Privacy Policy
Epic Lifting is operated by Pagosa.tech Limited (“we”, “us”). This policy explains what information Epic Lifting collects, how we use it, who we share it with, and the choices you have. If anything here is unclear, write to us at epicliftingapp@gmail.com.
The short version
- We collect what you log and what you give us to run your account. We use no advertising, no third-party analytics and no crash-reporting SDKs, and we do not collect your location.
- We do not sell your personal information.
- Health data from Apple Health or Health Connect is optional, is used only to provide the features you turn on, and is never used for advertising or marketing.
- You can delete your account and its data from inside the app.
Information we collect
- Account: your email address and a hashed password, a display name and handle, and optionally a birthdate, a men’s or women’s competition category (used for strength scores), a profile picture and profile links. If you sign in with Google or Apple, we receive the identifier and email address they share with us.
- Training: your workouts, sets, loads, reps and effort ratings, programs you build or follow, notes, life events, photos you add to a workout, bodyweight readings you save, and optional daily check-ins (sleep, soreness and stress).
- Food and water (Elite plan): foods, recipes, meals and water you log, and the nutrition targets you set.
- Social: who you follow or block, posts you make, likes and tags, challenges and leaderboards you join, gifts of in-app Rep, and coaching links you accept.
- Purchases: your subscription status from the App Store or Google Play (product, dates and transaction identifiers). We never see your payment card.
Guest mode keeps your training data on your phone until you create an account; the app still downloads the exercise library and shared programs from our servers. The camera is used only to take a workout photo or scan a food barcode; a scanned barcode number, not the picture, is sent to look up the food. Timers and reminders are local notifications on your phone. We do not collect location.
Health data (Apple Health and Health Connect)
Connecting Epic Lifting to Apple Health (iOS) or Health Connect (Android) is optional and off until you turn it on in Settings. Each permission is requested separately, and you can withdraw it at any time in Apple Health or Health Connect settings.
- What we write: workouts you finish (start and end time, duration and pauses), saved as a strength-training workout, and an estimate of the active calories you burned.
- What we read: your most recent body weight. We do not read any other kind of health data.
We use your body weight to estimate the calories a workout burned and to pre-fill the “Today’s weight” field. It is only saved as a bodyweight reading in Epic Lifting after you confirm it, and that reading is marked as coming from Health. Saved readings sync to your account and are used for calorie estimates and, if you opt in, for bodyweight-scored leaderboards and challenges. We do not use Health data for anything else.
We do not use Health data for advertising, marketing or data-broker sales. We do not sell it and we do not use it to train AI models. The only place it can leave our own servers is a request you choose to make: if you ask Chad (see below), your recent saved bodyweight readings, which can include ones that came from Health, are included in that request to the AI provider whose key you added. Our use of information received from Health Connect adheres to the Google Play User Data policy, including its Limited Use requirements.Bodyweight-scored leaderboards show a score, not your weight. Other lifters who can see both your as-lifted result and your score could work out roughly what you weigh, so this is an opt-in choice you can turn off at any time.
Workouts we saved to Health stay in Health until you delete them there. Bodyweight readings saved in Epic Lifting stay until you delete them or delete your account.
How we use your information
- To run the app: record your training, sync it between your devices, build your reports, run programs, leaderboards and challenges.
- To let you share with others, according to the visibility and sharing choices you make.
- To send account emails such as password resets.
- To keep the service secure, prevent abuse, fix bugs and meet legal obligations.
Chad, the optional AI
Chad is optional. If you never add an AI key, nothing is sent to an AI provider. If you add your own key (from Anthropic, OpenAI or Google), we store it encrypted and never show it back. When you ask Chad something, our server sends a request to that provider using your key. It contains the material for that question, such as your program draft, your current workout, a summary of your recent training, your saved bodyweight readings and check-ins, your recent food and water log and nutrition targets (for a food review), and any note you type. The provider processes it under its own terms and privacy policy and bills you directly.
Some paid plans include limited weekly or monthly briefings that run on Epic Lifting’s own model access instead of your key. The same kind of information is then sent to the provider we use for that feature.
Answers are shown to you and are not kept, except that your latest daily, weekly and monthly briefing is stored until it is replaced. If a request fails we keep a record of the failure, which can include the first 300 characters of an unreadable reply, for 30 days, and a report you choose to send us until it is resolved. We keep token counts for 13 months to enforce usage limits.
Who we share information with
- Other lifters, as you choose: your profile and posts, your name or handle on leaderboards and challenges you join, and, if you accept a coach, your training data. A coach never sees your bodyweight, check-ins or AI keys, and sees your food log only if you turn that on for them.
- Service providers that host and run Epic Lifting on our behalf, such as cloud hosting, storage and email delivery. They process information only to provide those services to us.
- Services you use: Apple and Google (sign-in, purchases, and Health); your AI provider; a public food database, which receives a barcode number when you scan a food we do not already have; and Spotify, only if you connect it, in which case your chosen playlists and current track appear on your profile and your Spotify sign-in stays on your device.
- Legal: if the law requires it, or to protect the safety of our users and the service.
We do not sell personal information and we do not share it for advertising.
Where we store it, and for how long
Our servers are in the United States. We keep your information for as long as your account exists. When you delete your account, your account and its data are removed from our systems, and copies in provider backups age out on their normal schedule. The shorter retention periods above apply to AI failure records and usage counts.
Your choices and rights
Whatever your location, you can ask us to give you a copy of your information, correct it, delete it, or stop using it for a purpose, and you can object to how we use it. This includes the rights available under data-protection laws such as the GDPR, UK GDPR and California’s CCPA. We will not treat you differently for using these rights.
- Delete your account: in the phone apps, open your picture, then Delete my account. On the web, use Account, About me. Deletion is immediate.
- Export your data: download your training history from History in the web app.
- Turn things off: Health connection, AI keys, Spotify, profile visibility and bodyweight scoring can each be changed in the app.
- Ask us: email epicliftingapp@gmail.com and we will respond within 30 days.
You can also uninstall the app at any time; that stops collection from that device but does not delete your account.
Children
Epic Lifting is not for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
Security
Connections use HTTPS, passwords are stored hashed, AI keys are encrypted at rest, and your sign-in token is kept in your phone’s secure storage. No system is perfectly secure, but we work to protect your information.
Changes to this policy
If we change this policy we will update this page and its effective date, and tell you in the app or by email when a change is significant.
Contact us
Pagosa.tech Limited, epicliftingapp@gmail.com. Questions about privacy, requests to access or delete your data, and Health data questions all go to this address.