PRIVACY POLICY

1. Our Core Privacy Philosophy

AlphaLift ("we", "our", or "the Platform") is engineered around a strict offline-first and user-ownership model. We believe your workout telemetry, strength progression, and physical health data belong solely to you. We do not sell, monetize, or broker your personal data to third parties, advertising networks, or data brokers.

2. Information We Collect

We collect minimal information necessary to deliver offline workout tracking and optional multi-device cloud synchronization:

• Local Workout Telemetry: Logged exercises, set weights, repetition counts, RPE, rest intervals, and routine configurations. This data is stored directly on your physical device in SQLite.
• Account Credentials (Optional): If you create a Cloud Sync account, we store your email address, username, and a cryptographically salted password hash (via Argon2).
• OAuth Identity (Apple / Google): If you authenticate via Sign in with Apple or Google Sign-In, we receive an anonymized unique user identifier and verified email address.
• In-App Purchase Receipts: For subscribers, transaction receipts are processed securely by Apple App Store (StoreKit) or Google Play Billing. AlphaLift never stores or receives your credit card or financial account numbers.

3. How Your Information is Used

We use your data strictly to:

• Calculate real-time 1RM progression formulas (Brzycki), volume load totals, and anatomical recovery heatmaps.
• Synchronize your workout routines and history across multiple authorized devices.
• Provide AI-generated routine recommendations based on your selected equipment and experience level.

4. Data Ownership & Export (GDPR / CCPA)

Under GDPR, CCPA, and global data privacy standards, you maintain full control over your information:

• Full Data Export: You can export your entire workout history in open JSON format at any time directly from the Settings menu.
• Permanent Deletion: You can delete your cloud account and all synchronized workout data permanently via the mobile app or by contacting our data protection officer.

5. Third-Party Analytics & Security

AlphaLift employs industry-standard TLS 1.3 encryption for all data in transit to our cloud servers. We do not use third-party behavioral ad trackers.

6. Contact Us

If you have questions regarding this Privacy Policy or data requests, please email us at support@getalphalift.com.