Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Profile Information: Age, body weight, gender (optional), training experience level, sleep hours, and training goals. This information is used to personalize your recovery recommendations.
• Workout Data: Exercises performed, sets, reps, weight, RPE (rate of perceived exertion), cardio logs, routines, and workout history.
• Calibration Data: Benchmark lifts, weekly trained muscle groups, and training change information used to calibrate recovery algorithms.
• Purchase Information: When you subscribe to smolLifts Pro, purchase transactions are processed by Apple and managed through RevenueCat (see Section 3).

1.2 Information Collected Automatically

• Analytics Data: We collect app usage data such as feature interactions, navigation patterns, and session information through Firebase Analytics. This data is associated with a randomly generated device identifier, not your personal identity.
• Crash Reports: If the App crashes or encounters an error, Firebase Crashlytics automatically collects diagnostic information including device type, OS version, stack traces, and error logs to help us improve app stability.
• Device Identifiers: Randomly generated identifiers used by Firebase and RevenueCat for analytics attribution and purchase management. These are not linked to your name, email, or Apple ID.
• Pseudonymized Workout Data: We automatically collect de-identified workout data for research and algorithm improvement purposes. This data is associated with a randomly generated research identifier that is not linked to your Apple ID, name, or any personally identifiable information. See Section 5 for full details.

1.3 Information We Do NOT Collect

• We do not require account creation, email registration, or passwords.
• We do not collect your name, email address, phone number, or physical address.
• We do not access your contacts, calendar, photos, camera, microphone, or location.
• We do not integrate with Apple HealthKit. (This may change in the future, and this policy will be updated accordingly.)

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App — store your workouts, routines, and exercise data.
• Personalize your experience — calculate recovery scores and training load based on your profile and workout history.
• Improve the App — analyze usage patterns and crash reports to fix bugs, improve performance, and develop new features.
• Process purchases — manage your smolLifts Pro subscription status.
• Research and algorithm improvement — use pseudonymized, de-identified workout data to improve our training and recovery algorithms, conduct fitness-related research, and publish general fitness insights. See Section 5 for details.

3. Third-Party Services

We use the following third-party services that may collect information as described in their respective privacy policies:

We do not sell your personal information to any third party. We do not use advertising networks, behavioral tracking, or ad-targeting services.

4. Data Storage and Sync

4.1 Local Storage

All workout data, routines, exercises, and profile information are stored locally on your device using Apple's SwiftData framework.

4.2 iCloud Sync

If you have iCloud enabled on your device, your data may automatically sync to your private iCloud account via Apple's CloudKit service. This allows your data to be available across your Apple devices signed into the same iCloud account. Apple manages the security and encryption of iCloud data. Switching iCloud accounts on your device will clear locally synced data.

You can disable iCloud sync for smolLifts through your device's iCloud settings.

4.3 Data Security

We implement reasonable technical safeguards to protect your information. All data transmitted to third-party services uses encrypted connections (HTTPS/TLS). Local data is protected by your device's built-in security features (passcode, Face ID, Touch ID). Research data transmitted to CloudKit is encrypted in transit via Apple's standard TLS encryption.

5. Pseudonymized Data Collection and Research

5.1 What We Collect

When you complete a workout, we automatically collect a pseudonymized copy of your workout data for the purpose of improving our training and recovery algorithms. This includes:

• Workout structure: Number of exercises, sets, reps, weight, RPE, rest intervals, and workout duration.
• Exercise information: For preset exercises, the exercise name. For custom exercises you create, only the muscle group, equipment type, and movement category are recorded — custom exercise names are never collected as they may contain personal information.
• Recovery data: Recovery scores and training load metrics associated with the workout.
• Bucketed demographics: Approximate age range (e.g., 20-24), weight range, gender, and experience level — never exact values.
• Time context: Day of the week and approximate time of day (3-hour window, e.g., "6pm-9pm"). Exact dates are replaced with relative day offsets from an arbitrary reference point.
• Edit tracking: If you edit a completed workout, we collect the updated version along with the number of edits made, to help us understand data quality patterns.
• Import source: If a workout was imported from another app (e.g., Hevy, Strong), this is noted so we can account for differences in data formats.

5.2 How We Pseudonymize Your Data

Each installation of smolLifts generates a random research identifier (UUID) that is:

• Not linked to your Apple ID, iCloud account, name, email, or any personal identifier.
• Not reversible — we cannot determine who you are from your research identifier.
• Persistent only on your device — if you delete and reinstall the App, a new identifier is generated.

Exact dates are converted to relative day offsets. Demographic data is grouped into broad ranges. Custom exercise names are replaced with generic labels. The pseudonymized data is stored temporarily in Apple's CloudKit public database for periodic retrieval and analysis, after which it is purged.

5.3 How We Use This Data

We use pseudonymized workout data to:

• Improve the accuracy of our recovery and training load algorithms.
• Conduct internal fitness-related research.
• Publish aggregated fitness insights and trends (never in a way that could identify an individual user).
• Identify common data quality issues to improve the user experience.

5.4 What We Do NOT Do With This Data

• We do not sell pseudonymized data to third parties.
• We do not share individual-level data with any third party.
• We do not use this data for advertising, marketing, or user profiling.
• We do not attempt to re-identify or de-anonymize research data.

5.5 Data Retention

Pseudonymized research records are stored temporarily in Apple's CloudKit public database. Records are periodically retrieved for analysis and then purged from the public database. Aggregated statistical results derived from the data may be retained indefinitely, but these cannot be traced back to any individual.

6. Data Export and Deletion

6.1 Data Export

You can export your data at any time through the App's Settings. Export formats include:

• Full JSON backup (all data)
• Workout history CSV
• Exercise list CSV
• Recovery data

6.2 Data Deletion

You can delete all local data through the App's Settings. If iCloud sync is enabled, deletion will propagate to your iCloud account.

Pseudonymized research data that has already been submitted cannot be deleted because it is not linked to your identity — we have no way to determine which records belong to you. Future data collection stops when local data is deleted.

To request complete deletion of data held by our third-party services (Firebase analytics data, RevenueCat purchase records), contact us at support@titanlabstech.net. We will process deletion requests within 30 days.

6.3 Data Portability

You can import workout data from other fitness apps (Hevy, Strong) and export your smolLifts data in standard formats (JSON, CSV) at any time.

7. Children's Privacy

smolLifts is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@titanlabstech.net and we will promptly delete such information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the "Last Updated" date at the top of this document. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.

9. Your Rights

You have the right to:

• Access your data through the App's export features.
• Delete your local data through the App's Settings or by contacting us.
• Opt out of iCloud sync through your device settings.
• Request information about what data we hold about you.

Note: Because pseudonymized research data is not linked to your identity, we cannot identify, access, or delete specific research records associated with you. If you delete and reinstall the App, a new research identifier is generated and no future data will be linked to previous submissions.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories of personal information we collect, the purposes for collection, and whether we sell or share personal information.
• Right to Delete: You may request deletion of personal information we hold about you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. The pseudonymized workout data we collect for research purposes does not constitute a "sale" under the CCPA, as it cannot be used to identify you and is used solely for internal research and product improvement.

To exercise your CCPA rights, contact us at support@titanlabstech.net.

11. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:

TitanLabs LLC
Email: support@titanlabstech.net

12. Governing Law

This Privacy Policy is governed by the laws of the State of Utah, United States, without regard to its conflict of law provisions.