Privacy policy

Effective date: October 26, 2026

ViceLift is an iOS app for lifters who follow a structured program. This policy says what the app collects, where that data goes, and how you delete it.

Test builds can still show the app's earlier working name, Get in shAIpe. This policy covers those builds too.

The short version

You need an account to use ViceLift. Your training log syncs to that account so it is there on each device you sign in on.
The app has no advertising, analytics, crash-reporting, or tracking code.
The body weight the app reads from Apple Health stays on your phone. The app never stores it or sends it anywhere.
The program generator runs on your phone. Your training history is not sent to an AI company.
You can delete your account in the app.

What we collect

Your account

You sign in with an email address and password, with Sign in with Apple, or with Sign in with Google. When you use email, the app sends your email address and password to our account service. When you use Apple or Google, you sign in on their page in a system browser sheet, and the app receives only a sign-in code from our account service. The app never asks for your name.

From your account the app uses your account ID, your email address, and whether the email address is confirmed. It saves the sign-in response from our account service as it arrives. That response can also hold profile details that Apple or Google passed on, such as your name. The app keeps the response and your sign-in tokens in the iOS Keychain on your phone, readable only while the phone is unlocked.

When you reset your password or change your email address, our account service sends the email with the link through Resend, our email provider. The app sends your current password again to confirm an email change.

Your training

The app records the training you log:

Workouts with their exercises, sets, loads, reps, RPE, durations, distances, rest timers, and start and end times.
The notes you write on a workout or an exercise, and how a workout felt.
The programs you enrol in and your progress through them.
Custom exercises and custom programs you create, including the names you give them.
The last program the generator made for you, with the choices you picked for it.
Your settings for units, default rest time, and accent colour.

The app stores all of this in a database on your phone. While you are signed in, it also syncs your finished workouts, programs, custom exercises, custom programs, last generated program, and those settings to your account. It also backs up the workout you are doing right now, with its sets, rest timer and workout clock, to your account while the workout runs. Each upload carries a random ID that the app made for this installation. The backup of the workout in progress also carries a second random ID that tells which phone is doing it. The app keeps that ID in the Keychain on this phone only. It stays when you delete and reinstall the app, and it never moves to another phone. Neither ID is an Apple device or advertising identifier.

Some things stay on the phone and never sync: your theme, and your Apple Health and rest-alert settings. The weekdays you schedule a program on sync with the program.

Apple Health

If you allow it, ViceLift works with Apple Health in two ways:

It reads your latest body weight. The app shows it on your Profile and uses it to estimate the calories a workout burned. It keeps the value in memory only. It does not save it, sync it, export it, or send it anywhere.
It writes each finished workout to Health as a strength-training workout with its start time, end time, duration and, when it knows your body weight, an estimated calorie total.

The app asks for Health access the first time you finish a workout. You can turn Apple Health off on your Profile, and you can change access at any time in the Health app or in Settings. Turning it off in ViceLift does not remove workouts already saved in Health. The start, end and duration of a workout are part of your training log, so they sync like the rest of it. ViceLift does not use Health data for advertising and does not share it with anyone.

Diagnostics

The app writes a few diagnostic events, such as app start-up and database repairs, to the system log on your phone. The app sends them nowhere. Before it writes an event, it removes your notes, the names you wrote, loads, body weight, and anything that identifies you, your account, or your phone.

Who else handles your data

Service	What it does	What it receives
Supabase	Hosts our account service and the database that your training syncs to.	Your email address, password, sign-in tokens, and your synced training records.
Resend	Sends account emails: sign-up confirmation, password reset, and email change links.	The full email, including its link and your email address. For an email change, both your current and new addresses.
Apple and Google	Run Sign in with Apple and Sign in with Google, if you choose them.	What you enter on their sign-in page. Their own privacy policies apply.
YouTube (Google)	Plays exercise demonstration videos.	The request for a video, only when you open a demonstration. YouTube can set cookies in the app's video player. Google's privacy policy applies.
Apple	Provides the on-device model the program generator uses on phones that support it. Other phones use the app's built-in generator.	Nothing leaves your phone. Both generators run on the phone.

Supabase stores our data in Canada, in the Amazon Web Services Canada (Central) region.

When you export your data, or add a program to your calendar, the app hands a file to the iOS share sheet. Where it goes from there is your choice.

Your phone's own iCloud or computer backups can include the app's database. Apple's terms cover those backups.

How long we keep it

The app sets no time limit on your synced training. It stays in your account until you delete it or delete your account. In the app you can delete a custom program, and the app replaces your last generated program when you generate a new one. The app has no way yet to delete a single finished workout or custom exercise from your account.

Sign out and delete your account

Sign out

Signing out removes your sign-in tokens from the phone and ends the session on this phone only. It usually also removes the phone's copy of your synced training, but keeps it if some changes have not uploaded yet, if a workout is in progress, or if clearing it fails. In that case the app keeps your copy so you can upload your changes and finish your workout when you sign in again. Anyone else who signs in on the phone can't see it. The app's own copy of each file you exported stays on the phone too, in its cache folder.

Delete your account

To delete your account, open your Profile, choose Manage Account, and choose Delete Account. The app then does four things:

It syncs one last time and tells you whether anything on the phone has not reached your account, such as workouts that never synced or a workout in progress, which never syncs. It offers to export your training as a JSON file first. If the phone can't reach our server, nothing is deleted.
It asks our server to delete your account. The server deletes every training record synced to your account straight away, then your account itself. From then on the server refuses any upload for that account, so another phone that is still signed in can't put your training back. That phone keeps a sign-in token that works for up to an hour and cannot be renewed. Logs that our hosting provider keeps are deleted on its normal schedule.
Only after the server confirms the deletion, the app removes all of your account's training from the phone and then your sign-in tokens. If the app closes before it finishes, it finishes the next time it opens.
Your other phones remove their copy of your account's training the next time they connect.

So that your other phones can tell your account was deleted, the server keeps your account's random ID for 30 days after the deletion, with no email address or other detail. It is removed by the next account deletion after those 30 days.

If the server doesn't confirm the deletion, for example because the connection drops, the app says so, keeps your account and your training on the phone, and you can try again. If the server did delete your account but the answer was lost, the phone notices the next time it connects and removes its copy then.

If you signed in with Apple, you can also remove ViceLift from the apps that use Sign in with Apple in your Apple ID settings.

The app's own copy of each file you exported stays in its cache folder until you delete the app.

Your choices

Export your data as a JSON file from Privacy on your Profile.
Turn Apple Health off on your Profile, or change its access in Settings.
Turn rest-timer alerts off. They are local notifications, scheduled on your phone.
Delete your account, as described above.

Contact

For any privacy question or request, email [email protected].

Changes to this policy

When the app changes what it collects, we update this page and its effective date.