Privacy Policy
Lyfe is a fitness and nutrition app that helps you track workouts, log meals, and understand how recovery affects your training. This policy explains what we collect, why we collect it, who we share it with, and the choices you have. We treat your health and fitness information as sensitive and handle it accordingly.
Introduction
This Privacy Policy applies to the Lyfe mobile application and related services (together, the "Service"). It explains the information used to provide Lyfe and the separate choices available for optional analytics, advertising measurement, AI features, health access and notifications. Creating an account or continuing to use Lyfe does not by itself give consent to optional processing.
Information We Collect
We collect information you provide directly, information generated as you use the app, and information from the integrations you choose to connect.
Account information
When you sign up, we collect your email address and authentication details. You can register with email and password, Sign in with Apple, or Google. If you use Sign in with Apple or Google, we receive a basic identifier and the email address associated with that login, subject to your provider settings. We also store profile details you add, such as name, body metrics (height, weight, age, sex), and training preferences.
Health and fitness data
The core of Lyfe is your training and nutrition record. We store the workouts you log (exercises, sets, reps, weights, personal records), your nutrition and calorie entries, achievements, streaks, and related body metrics. If you connect a platform health source, we also read recovery metrics described in the Health and Fitness Data section below.
Usage and analytics data
We collect information about how you interact with the app, such as screens viewed, features used, session activity, and diagnostic events. This includes crash reports and error logs that help us find and fix problems.
Device and technical data
We collect technical information such as device model, operating system version, app version, language, and identifiers used for analytics, attribution, and push notifications.
Purchase information
If you buy a subscription, the purchase is processed through the Apple App Store or Google Play. We do not receive or store your full payment card details. We do receive subscription status and transaction identifiers needed to unlock and manage your access to premium features.
How We Use Your Information
- To provide the Service: create and secure your account, sync your workouts and nutrition logs, and personalize features such as readiness and progress insights.
- To calculate fitness and recovery insights from the data you log and the health metrics you choose to share.
- To operate subscriptions and unlock premium features.
- With your analytics permission in native iOS version 3.0 build 8 and later, to improve the app through product analytics and to diagnose crashes and errors.
- To send you notifications you have enabled, such as reminders and updates.
- With your advertising-measurement permission and iOS tracking authorization in native iOS version 3.0 build 8 and later, to measure marketing and understand how new users discover the app.
- To respond to your requests, provide support, and meet legal obligations.
Health and Fitness Data
We treat your health and fitness information as sensitive personal data. This includes the workouts, body metrics, and nutrition you log, as well as recovery metrics read from platform health integrations.
With your explicit permission, Lyfe integrates with Apple HealthKit on iOS and Android Health Connect on Android to read health metrics such as sleep, heart rate, heart rate variability (HRV), and resting heart rate. We use these metrics to compute a readiness or recovery score that helps you decide how hard to train. You control this access through your device's HealthKit or Health Connect settings and can revoke it at any time.
We do not sell your health and fitness data, and we do not use it for advertising or to build advertising profiles. Health data read from Apple HealthKit and Android Health Connect is used only to provide in-app features and is never shared with third parties for marketing. We do not use HealthKit or Health Connect data for any purpose other than the health and fitness features you see in the app.
Third-Party Services and Processors
We work with a small set of trusted providers who process data on our behalf. Each is limited to the purpose listed below.
- Supabase:hosts our database, authentication, and storage; stores your account, profile, workouts, and nutrition data.
- RevenueCat:manages in-app subscriptions and entitlements.
- Apple App Store:processes in-app purchases and Sign in with Apple on iOS.
- Google Play:processes in-app purchases and billing on Android.
- PostHog:provides optional product analytics and error and exception tracking. Native iOS version 3.0 build 8 and later starts PostHog only after you enable app analytics, identifies a signed-in account using its Lyfe ID without sending its email, disables IP-derived location enrichment, and does not register push tokens, capture notification opens, display PostHog surveys or record screen replays. The project discards raw client IP addresses. Earlier versions may include approximate location derived from IP addresses.
- AppsFlyer:provides install attribution and advertising measurement. Native iOS version 3.0 build 8 and later starts AppsFlyer only after you enable advertising measurement and authorize tracking in the iOS prompt. It may receive device and Lyfe account identifiers, install/session events, registration, sign-in, onboarding-completion and subscription events, including product, plan, price and currency information. It may derive approximate location from the network IP address. It does not receive workout completion, workout details, nutrition records or Apple Health data from this version.
