Crew Lift: Gym Tracker Privacy Policy

Effective August 19, 2026

Crew Lift: Gym Tracker is a workout tracker for individuals and small training crews. This policy explains the information the app processes, why it is used, how long it is retained, and the controls available to you.

Information we handle

We process the name you provide, your Sign in with Apple identifier and optional relay email, crew membership and roles, program revisions, workout and recovery records, exercises, sets, repetitions, loads, duration, notes, content-safety reports and blocks, device installation and push-token records, integrity-verification results, synchronization metadata, and security events. We do not use this information for advertising or tracking.

If you separately authorize Apple Health, the app can read or write only the workout, body-mass, and body-fat categories shown in Apple’s permission sheet. You choose a 30-, 90-, or 365-day workout import range. The app does not manufacture energy or other health samples.

If a crew organizer subscribes, we process App Store-signed transaction identifiers, product, purchase and expiration dates, billing state, App Store environment, and an app-account token used to assign the subscription to the correct organizer and crew. Apple handles payment details; Crew Lift: Gym Tracker does not receive card or bank information.

How information is used

We use information to authenticate you, save and restore workouts across your devices, operate live crew rooms, advance completion-driven training cycles, calculate your progress, display crew information you explicitly share, deliver notifications you enable, prevent abuse, diagnose service failures, and respond to support or privacy requests.

Health and sharing controls

Body mass and body fat are private by default. You may separately share only the latest value with your active crew, and you can return either category to private at any time. A privacy-reducing change remains pending in the app until the server confirms it. Health permissions and crew-sharing settings are independent.

Synced body metrics are encrypted with a per-user data key protected by a rotating server key. Workout notes, body metrics, HealthKit identifiers, tokens, and notification contents are excluded from telemetry, diagnostics, Live Activities, and public comparisons. Crew workout details may be visible to active members as part of the crew feature; private notes are not.

Service providers and disclosure

Cloudflare processes service data for hosting, databases, real-time coordination, queues, security, and privacy-safe operational telemetry. Apple processes Sign in with Apple, App Attest or DeviceCheck, push notifications, App Store distribution and subscriptions, crash and performance diagnostics, and HealthKit data under your Apple settings. We do not sell personal information, use third-party advertising SDKs, or share data with data brokers. We may disclose information when legally required or needed to protect users and the service.

Retention, export, and deletion

Account data is retained while your account is active. Synchronization events are retained for up to 90 days, idempotency records for 30 days, revoked refresh-session records for 90 days, and transient live-room events for 7 days. Short-term encrypted infrastructure recovery copies age out under Cloudflare’s configured recovery window and are not available through the app. An operator-requested encrypted snapshot is retained only for the documented recovery purpose and deleted when that purpose ends.

You can export your data or delete your account in Settings. Deletion removes private and solo data, body metrics and encryption keys, recovery records, identities, sessions, device registrations, share policies, and sync history. Legitimate completed crew history may be retained for other members, but your actor identifier and notes are cleared and the history is labeled as belonging to a deleted user. Apple credential revocation is queued with Apple. Purchase records may be retained as needed for subscription integrity, fraud prevention, tax, accounting, and legal obligations. Deletion is idempotent. Health samples and App Store subscriptions must be managed separately with Apple.

Security and children

We use encrypted transport, short-lived access tokens, rotating refresh-token families stored as hashes, device integrity verification, encrypted sensitive values, per-account local stores, least-privilege authorization, and replay protection. No system can be guaranteed perfectly secure. Crew Lift: Gym Tracker is not directed to children under 13.

Changes and contact

Material changes will be reflected here with a revised effective date. Privacy, deletion, security, or incident questions can be sent to rxv2dev@gmail.com. Support information is available on the CrewLift support page.