Privacy
Privacy Policy
How LiftRank handles personal data during Trusted Internal Alpha.
Controller and contact
Effective and last updated: August 18, 2026.
Controller: Daniel Kuna, an individual operating LiftRank in the Slovak Republic.
Privacy questions and access, correction, export/portability or deletion requests can be sent to emilnawowko@gmail.com. Never include a password, recovery code, session token or auth token in a request.
Data LiftRank processes
Most fitness fields are optional, but the account needs an email and authentication information.
Account and authentication
Email address, Supabase Auth user ID, account timestamps, confirmation and password-recovery state, and functional session information. LiftRank never stores your password in its application database.
Profile and fitness goals
Username, display name, optional age, gender, height, bodyweight, avatar URL, training goal, target weight/date/pace, activity level and training days.
Training and progress
Training plans, workout sessions, exercises, sets, weight, reps, RPE, dates and optional notes. LiftRank derives estimated 1RM, ranks, records, achievements and analytics from these entries.
Body, nutrition and check-ins
Bodyweight logs, nutrition targets, calories and macros, custom/favorite foods, meals, saved meals, weekly summaries, mood, energy, sleep quality and optional notes.
Feedback, access and rewards
Alpha feedback content, page/area, device type, severity, reproduction details and user agent. The app also stores Premium entitlements, badges, and restricted reward/admin audit records where relevant.
Purposes and legal bases
LiftRank limits processing to operating and improving the service.
- Provide the account, training, nutrition, progress, feedback and reward features you request.
- Calculate deterministic fitness metrics such as estimated 1RM, ranks, records, nutrition targets and progress summaries.
- Authenticate users, protect private records, prevent abuse and keep the alpha service reliable.
- Investigate tester feedback, reproduce bugs and improve confusing flows.
- Meet legal obligations and establish, exercise or defend legal claims where required.
The expected Article 6 bases are performance of the service requested by you for core account/tracking features, legitimate interests for security, abuse prevention, feedback and service improvement, and legal obligations where applicable. A qualified legal review must confirm the final basis and whether any optional fitness, bodyweight, nutrition or check-in data requires an additional special-category data basis before wider release.
Public leaderboard visibility
The leaderboard is intentionally public and can be viewed without an account.
A leaderboard entry can show your username/display name, current profile bodyweight, exercise, weight, reps, sets, performance date, estimated 1RM, volume and bodyweight ratio. Providing bodyweight can therefore make that current value visible with public lift entries.
Email, password/auth metadata, private notes, full bodyweight history, nutrition, meals, check-ins, feedback, admin roles and reward details are not included in the public leaderboard projection. A leaderboard visibility toggle is not implemented during alpha.
Service providers and recipients
LiftRank does not sell personal data and does not include advertising trackers or behavioral advertising in the current application.
Supabase
Authentication, account/session infrastructure and the application database.
Vercel
Application hosting, server execution, delivery and operational/security logs.
USDA FoodData Central
Receives food search terms or FoodData Central IDs through LiftRank's server. LiftRank does not intentionally send your account ID, email or fitness records to USDA.
Production regions, subprocessors, vendor retention, DPAs and any international transfer safeguards require confirmation in the Supabase and Vercel production dashboards and contracts. LiftRank does not claim EU-only processing without that confirmation.
Retention and deletion
LiftRank has no self-service account deletion or export workflow during alpha.
Account and tracking data is generally kept while the account remains active or until a verified request is processed. No arbitrary 30-day deletion promise is made. Vendor backups, security logs and operational records follow vendor or legally required retention criteria that the operator must confirm.
To request access, correction, portability or deletion, email the privacy contact from the address linked to your LiftRank account. The operator may ask you to verify account access or respond from that email, but will never ask for your password. Deletion is handled manually during alpha and may require a review of feedback and restricted reward/security audit records. Data may be retained only where required by law or needed to establish or defend claims.
Cookies, device storage and PWA
Current browser storage is functional, not advertising storage.
Supabase-compatible cookies/browser storage maintain authentication sessions. Local storage keeps the selected theme, local training preferences and user-scoped drafts for forms such as profile, plans, Gym Mode, nutrition, foods, meals, check-ins and feedback. Clearing browser data can remove these preferences and unsaved drafts.
The installable PWA caches only the offline page and LiftRank icons. It does not intentionally cache authenticated pages or account data for offline use. LiftRank currently has no advertising cookies, Google Analytics, Meta Pixel or comparable behavioral tracker, so no marketing-cookie banner is used.
Your rights
Rights depend on applicable law and are not always absolute.
- You may access the personal data held about you.
- You may correct inaccurate or incomplete data.
- You may request erasure or restriction where the law provides it.
- You may receive portable data where the right applies.
- You may object to processing based on legitimate interests.
- You may withdraw consent where a specific activity actually relies on consent.
- You may complain to the competent data protection authority.
You may lodge a complaint with the competent supervisory authority in the country where you live, work or believe an infringement occurred. The controller's supervisory authority in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic.
Calculations, safety and policy updates
LiftRank is a fitness tracker and gamification product, not a medical service.
Ranks, achievements, nutrition targets and coach-style insights are deterministic calculations from entered data. They are informational and do not make decisions with legal or similarly significant effects. LiftRank has no generative AI coach in the current alpha.
LiftRank is intended for users aged 16 and older. Users under 16 are not supported, and LiftRank does not provide an age-verification or parental-consent system in the current alpha.
This policy may change as the alpha develops. Material changes will be shown by updating the date and, where appropriate, notifying testers before the new processing starts.