “Readiness today” under ⋯ › Apple Health & Watch, iOS asks whether Lift may read your heart rate variability (HRV; as SDNN, on iOS 27 also as RMSSD), your resting heart rate and your sleep analysis from Apple Health. Lift then reads the values of the last four weeks each time you open the overview (HRV measured during sleep, resting heart rate per day, sleep stages per night), compares today’s values with your own usual range from those four weeks and shows one line about it on the “Today” card. All of this is computed on the iPhone and only for this display: Lift stores neither the values nor the result, copies nothing into its own data or the backup (including the iCloud copy), and sends nothing to a server, to the watch or to the online AI. On the device Lift only remembers whether the feature is turned on (not in the backup). You can turn it off in the same place; you revoke the read permissions in your iPhone’s Settings under Apps › Health › Data Access & Devices › Lift. If you tap one of the studies under “Why?”, your browser opens it via doi.org at the publisher. The line is a training hint, not medical advice.
- Apple Watch and motion sensor (only with a watch): during a workout the watch receives the day’s plan from the iPhone (exercises, targets, weights) and sends back each set (reps or time, weight) and, for display, your current heart rate — directly between your devices, not through our server. The watch evaluates the motion sensor at your wrist: it counts reps and notices when a set fits another exercise from today’s plan better. Since 1.17.0 you start and stop each set on the watch, it logs the set when you stop, and you can correct it on the iPhone. The Apple Watch motion trace stays on your devices: after the workout the watch sends it directly to the iPhone (the position of your wrist over the whole workout, the movement and rotation of your wrist during the sets, and when each set ran; on runs from version 1.19, position and movement throughout the run and when each segment ran, without location) and does not keep it itself. The iPhone keeps the traces of the last 30 workouts, not in Lift’s backup and not in its iCloud copy. They leave the iPhone only if you trigger it yourself: as a file via the iOS share sheet or, if you turn it on with a hidden gesture under ⋯ › Apple Health & Watch (from version 1.18.1, off by default), automatically after each workout as a file in your own iCloud Drive (folder “Lift › Spuren”); nothing goes to our server. So that counting and recognising improve over time, the iPhone keeps, per exercise, a few motion figures from your latest 30 sets (such as wrist position, no data streams) and the value after your correction; from these a small profile goes to the watch with the day’s plan. These figures also stay only on your devices, are not in Lift’s backup, and are included in the export. Like all of the app’s data, traces and figures are part of your iPhone’s device backup if you have turned it on, and are gone when you delete Lift. The watch itself connects to no server.
- Runs with Apple Watch and location (from version 1.19, only when you run outdoors): when you start an outdoor run (on the watch “Run” › “Outdoor”, or on the iPhone “Just run, with the watch” › “Outdoor, with GPS”), the watch asks once whether Lift may use your location while you are using the app. During the run the watch then records your route by GPS and saves it as the route of the running workout in Apple Health. It also uses the GPS speed to tell whether you are walking or running; the speed is not stored. Lift itself keeps no location: not in its database, not in the backup, not in the motion trace. From a run, the iPhone receives only the result (session, start, duration, whether outdoors, your choice afterwards, warm-up and stretching) and the motion trace, both without location. Lift sends your location to no server. Indoor runs and strength workouts never use location; the iPhone app never asks for it. You can withdraw access at any time in the watch’s Settings under Privacy & Security › Location Services; you delete the route together with the workout in the Health app.
- Feedback (voluntary, triggered by you): if you send feedback, the app transmits your text, the category (request, bug or question), app version and build, the iOS version and a random installation identifier. The identifier only serves to match your own reports and to prevent abuse; it is neither a device ID nor an advertising ID. A screenshot is included only if you select one yourself. The feedback goes to our server — a Cloudflare Worker (Cloudflare, Inc.) — and is stored from there as an entry in a private GitHub repository (GitHub, Inc., USA). The developer is notified by a Telegram message; that message contains your text. The app fetches replies using the numbers of your own reports. Language requests ("Suggest a language") take the same route. Please do not put personal or health-related data into feedback.
- Error and crash reports (automatic, anonymous): if Lift crashes or hits an error, the app sends a report with app version, build, iOS version, device model, a context keyword, the error message and a compact crash stack (memory addresses, no content). No training data, no identifier. The route is the same: Cloudflare Worker, entry in the private GitHub repository, Telegram notice to the developer.
