DRAFT for Rens to review. Not the final policy. Company name, registered address, and contact email will be filled once the Pty Ltd exists.
Who we are
LFTN is a training and food log made by [Pty Ltd name — not registered yet] (South Africa). Contact: privacy@lftn.app.
This page is a draft. It will be updated with the registered company name, physical address, and a monitored inbox before the App Store and Google Play listings go live.
What lives on your device
Workouts, sets, food, drinks, weight, tape, steps, water, habits, the week plan, drafts, and Strava tokens stay on this phone first (localStorage and IndexedDB).
Uninstalling the iOS or Android app wipes that on-device copy. Export or email backup before you delete the app.
Cloud backup (Neon)
If you sign in with email, we store an encrypted-at-rest snapshot of the log (no meal photos, no Strava tokens) in Neon Postgres, keyed by a hash of your email plus a server pepper — not the email itself.
A session token is stored so the same email can restore on another device. We do not show user counts or names in the product.
Sign-in codes (Resend)
The 6-digit backup code is emailed through Resend. The code expires in 15 minutes. We do not use that email for marketing.
Meal photos and OpenAI
Photo estimates are optional. We ask for consent before a meal photo is sent to OpenAI. Equipment photos use the same API if you tap identify.
Health / Health Connect step counts never go to OpenAI or to anonymous usage ping.
Strava
Connecting Strava is optional. Tokens stay on the device. Server routes only exchange and refresh tokens and fetch activities you asked to import. We do not post to Strava.
Leaderboard
Opt-in only. Nickname, bodyweight, age band, sex, and a few logged lifts are stored so we can show a top 10 and your private rank. You can leave the board, report a nickname, or block it on this device.
Anonymous usage ping
If the switch is on, we send a daily anonymous ping (device id, app version, platform, onboarded, training split). You can turn it off in More. It never includes Health data, meal photos, or the food log.
Payments
On iOS, subscriptions go through Apple. On Android, through Google Play. RevenueCat processes store receipts. Web billing is not live yet.
A lapsed trial or subscription locks paid features. It does not delete or hide your log. Export and account deletion stay available.
Retention and deletion
On-device data lasts until you reset, restore over it, or uninstall.
Cloud backup, sessions, one-time codes, and your leaderboard row are removed when you delete the account (in More, or at lftn.app/delete-account).
Anonymous usage rows are not tied to the email and are not part of account deletion.