Privacy

What we store

• Account: your email address and password (stored only as a secure hash by our authentication provider).
• Profile: an optional display name and app preferences such as default rest time.
• Training data: the splits, workouts, exercises, sets, notes and dates you enter.
• Membership: whether you are a founding member, on a trial or subscribed.
• On your device: a workout in progress is kept in your browser’s storage so a set is never lost to a bad connection, plus cookies that keep you signed in and remember your time zone. Signing out removes the stored workout data from that device.

Why

Only to provide NotchLift to you: to sign you in, save and sync your workouts, and show your history and progress. Training logs can be considered health-related information; you choose what to record, and it is used for nothing else.

Who stores it

• Supabase hosts the database and sign-in, in the EU (Ireland).
• Vercel hosts the app; requests are handled in the EU (Dublin).

These providers process data on our behalf and do not use it for their own purposes.

Sharing

Your data is private to your account. If you create a share link for a split, the link shows only that split’s structure and targets, never your weights, reps or history. You can revoke a link at any time.

Your choices and rights

• Download your data at any time: Profile → Your data → Export (spreadsheet or full JSON).
• Correct it by editing workouts, splits and your profile in the app.
• Delete your account: Profile → Your data → Delete account. Everything is removed from the live database immediately. Copies in provider backups, if any, expire on their normal schedule.
• You can also contact the person who invited you to NotchLift with any privacy question. In the UK you have the right to complain to the Information Commissioner’s Office (ico.org.uk).

How long we keep it

For as long as you have an account. When you delete your account, your data is deleted with it.