- Recognise exercise (online AI) — only with your consent: when you tap “Recognise exercise (AI)” on an exercise, Lift asks the first time whether it may use the online AI; without “Allow” nothing is sent, and the app does not remember “Don’t Allow”. With your consent Lift sends the exercise’s name, your note on it, the names of its variations, the default equipment, whether you measure reps or time, the catalogue exercise (from version 1.18.1) if you linked one (its name and classification from the catalogue), your answers to any follow-up questions, your correction if a suggestion is wrong (together with the rejected suggestion), and the app language to our server and from there to the AI service Anthropic (Claude). No sets, weights or times, no open questions, no health data, no name, no account. Please do not put complaints or symptoms into a note you send for recognition. A random ID for this installation goes only to our server; it counts the requests per day and month under it (the counter expires at the latest 32 days after the last request), and it is never sent to Anthropic. In addition, Lift confirms with Apple’s “App Attest” for these requests that they come from a genuine Lift installation on an iPhone: the iPhone creates a key once, which Apple confirms as genuine and whose secret part never leaves the device. Our server checks every request with it, stores only the public part (without expiry, with no link to you as a person) and then counts requests under this key; only without a valid proof does it count under the random ID. The key never goes to Anthropic, and no training data is sent with it. The estimated cost is counted only for all Lift users together. Our server does not store the request or the answer. The answer consists of suggestions from an AI that can be wrong; only what you confirm is applied. Each form tip and each note on your note shows what it is based on — a study or a guideline with a link, otherwise “general tip” without a source — and how confident the AI is. If you tap a link, your browser opens the page on PubMed (National Library of Medicine, USA) or at the publisher. Lift stores the result on your device and in your backup. You can withdraw your consent at any time under ⋯ › Online AI, where you can also delete stored recognitions.
- Retention at Anthropic: under Anthropic’s rules for the API, Anthropic automatically deletes inputs and outputs (for Lift: the exercise details, your note, answers and correction, and the AI’s suggestions) within 30 days of receipt or generation. Exceptions: if Anthropic’s automated review systems flag a request as violating Anthropic’s usage policy, Anthropic keeps inputs and outputs for up to 2 years and the review results for up to 7 years; Anthropic may also retain data as required by law or as necessary to combat usage policy violations. By default, Anthropic does not use inputs and outputs from the API to train its models. Anthropic may process the requests in the US, Europe, Asia or Australia; they are stored in the US. Sources in Anthropic’s Privacy Center (retrieved 1 October 2026): retention, training, server locations.
- Abuse prevention: so that nobody can flood the feedback route, our server counts a day's feedback requests per installation identifier or per IP address (what is stored is not the address but a hash with a random value that changes daily and is deleted after three days). These counters are deleted after two days at the latest.
- Update notice: at launch the app asks our server whether a newer version exists that you can install the way you installed the app. Only the app name, the installed version number and whether the app came from the App Store or TestFlight are transmitted — no identifier, no content.
- Notifications: notifications are created locally on the device (rest timer, notice about replies to your feedback). There is no push server.
- Photos: Lift does not access your photo library. The app receives only the one image you pick in the iOS picker as a screenshot for your feedback.
- No advertising, no tracking: Lift contains no advertising, tracking or analytics SDKs and no third-party SDKs.
Services that receive data
- Apple — iCloud Drive, only if you have turned it on: the backup copy in your own iCloud Drive. Apple Health, only if you connect it: the workouts Lift saves there (strength workouts and, from version 1.19, runs – outdoors with their route; on your devices; whether Apple syncs them via iCloud depends on your settings). Apple Watch Location Services, only for outdoor runs: the location for the route. App Attest, only for the online AI: Apple confirms your iPhone’s key as genuine.
- Cloudflare, Inc. — runs the infrastructure of our server (feedback, error reports, online AI, update notice) and processes technically necessary connection data such as the IP address in doing so.
- GitHub, Inc. (USA) — stores your feedback (only if you send feedback) and the anonymous error reports in a private repository.
- Telegram — notifies the developer about new feedback (including your text) and new error reports.
- Anthropic — AI analysis for “Recognise exercise (AI)”, only with your consent; for retention see above.
This website (velostats.app)
The pages under velostats.app/lift follow the same rules as the rest of the website: no cookies apart from the strictly necessary language-choice cookie (DE/EN), no trackers, no analytics services; your browser loads the fonts from Google Fonts (Google sees your IP address in the process, but no cookies). The website runs on Cloudflare Workers. Whatever you send via the contact form or by email to support@velostats.app is used solely to answer your enquiry, is not shared with third parties, and is deleted automatically after 90 days at the latest.
Your rights: access and deletion
Local data: delete the app — this removes the training data and the backup in the app's folder from the device. You delete the copy in your iCloud Drive in the Files app (folder "Lift"), stored online-AI recognitions in the app under ⋯ › Online AI, and Lift’s workouts in Apple Health in the Health app (for a run including its route); you withdraw location access in the watch’s Settings; what the watch has learned is gone when you delete Lift from the watch. For questions, access requests or deletion of feedback you sent: support@velostats.app.
Controller
David Gertis
support@velostats.app