Privacy Policy

XPLIFT is published by Crestline Apps LLC ("XPLIFT," "we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data when you use the XPLIFT mobile application (the "App"). By using XPLIFT, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide Directly

• Account information: email address and display name.
• Fitness profile: height, weight, fitness goals, and experience level.
• Workout data: exercises, sets, reps, weights, and workout history.
• Nutrition data: meals logged, macros, and hydration.
• Body measurements and progress photos.
• User-generated content: posts, messages, achievements, and social interactions.
• In-app preferences and settings.

Information Collected Automatically

• Device information: device model and operating system version.
• Usage analytics: screens visited and features used.
• Diagnostic data: crash reports and performance data.
• Identifiers: used for app functionality and, with your permission, for tracking (see Section 6).

Information We Do NOT Collect

We do not collect or store your payment card details. All purchases are processed by Apple (App Store) or Google (Google Play); we receive only confirmation of your subscription status.

2. How We Use Your Information

We use your information to:

• Personalize your workouts, nutrition plans, and AI coaching.
• Track your progress, XP, achievements, and rankings.
• Enable social features such as friends, guilds, and leaderboards.
• Process and manage your subscription.
• Improve app performance, fix bugs, and develop new features.
• Send you relevant notifications (only with your permission).
• Generate anonymized, aggregated insights.

We never sell your personal data to third parties.

3. AI Coaching Features

XPLIFT offers AI-powered coaching and nutrition guidance. When you use these features, the relevant prompts and fitness context you provide are sent to our third-party AI providers (OpenAI and/or Anthropic) solely to generate a response. This data is processed to provide the feature and is not used to train third-party models where such providers offer that protection. AI-generated content is informational only and is not medical or professional advice.

4. How We Store and Secure Your Data

Your data is stored using Supabase (hosted on Amazon Web Services) with:

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Row-level security policies
• Automated backups

Progress photos are stored in encrypted cloud storage and are accessible only to you unless you explicitly choose to share them.

5. Third-Party Services

We use the following trusted third-party services, each of which processes only the minimum data required for its function:

Each provider maintains its own privacy policy governing its handling of data.

6. Tracking and Your Choices (App Tracking Transparency)

In accordance with Apple's App Tracking Transparency framework, we will ask for your permission before tracking your activity across other companies' apps or websites. You can change this preference at any time in your device's Settings → Privacy & Security → Tracking. Declining does not limit your access to the App's core features.

7. Your Rights

You have the right to:

• Access all of your stored data (Settings → Export Data).
• Correct inaccurate information.
• Delete your account and all associated data.
• Opt out of analytics tracking.
• Control your notification preferences.
• Request data portability.

To exercise these rights, use the in-app Settings or contact us at contact@crestlineapps.com.

Depending on your location, you may have additional rights under the GDPR (European Economic Area / UK) or the CCPA/CPRA (California), including the right to know, the right to deletion, and the right to non-discrimination for exercising your rights.

8. Data Retention

• Active accounts: data retained while your account is active.
• Deleted accounts: data removed within 30 days.
• Analytics: anonymized after 12 months.
• Crash reports: retained for 90 days.
• Backups: purged within 60 days of account deletion.

9. Children's Privacy

XPLIFT is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at contact@crestlineapps.com and we will delete it.

10. International Users

Your information may be processed and stored in the United States or other countries where our service providers operate. By using XPLIFT, you consent to the transfer of your information to these locations, which may have data protection laws different from those in your country.

11. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via in-app notification. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy questions or concerns:

• Email: contact@crestlineapps.com
• In-app: Settings → Help & Support