Privacy Policy

Your Data Rights (GDPR)

You have full control over your personal data. Export or delete your data at any time.

Sign in to export or delete your data

Last updated: April 9, 2026

1. Introduction

HerLiftSync ("we", "our", "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. Data Controller

HerLiftSync is the data controller responsible for your personal data. You can contact us at: hello@herliftsync.co.uk

3. What Data We Collect

Account Information:

Name, email address, account creation date

Health & Fitness Data:

Workout logs (exercises, sets, reps, weight), menstrual cycle dates, energy levels, personal records, goals, notes

Usage Data:

App interactions, feature usage, device information, IP address

Payment Data:

Processed by Stripe. We store only subscription status and Stripe customer ID, never full card details

Communications:

Messages between coaches and clients, support enquiries

4. Legal Basis for Processing

We process your data based on:

  • Contract: To provide the Service you've signed up for
  • Consent: For optional features like coach data sharing
  • Legitimate Interest: To improve the Service and prevent fraud
  • Legal Obligation: To comply with tax and legal requirements

5. How We Use Your Data

  • Provide and personalise the Service
  • Generate cycle-based training recommendations
  • Enable coach-client features (with your permission)
  • Process payments and subscriptions
  • Send important service updates and notifications
  • Improve the Service through anonymised analytics
  • Comply with legal obligations

6. Data Sharing

We do not sell your data. We only share data with:

  • Your designated coach: Only data you've granted permission to share
  • Service providers: Stripe (payments), hosting providers (data storage)
  • Legal requirements: When required by law or to protect rights and safety

All third-party providers are GDPR-compliant and process data only as instructed.

7. Data Storage & Security

Your data is stored on secure servers within the UK/EU. We implement:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Regular security audits and updates
  • Access controls and authentication
  • Regular backups for data recovery

8. Your Rights (GDPR)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your data
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: For consent-based processing

To exercise these rights, use the buttons above or email hello@herliftsync.co.uk

9. Data Retention

We retain your data while your account is active and for 90 days after deletion (to allow recovery). After this period, all personal data is permanently deleted except where required by law (e.g., financial records for 7 years).

10. Cookies & Tracking

HerLiftSync uses a small number of cookies strictly necessary to operate the app. Here is a clear breakdown:

Essential Cookies

Used solely for authentication (keeping you logged in) and remembering your in-app preferences (e.g. weight unit, theme). These are required for the app to function and cannot be disabled.

Analytics Cookies (optional)

With your consent, we use anonymised analytics to understand how users interact with the app (e.g. which features are used most). This data is not linked to your identity and is used solely to improve the app.

Answers to Common Questions

  • Is data shared with third-party data brokers? No. We do not sell or share your data with any data brokers, advertisers, or marketing platforms.
  • Is data linked with third-party data for marketing or advertising? No. Your data is never linked to third-party data for marketing or advertising purposes. We do not run targeted advertising of any kind.
  • Are cookies used for tracking across apps or websites? No. Cookies in HerLiftSync are limited to authentication and optional anonymised in-app analytics. No cross-app or cross-site tracking occurs.

You can manage cookie preferences using the banner shown when you first use the app, or via your browser settings.

11. Children's Privacy

HerLiftSync is not intended for users under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

12. International Transfers

Your data is primarily stored in the UK/EU. If transferred outside these regions, we ensure adequate protection through approved mechanisms (e.g., Standard Contractual Clauses).

13. Changes to This Policy

We may update this policy to reflect changes in law or our practices. Material changes will be notified via email or in-app notification. Continued use after changes constitutes acceptance.

14. Complaints

If you're not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk

15. Contact Us

For privacy-related questions or to exercise your rights:
Email: hello@herliftsync.co.uk