Legal
Privacy Policy
1. Who we are
Evolift is a workout and nutrition tracking app for iPhone, together with the website evolift.fit (the “Service”). The Service is operated by the Evolift developer named as the seller on the App Store listing (“we”, “us”). We are the controller of the personal data described in this policy.
Contact for any privacy question or request: support@evolift.fit.
2. Data we process
2.1 Using Evolift without an account
Your workouts, exercise history, records, notes, nutrition goals, food diary, settings and photos you add to your own exercises are stored only on your device. We do not receive this data. It is deleted when you delete the app.
2.2 If you create an account
| Data | Examples |
|---|---|
| Account data | Email address, account ID, sign-in timestamps |
| Fitness data | Workouts, exercises, sets, weights, repetitions, records, notes |
| Health and body data | Height, weight, age, sex, activity level, nutrition goals, food diary and calories |
| Photos | Photos you choose to attach to your own exercises |
| App settings | Language, theme, rest timer settings, recently scanned products |
Health and body data is a special category of personal data. We store it in the cloud only if you create an account, which you do with your explicit consent.
2.3 Product scanner
When you scan a barcode or search for a product, the app sends the barcode or search text directly to Open Food Facts, an independent open database, to load product information. No account data is sent with it. Open Food Facts handles these requests under its own privacy policy.
2.4 AI food recognition (optional, when available)
If you choose to use AI food recognition, the photo of your meal is sent through our server to our AI provider (Anthropic) to estimate the dish and its nutrition. We do not store the photo; only the result you save to your diary is kept. This feature is optional and is only used when you start it.
2.5 Camera and photo library
The camera is used to scan barcodes and take photos of your exercises; the photo library is used to choose a picture or read a barcode from a photo. Camera images are processed on your device and are not sent anywhere unless described above.
2.6 Support emails
If you write to us, we receive your email address and the content of your message, including any attachments.
2.7 What we do not do
- No advertising and no advertising identifiers.
- No third-party analytics or tracking SDKs, and no tracking across other apps or websites.
- We never sell or rent personal data.
The website evolift.fit does not use cookies. It stores only your language choice in your browser.
3. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Creating your account and signing you in with a one-time code | Performance of a contract (Art. 6(1)(b)) |
| Storing and syncing your fitness data and photos | Performance of a contract (Art. 6(1)(b)) |
| Storing health and body data in the cloud | Your explicit consent (Art. 9(2)(a)), which you can withdraw at any time by deleting your account |
| AI food recognition | Your consent (Art. 6(1)(a) and 9(2)(a)), given when you use the feature |
| Answering support requests | Legitimate interest in helping users (Art. 6(1)(f)) |
| Keeping the Service secure and preventing abuse | Legitimate interest (Art. 6(1)(f)) |
4. Service providers
We use these providers to run the Service. They process data only on our instructions.
| Provider | What for | Location |
|---|---|---|
| Supabase | Account sign-in, database and photo storage | EU (Frankfurt, Germany) |
| Brevo | Sending sign-in codes by email | EU |
| Cloudflare | Website hosting and email forwarding for evolift.fit | Global network |
| Google (Gmail) | Receiving and answering support emails | Global |
| Anthropic | AI food recognition, only if you use it | United States |
| Apple | App distribution through the App Store and TestFlight | Global |
Apple may collect data under its own privacy policy when you download apps or join TestFlight (for example, crash reports and feedback you choose to share as a beta tester).
5. International transfers
Your app data is stored in the European Union. Where a provider processes data outside the EU/EEA (for example in the United States), the transfer is protected by the European Commission’s Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.
6. How long we keep data
- Account and app data: until you delete your account. Deletion in the app removes your account, cloud data and photos immediately from our database and storage; copies may remain in our providers’ technical logs or backups for a short period before being overwritten.
- Data on your device: until you delete it or the app.
- Support emails: up to 24 months after the conversation ends, unless you ask us to delete them sooner.
7. Your rights
Depending on where you live, you have the right to access, correct, delete and export your data, to restrict or object to processing, and to withdraw consent at any time without affecting earlier processing. You can delete your account directly in the app (Profile → Account → Delete account). For any other request, email support@evolift.fit; we reply within one month.
You also have the right to lodge a complaint with your local data protection authority.
8. Security
- All connections use encryption (HTTPS/TLS).
- Your sign-in token is stored in the iOS Keychain.
- Database rules make sure each user can only read and change their own data and photos.
- We do not keep passwords: you sign in with a one-time email code.
9. Children
Evolift is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has created an account, contact us and we will delete it.
10. Changes and contact
If we change this policy, we will update the effective date above and, for significant changes, inform you in the app. Questions: support@evolift.fit.
Evolift calculations are guidelines and not medical advice.