privacy

last updated 3 august 2026

the short version: lift has no server and no account system, so your training data has nowhere to reach me even if i wanted it. the only personal information i ever hold is an email address, and only if you typed one into the beta form yourself.

who i am

lift is made by one person, james skinner, trading as terminal (terminal-lib.com). for anything in this document, including a request to delete your data, write to support@terminal-lib.com. under uk gdpr i am the data controller for the beta mailing list. for the data inside the app, see below — there is no controller relationship, because i never receive it.

what the app stores, and where

everything you log — workouts, sets, exercises, templates, notes, bodyweight and body measurements — is written to a database on your own iphone. that local copy is the source of truth.

if you are signed in to icloud, that database also syncs through Apple's cloudkit into your private icloud database. private means exactly what it sounds like: the data sits in your personal icloud account, under your apple account's protection, and i have no credentials, no dashboard and no technical means to read it. i can see aggregate counts of records in my developer console — never contents, and never anything tied to a person.

turn icloud off and the app carries on working with the local copy alone. nothing is lost by declining to sync.

health data

lift can read from and write to Apple Health, and only with permissions you grant explicitly and can revoke at any time in the Health app. specifically:

• writes finished workouts, so your training shows up alongside everything else
• writes bodyweight and body fat as you log them
• reads bodyweight and body fat, so figures logged in another app appear here
• reads workouts from sources you individually approve — your watch, strava, whatever else

each of those four is a separate switch and all four are off until you turn them on.

health and fitness data obtained through HealthKit is never used for advertising, marketing, or any use-based data mining. it is never sold, and it is never shared with a third party, service provider or anyone else. it is not transmitted off your device to me under any circumstances. it is used solely to show you your own training and body measurements inside the app. under uk gdpr health data is special category data, which is part of why the app is built so that it never leaves your own devices and your own icloud account.

the beta mailing list

if you enter your email address on this site, i store that address and the date you submitted it. that is all — no name, no ip address, no location, no tracking pixel in the emails.

• lawful basis — consent, given by submitting the form
• purpose — to send you the testflight invitation and to tell you when lift launches
• where it lives — a cloudflare d1 database in my own cloudflare account
• who sends the emails — resend, acting as my email delivery provider; they process the address solely to deliver the message
• how long — until you unsubscribe, or until three months after launch, whichever comes first, at which point the list is deleted
• opting out — every email carries a one-click unsubscribe link, which deletes your address rather than merely flagging it

the list is never sold, rented, shared, or used for anything other than the two emails described above.

this website

this site sets no cookies and runs no advertising or cross-site tracking, which is why you weren't shown a consent banner.

i use cloudflare web analytics, which is cookieless and reports only aggregates — how many people viewed a page, roughly which country, which referrer. it does not build a profile of you and it cannot identify you. cloudflare also handles hosting and serves the site, and processes request metadata such as ip addresses transiently for security and delivery, as any host must.

the signup form is protected by cloudflare turnstile, which checks that you are not a bot without setting cookies or tracking you across sites.

fonts are served from this domain rather than a font cdn, so loading the page tells no third party that you visited.

your rights

under uk gdpr you can ask for a copy of what i hold, ask for it corrected, or ask for it deleted. since the only thing i hold is your email address, all three are quick. write to support@terminal-lib.com and i will respond within 30 days. you also have the right to complain to the information commissioner's office.

your training data isn't covered by those requests for the simple reason that i don't have it. to delete it, delete the app and, if you synced, remove lift's data from icloud in your iphone settings.

children

lift isn't directed at children under 13 and i don't knowingly collect anything from them.

changes

if this document changes materially i'll update the date at the top, and email the list if the change affects it.