Privacy Policy

Last updated: April 2026

Who We Are

LoopLift is a cycle-aware fitness tracking app. References to "we", "us", or "our" refer to LoopLift. You can contact us at loopliftadmin@gmail.com.

What Data We Collect

We collect only the information needed to provide the app:

Account data: your email address and encrypted password, stored securely via Supabase Auth.
Profile data: cycle type preferences you enter during onboarding (regular/irregular/hormonal/hormonal with regular bleeds/PCOS). This is used to personalise your experience.
Cycle and health data: period dates, energy levels, and symptoms you voluntarily log in the app.
Workout data: exercises, sets, reps, and weights you log.
Device data: push notification tokens (only if you enable notifications), and basic crash diagnostics.

How We Use Your Data

We use your data solely to:

Provide cycle-aware workout insights personalised to you
Store your workout history and cycle logs
Send optional push notifications (with your permission)
Improve app stability via anonymised crash reports

We do not sell your personal or health data to any third party. We do not use your data for advertising.

Data Storage & Security

Your data is stored securely using Supabase, hosted on AWS (EU West region). All data is encrypted in transit (TLS) and at rest. Row-level security policies ensure that only you can access your own data.

We retain your data for as long as your account is active. You may delete your account and all associated data at any time by contacting loopliftadmin@gmail.com.

Third-Party Services

We use the following third-party services:

Supabase — database and authentication (supabase.com/privacy)
RevenueCat — subscription billing (revenuecat.com/privacy) — billing provider only, no health data shared
Expo — app delivery and push notifications (expo.dev/privacy)
Sentry — anonymised crash reporting (sentry.io/privacy) — no personal or health data included

Your Rights

Under UK GDPR and applicable data protection law, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing of your data
Data portability

To exercise any of these rights, contact us at loopliftadmin@gmail.com.

Children

LoopLift is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app. Continued use of the app after changes constitutes acceptance of the updated policy.