LiftMates Privacy Policy

This Privacy Policy explains what data we collect, how we use it, and what rights you have. LiftMates is built privacy-first — we collect the minimum needed to run the service, and we never sell your data.

⚠️ Age requirement (年齢制限): Because LiftMates includes user-generated content and social messaging, this service is for users aged 18 and older. Younger users are not permitted to create an account.

1. What We Collect

Account information

• Email address — when you sign in (Apple Sign-In, Email, or future providers)
• Date of birth — collected at sign-up to verify you are 18 years or older (required for account creation, given the social and user-generated nature of the service). Never displayed to other users.
• Display name — provided by you, optional
• Auth provider identifier — Apple ID hash, Email, etc.

Profile content

• User name, bio, avatar image (if you upload one)
• Training profile: goal, frequency, experience level, gym style, focus body parts, main exercises
• Home gym (optional, with visibility setting that defaults to "hidden")

Training data

• Workout logs: exercises, sets, reps, weights, dates
• Body composition entries: weight, body fat % (if user provides)
• PRs and milestones

Social content

• Posts: captions, photos / videos you upload
• Comments, likes
• Direct messages: text, voice messages, and images you send in chats, plus read status (when you open a chat, the time is stored so the other person can see their message has been read)
• Block list, report submissions
• Match interaction: posts you respond to, profiles you long-press
• Profile view records (足あと): when you view another user's profile, we record your user name, avatar, and the time, and show them to that user (full details are visible to the viewed user only on a paid plan). When you view a recruiting post, an anonymous view count is recorded and shown to the post's author.
• Lift verification videos: if you apply for the verified-lifter badge, the lifting video you submit is reviewed by the operator and retained for the review record. Verified lift totals (BIG3) are displayed publicly on the leaderboard.

Purchase information

• Subscription status (Pro / Coach) and one-time purchases (post boosts, boost credit balance) — payments themselves are processed by Apple through the App Store; we receive and store only the verified purchase confirmation (product, expiry, obfuscated transaction identifiers), never your payment card details.

Device metadata

• Push notification token (FCM token)
• Device language and locale
• App version and build number
• Crash logs and stack traces (Crashlytics)

What we do NOT collect

• Precise GPS coordinates
• Health & Fitness data from HealthKit (Phase 2 may add with explicit user consent)
• Browsing history outside LiftMates
• Contacts / address book
• Camera roll content other than what you explicitly upload
• Microphone audio outside the in-app voice features
• Biometric data

2. How We Use Data

We do not:

• Sell your data to third parties
• Use your training data for marketing
• Profile you for advertising
• Share your data with anyone other than the third-party processors listed below

3. Third-Party Processors

We use the following services to operate LiftMates. These vendors process data on our behalf under their own privacy policies.

4. Data Retention

• Active account data: stored as long as your account is active
• Profile view records (足あと): one record per viewing user (only the latest view time is kept), retained while the accounts are active
• Workout logs: retained until you delete them or delete your account
• Deleted account: all data including auth, profile, posts, photos, training logs is permanently deleted within 30 days of account deletion request. Server logs may retain hashed identifiers for up to 90 days for security/abuse prevention.

5. Your Rights

You have the following rights regardless of location:

• Access — see what data we have about you (export via Settings → Account → Export data)
• Delete — permanently delete your account via Settings → Account → Delete account
• Correct — edit your profile and content at any time
• Block — block any user; their content disappears from your feed
• Report — submit a report for any content that violates our Community Guidelines

GDPR (EU) and CCPA (California) users have additional rights including data portability and the right to opt out of certain processing. Contact privacy@getliftmates.com to exercise these.

6. Children / 年齢制限

LiftMates is for users aged 18 and older, because the service includes user-generated content and social messaging. We require date of birth at sign-up and block account creation for anyone under 18. We do not knowingly collect data from minors under 18. If you believe we have collected data from someone under 18, contact privacy@getliftmates.com and we will permanently delete the account within 24 hours.

7. Security

• All traffic is encrypted in transit (TLS 1.2+)
• User content is encrypted at rest by Firebase
• We follow Firestore Security Rules to ensure users can only access their own private data
• We do not store passwords — authentication is handled by Apple and Firebase

8. International Transfers

Your data is processed primarily in Google Cloud asia-northeast1 (Tokyo). Some Firebase services and Apple authentication may transfer data to the United States under standard contractual clauses.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in-app and update the "Last updated" date.

10. Contact

For privacy questions, data requests, or to exercise your rights:

• Email: privacy@getliftmates.com
• Operator: Kaito Kosuge (LiftMates), Tokyo, Japan (individual proprietor)

We aim to respond within 5 business days.

11. App Store / Apple Specifics

For App Store users:

• We comply with App Store Review Guidelines 1.2 (Safety / UGC) with full block, report, and moderation tools.
• We comply with 5.1 (Privacy) by minimizing data collection, declaring it in App Privacy labels, and offering account deletion.
• We support Apple Sign-In with Hide My Email — your real email is never shared with us if you use this option.
• We do not include third-party SDKs that profile users for advertising.

End of policy. — LiftMates Team