PRIVACY POLICY

WHAT WE COLLECT

When you use 5×5 Lifts, we collect and store the following data:

• Email address — used for account creation and authentication
• Workout data — exercises, sets, reps, weights, and workout timestamps you log in the app
• App preferences — your selected program, unit system, and settings
• Purchase receipts — processed securely through Apple's App Store and RevenueCat to validate your Pro purchase

HOW WE STORE IT

Your data is stored securely in Supabase (hosted on AWS in the EU). Data is encrypted in transit (TLS) and at rest. Row-level security ensures you can only access your own data.

WHAT WE DON'T DO

• We do not sell your data to third parties. Ever.
• We do not share your workout data with advertisers.
• We do not use tracking pixels or third-party analytics SDKs.
• We do not collect location data, contacts, or health data beyond what you explicitly log.

THIRD-PARTY SERVICES

• Supabase — database and authentication
• RevenueCat — in-app purchase management (receives anonymized purchase data)
• Apple App Store — payment processing (governed by Apple's privacy policy)

YOUR RIGHTS (GDPR)

You have the right to:

• Access your data — export your workout history from the app (Pro feature)
• Delete your account and all associated data — email hello@5x5lifts.app and we'll process your request within 30 days
• Correct inaccurate data
• Port your data — available via CSV/JSON export

DATA RETENTION

Your workout data is retained as long as your account is active. If you delete your account, all data is permanently removed within 30 days.

CHILDREN'S PRIVACY

5×5 Lifts is not directed at children under 16. We do not knowingly collect data from minors. If you believe a child has provided us with personal data, contact us and we will delete it.

CONTACT

Questions about this policy? Email hello@5x5lifts.app