- TikTok:is the currently enabled advertising partner in AppsFlyer. When advertising measurement and iOS tracking are permitted, selected non-fitness conversion events and permitted identifiers may be shared through AppsFlyer to measure campaign results. The integration currently excludes event values and revenue from these postbacks; advanced data sharing and advanced matching are off. We do not send workout, nutrition or Apple Health data through advertising attribution.
- Expo and Firebase Cloud Messaging (Android) / Apple Push Notification service (iOS):deliver push notifications.
- Perplexity:provides the AI models behind the AI program builder and the in-app AI assistant, and the calorie estimates in versions of the app before 3.0.
- Anthropic:provides the AI model (Claude) behind the calorie estimates, including the web search it uses to check nutrition facts and reading the meal photos you choose to log.
- OpenAI:provides the backup AI model for the calorie estimates, used when Anthropic's is unavailable.
When you use Lyfe AI, we send each provider, through our Supabase Edge Functions, only what its feature needs. For programs, we send Perplexity your answers (goal, location, experience, equipment, schedule, session length and any limitations or injuries you type), your age, gender and activity level, and exercises you recently used. For calorie estimates, we send Anthropic the foods you log (including a restaurant name you add), any correction you type and the serving size, and, when you log a meal from a photo, that photo and any note you add. When Anthropic is unavailable, the same data goes to OpenAI instead. Versions of the app before 3.0 send the foods you log, your corrections and the serving size to Perplexity. The providers process this data only to return the program or the estimate. We do not use it for advertising, and we do not keep the meal photos you send. Anthropic and OpenAI do not use data sent through their APIs to train their models, and delete it within 30 days unless they need it longer to enforce their usage policies or to comply with the law. From version 3.0 the app asks for your permission before it first sends anything, and you can turn Lyfe AI off at any time under Settings. Please avoid including information you do not want processed by a third-party AI provider.
Data Sharing and Disclosure
We do not sell your personal information. We share data only as described in this policy: with the processors listed above to operate the Service, to comply with law or valid legal requests, to protect the rights, safety, and security of our users and the Service, and in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information and notify you of any change.
Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain certain records to meet legal, accounting, or security obligations. Backup copies are removed on our normal backup cycle.
Your Rights and Choices
In native iOS version 3.0 build 9 and later, app analytics and advertising measurement are separate, optional choices. App analytics is off until you turn on "Help improve Lyfe" during onboarding or in Settings. Advertising measurement is turned on only if you choose Allow in the iOS tracking prompt shown during onboarding (from build 9); otherwise it stays off. Choices are stored on the device across launches and sign-out. Open Settings > Privacy to change or withdraw either permission at any time; once either is on, a Privacy choices link is also available on the paywall, without a subscription. Turning a choice off stops that SDK's collection and future event delivery; events generated while it is off are not queued for later. An in-app choice never overrides an iOS tracking denial. In build 8, both choices are presented before onboarding and can be changed using Privacy choices on the sign-in, onboarding, paywall and Settings screens. These permissions are separate from Apple Health, notifications and Lyfe AI.
Earlier app versions do not provide these in-app analytics choices and may continue sending usage and attribution data. Update to native iOS version 3.0 build 8 or later to use the controls described above. Device tracking controls limit advertising tracking; they do not disable all product analytics in earlier versions. Withdrawal does not undo processing that occurred while permission was in place. Contact us to request access, deletion or restriction of previously collected personal data.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.
- Access and correction: you can view and update much of your profile and logged data directly in the app.
- Deletion: you can delete your account from within the app, which removes your associated data as described under Data Retention. You may also contact us to request deletion.
- Analytics and advertising measurement: in native iOS version 3.0 build 9 and later, use Settings > Privacy to enable or withdraw each permission; in build 8, use Privacy choices. You can also revoke tracking authorization through iOS Settings. Neither choice is required to use Lyfe or purchase a subscription.
- Health permissions: you can revoke Lyfe's access to Apple HealthKit or Android Health Connect at any time in your device settings.
- Notifications: you can disable push notifications in your device settings or within the app.
To exercise any right, contact us using the details below. We may need to verify your identity before acting on a request.
Children's Privacy
Lyfe is not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies). If you believe a child has provided us with personal information, please contact us and we will delete it.
Security
We use technical and organizational measures to protect your information, including encryption in transit, secure authentication, keychain-backed token storage on device, and access controls on our backend. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident.
International Data Transfers
We and our processors may store and process your information in countries other than the one in which you live, including the United States and the European Union. Where required, we put appropriate safeguards in place to protect your information when it is transferred across borders.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Where a change requires new permission, we will ask for it before the new processing begins.
Contact Us
If you have questions about this policy or your data, contact us at privacy@klayo.se.