This policy explains what information the Level Up app and website collect, why we collect it, who we share it with and the choices you have. "Level Up", "we" and "us" mean the developer of the Level Up app. We are the data controller for the personal information described here.
The short version: we collect what we need to log your training, calculate your rank and run the social features. We do not sell your data and we do not show third-party ads.
1. Information we collect
Account information
When you create an account we receive your email address and a user ID from the sign-in method you choose (Sign in with Apple, Google or email). If you use Sign in with Apple and choose to hide your email, we only receive Apple's private relay address.
Profile and onboarding answers
- Your name and username
- Date of birth, sex, bodyweight and height
- Preferred units (kilograms or pounds)
- Training goals, weekly workout target, how often you train, whether you train solo or with friends, what gets in the way of training, how you heard about us and whether you have used other apps
- Any starting lifts you enter so your first rank reflects your current strength
Sex, bodyweight and age are needed to compare your lifts with strength standards. Bodyweight and other fitness details can be health-related information, so we only use them to provide the app's features.
Training data
Workouts, exercises, sets, reps, weights, durations, rest times, cardio entries, custom exercises, workout templates, personal records, muscle scores, rank history, streaks and weekly goal results.
Social data
Friend connections and requests, groups you create or join, group challenges, and any workout templates you publish to the community.
Usage and device information
We use product analytics to understand which features are used and where the app breaks. This includes events such as screens viewed and buttons tapped, along with your device model, operating system, app version, language and an approximate location derived from your IP address. Analytics events are linked to your account ID once you sign in.
Purchases
Level Up Pro is billed by Apple through your Apple ID. We never see your card details. Apple tells us whether you have an active subscription so we can unlock Pro features.
Notifications
If you allow notifications, we store a push token for your device so we can send reminders and updates. You can turn notifications off at any time in your iPhone settings.
2. How we use your information
- To provide the app: logging workouts, syncing them across devices, calculating your strength scores and rank, and showing your history and records
- To run social features such as friends, groups, challenges and community templates
- To manage your subscription and restore purchases
- To send notifications you have agreed to receive
- To understand how the app is used, fix bugs and improve features
- To respond when you contact us
- To keep the service secure and prevent abuse
3. Legal bases (UK and EEA users)
- Contract: to provide the app and the features you sign up for
- Consent: for notifications and for health-related information such as bodyweight, which you choose to provide. You can withdraw consent at any time by changing your settings or deleting the information
- Legitimate interests: for analytics, security and improving the app, where those interests are not overridden by your rights
- Legal obligation: where we must keep or disclose information by law
4. What other people can see
Your training log is private by default. People you add as friends, and members of groups you join, can see your username, name, rank and the workout activity shown in those features, such as leaderboards, group activity feeds and challenge progress. Templates you publish to the community are visible to all Level Up users along with your username. Only add friends and join groups you are comfortable sharing this with.
5. Who we share information with
We share information only with service providers that help us run Level Up, under contracts that limit how they can use it:
| Provider | What they do |
|---|---|
| Supabase | Account sign-in, database and storage for your profile and training data |
| PostHog (EU hosting) | Product analytics |
| Apple | Sign in with Apple, App Store payments and push notifications |
| Sign in with Google, if you choose it | |
| Expo | App updates and delivery of push notifications |
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or reorganisation of the business, in which case this policy will continue to apply to your information.
We do not sell your personal information and we do not share it for cross-context behavioural advertising.
6. International transfers
Some of our providers process data outside the UK and EEA, including in the United States. Where this happens we rely on adequacy decisions, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses to protect your information.
7. How long we keep it
We keep your account and training data for as long as your account is open. When you delete your account we delete your profile and training data from our live systems. Copies in backups are removed as those backups expire, normally within 30 days. Analytics data is kept for up to 12 months and is then deleted or anonymised.
8. Your choices and rights
- Edit your profile and units from the Profile tab
- Delete your account from the Profile tab in the app. This permanently removes your account and associated data
- Turn off notifications in your iPhone settings
- Cancel your subscription in your Apple ID subscription settings
Depending on where you live, you may also have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email support@yourdomain.com. We will respond within one month.
If you are in the UK you can complain to the Information Commissioner's Office at ico.org.uk. If you are in the EEA you can complain to your local data protection authority. We would appreciate the chance to address your concerns first.
9. Security
Data is encrypted in transit, and access to your records in our database is restricted to your own account by row-level security rules. No system is perfectly secure, so please use a strong password if you sign in with email and keep your device protected.
10. Children
Level Up is not intended for children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. If we make significant changes we will tell you in the app or by email before they take effect. The date at the top shows when it was last updated.
12. Contact
Questions about privacy? Email support@yourdomain.com.