Privacy policy
How ProLift: Build Your Best handles your data — what stays on your phone, what leaves it, and who sees it.
Last updated: 6 October 2026 · Controller: Rashif Kabir, trading as Physique Analytics, 27 Old Gloucester Street, London WC1N 3AX, United Kingdom.
1. The short version
- Your photos, workouts, weights and scan history are kept on your phone.
- Scan scoring and the coach use AI from OpenAI. The app asks your permission before anything is sent, and you can turn it off in Profile. Your face is blocked out of scan photos on your phone first.
- Our server keeps no photos, no workout log and no health data. Everything it does keep is listed in section 4.
- We do not sell your data, show advertising, or let anyone use it to train AI models.
2. What stays on your phone
Everything not named in section 3: your scan photos and progress photos, every measurement taken from them, your scan history, workouts, routines, body weight, height, goals, and anything read from Apple Health. It is held on your phone and in your own iCloud backup if you use one. We cannot read it.
Finding your body in a photo, cropping it and measuring its proportions all happen on the phone.
3. What leaves your phone, and when
3.1 Your scan — only if you allow AI features
To score how developed each muscle group looks and how clearly it shows, the app sends crops of your scan photos — with your face blocked out on your phone — to our server, which passes them to OpenAI and returns the scores. Our server holds the images in memory for that request only and never writes them to disk. The app is responsible for removing the face, and our server cannot check that it did.
3.2 The coach — only if you allow AI features
When you ask the coach something, or ask it to write or change a workout, it receives what you typed or said, and the details it needs to answer: your routine names, this week's plan, the workout in progress, your scan scores, how your lifts are progressing, and whether your plan is on track (for example, your weekly rate of weight change, which may come from weights in Apple Health). When a lift stops progressing, the app may send that lift's recent sets so the coach can suggest why. Spoken or imported workout logs are turned into text on your phone; only the text is sent. Audio and photos of logs never leave your phone.
3.3 Your sign-in
If you sign in with Apple or Google, we receive an account identifier and, if you share it, your email address. If you sign in with email, we hold your address to send a one-time code.
3.4 Your subscription
Apple takes payment; we never see your card. RevenueCat receives your purchase receipts and a random app user ID so it can confirm your subscription and unlock Pro.
3.5 Anonymous usage — you can turn this off
The app records which screens and features are used, for example "scan started" or "onboarding step 4", with a random install ID that is not linked to your account, plus the app version. It never sends your name, email, photos, weights, lifts, or anything you type or say. Switch it off in Profile → Share anonymous usage.
4. Everything our server stores
| What | Contents | Why |
|---|---|---|
| Usage counts | Your account identifier, a time period and a count | To cap AI use, so one account cannot run up unlimited cost |
| Last scan | Your account identifier and the time of your last scan | To allow one scan a week |
| Sign-in codes | Your email address, a hash of your code, its expiry and failed attempts | Email sign-in. Deleted once used or expired |
| Saved AI results | A one-way hash of the photos or request, the result returned, and your account identifier | So reopening a scan or answer shows the same result, at no extra cost |
| Usage events | A random install ID, event names, the app version | To see which features are used. Not linked to your account |
A hash cannot be turned back into a photograph. Our hosting provider also processes your IP address to deliver each request, and its short-lived server logs may record it.
5. Who else processes it
| Who | What for |
|---|---|
| OpenAI | Scan scoring and the coach (sections 3.1 and 3.2). Data sent through its API is not used to train its models; OpenAI may keep it for up to 30 days to detect abuse, then deletes it. |
| Fly.io | Hosts our server and its database, in London. |
| RevenueCat | Confirms subscriptions. |
| Apple | App distribution, payments, Sign in with Apple, and Apple Health on your phone. |
| Sign in with Google, if you use it. | |
| Resend | Sends sign-in code emails, if you sign in with email. |
OpenAI and RevenueCat process data in the United States. Those transfers rely on the UK's approved safeguards, such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.
6. Health data
With your permission, the app reads your weight, steps, sleep and date of birth from Apple Health. It never writes to Apple Health. This data is used on your phone. It leaves only as described in section 3.2, as a summary the coach needs to answer you, and only when you have allowed AI features. It is never used for advertising or sold.
7. Legal basis and how long we keep it
We use your data to provide the app you signed up for (contract). AI features run on your consent, which you can withdraw at any time in Profile → AI features. Anonymous usage runs on our legitimate interest in improving the app, and you can switch it off in Profile.
Sign-in codes are deleted when used or expired. Usage counts, your last scan time and saved AI results are kept until you delete your account. Usage events are kept while they help us improve the app.
8. Deleting your account
In the app, go to Profile → Delete account. This removes everything our server holds for your account and, for Sign in with Apple, revokes the app's access. Data on your phone is removed when you delete the app.
9. Your rights
Under UK GDPR you can ask for a copy of what we hold, ask us to correct or delete it, object to processing, or withdraw consent. Email privacy@physiqueanalytics.com. You may also complain to the Information Commissioner's Office at ico.org.uk.
10. Children
ProLift is for adults aged 18 and over. We do not knowingly collect data from anyone younger.
11. Changes
If this policy changes materially, we will say so in the app before the change takes effect.
12. Contact
Rashif Kabir, trading as Physique Analytics, 27 Old Gloucester Street, London WC1N 3AX · privacy@physiqueanalytics.com · +44 7739 068008