Privacy Policy

The Lifters Ledger ("the App") is a strength and conditioning tracker designed with a privacy-first, offline-first approach. This policy explains what data the App collects, how it is stored, and the choices you have.

The App stores the following information in your device's local browser storage (localStorage):

• Your estimated 1-Rep Maxes and bodyweight
• Workout session logs and history
• Personal records (PRs) and progress data
• Selected training program and split preferences
• Custom programs you create with the AI builder
• Nutrition logs (meals, calories, protein, hydration)
• Body measurements and body composition estimates
• Gym inventory (plates, dumbbells, kettlebells you own)
• Gamification data (streaks, milestones, achievements)
• App settings (estimation method, units, sound, and preferences)

This data never leaves your device unless you explicitly export it as a backup file or enable optional cloud sync.

The App offers an optional account system powered by the Base44 platform. If you choose to create an account, your email address and authentication token are transmitted to the Base44 backend to verify your identity. No workout data is transmitted during authentication — only your email and an encrypted session token.

You may use the App in Guest Mode without creating an account. Guest Mode stores all data locally and transmits nothing.

If you create an account and enable cloud sync, the App uploads a backup of your local data (maxes, history, PRs, settings, and custom programs) to the Base44 platform so you can restore it on another device. This feature is entirely opt-in and disabled by default. The App does not transmit any data unless you explicitly push a backup.

The App can optionally integrate with Apple Health (iOS) and Health Connect (Android) to read your body weight and write completed workout sessions back to your health records. This integration is entirely opt-in and disabled by default. When enabled, the App requests read access to body weight data and write access to workout data. No other health data (heart rate, sleep, steps, etc.) is read or written. Health data never leaves your device through the App — it is exchanged directly between the App and the platform's health store (Apple HealthKit / Android Health Connect), both of which are under your operating system's privacy controls.

If you connect your Google Calendar account, the App can push completed workout sessions and planned weekly schedules as calendar events. This integration uses Google's OAuth 2.0 authorization — the App only requests permission to create and manage calendar events, and never receives your Google password. You can revoke access at any time from the App's Settings or your Google Account security page. Calendar event data is stored on Google's servers under Google's privacy policy.

The Nutrition Tracker logs meals, calories, protein, carbohydrates, fat, and hydration. The Measurements tool records body circumference measurements (chest, waist, arms, thighs, etc.) and estimates body fat percentage and FFMI. All nutrition and measurement data is stored locally on your device. The TDEE and protein target calculations are informational estimates based on published formulas (Mifflin-St Jeor, etc.) and are not medical or dietary advice.

On Android and iOS, the App offers home-screen widgets that display today's workout, nutrition summary, and workout streak. Widgets read data from the App's local storage on your device — no data is transmitted to any server. Widget content updates periodically based on your latest logged activity.

When a workout timer is active, the App displays a countdown in the system notification bar (Android) or Dynamic Island / Live Activity (iOS) and may play timer sounds (ticks, chimes, verbal countdowns) through a native audio engine. On Android, this uses a foreground service that keeps the timer accurate and audio playing when the app is backgrounded or the screen is off. On iOS, this uses Live Activities and background audio. No data is transmitted — these are purely local device notifications and audio playback.

On first launch, the App checks its configuration with the Base44 platform to determine availability and settings. This request transmits your app identifier and, if logged in, your session token. No workout, max, or PR data is sent during this check. For guest users, the configuration is cached on your device after the first launch, so subsequent launches work fully offline without any network request.

• We do not collect location data
• We do not use advertising or analytics SDKs that track you
• We do not sell or share your data with third parties
• We do not access your contacts, camera, or microphone
• We do not use cookies for tracking purposes

You can export all your local data (maxes, history, PRs, settings, and custom programs) to a JSON file at any time via the Backup & Restore section in the Maxes tab. This file is stored wherever your device saves downloads. You can restore from a backup file to replace your current data.

If you have created an account, you can permanently delete it at any time from the Maxes tab under "Danger Zone." Account deletion removes your authentication record from the Base44 backend. Local data on your device is not affected by account deletion and can be cleared by uninstalling the App or clearing browser storage.

The App offers an optional one-time Pro upgrade. On Android, purchases are processed by Google Play Billing using your Google account's payment method; Google's privacy practices apply to that transaction, and the App never sees your card details. On other platforms, purchases are processed by Base44 Payments. The App stores only a local entitlement flag on your device to remember that Pro is unlocked — no payment card data is collected, stored, or transmitted by the App.

The App interacts with the following third-party services:

• Base44 Platform — provides the app hosting, optional authentication backend, cloud sync storage, and (on non-Android platforms) payment processing for the Pro upgrade.
• Google Play Billing — processes Pro upgrade purchases on Android. The App queries your owned purchases to verify and restore entitlement; payment information is handled by Google and is not collected by the App.
• Google Calendar — if you enable calendar sync, the App creates and manages events on your Google Calendar via OAuth 2.0. Calendar data is stored on Google's servers under Google's privacy policy.
• Apple Health / Health Connect — if you enable health data integration, the App reads body weight and writes workout data to your device's health store. Health data is managed by your operating system and never transmitted through the App.

The App is intended for use by adults and adolescents engaging in strength training. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can delete it.

Local data is retained on your device until you delete it (via backup restore, clearing browser storage, or uninstalling the App). If you have an account, your email and auth record are retained until you delete your account.

You have the right to:

• Access your data — export a full backup at any time
• Delete your data — clear local storage or delete your account
• Opt out of cloud sync — cloud backup is always opt-in
• Use the App without an account — Guest Mode requires no sign-up

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.

If you have questions about this Privacy Policy or your data, please contact Base44 support.