Rexlift Privacy Policy

Effective: 12 October 2026 · Last updated: 12 October 2026

Rexlift ("Rexlift", "we", "us") is a strength-training app published by RexLiftApp, 1301 Marina Hotel Apartments, Dubai Marina, Dubai, United Arab Emirates. This policy explains what we collect, why, and the choices you have. It applies to the Rexlift iOS and Android apps and to rexlift.app.

1. What we collect

Data Why Where it lives
Account: email address, sign-in provider (Apple or Google), display name and username you choose To create and secure your account and show your profile Our database (Supabase), hosted in the European Union
Setup answers: goal, experience, date of birth, sex (optional), height, weight, goal weight, schedule, equipment, focus areas and limitations To generate and adapt your training plan and starting weights Our database; also on your device while signed out
Training data: workouts, sets, weights, reps, ratings, notes, personal records, streaks To track your progress and adjust your plan Your device (works offline) and our database when signed in
Body metrics and progress photos you add To show your own progress over time Our database and a private storage bucket; photos are private unless you share one yourself
Body-scan photos and AI analysis results (Rexlift Pro) To estimate body composition, balance and posture and tune your plan Private storage; photos are deleted after analysis unless you choose to keep them (see section 3)
Coach Rex conversations (Rexlift Pro) To answer your training questions Our database (see section 3)
Community content: posts, comments, cheers, direct messages, reports, clubs, challenges, buddies To run the community features you use Our database; visible according to your privacy settings
Device data: push notification token, app version, platform, crash and error reports (no personal content) To deliver notifications, keep the app working and fix bugs Our database and our error-reporting provider
Purchase status (Pro entitlement) To unlock Pro features Our database, synced from Apple / Google via RevenueCat

We do not collect your precise location, contacts, or advertising identifiers, and Rexlift shows no ads.

2. Apple Health and Health Connect

If you connect Apple Health or Health Connect, Rexlift only writes the workouts you finish (type, duration, estimated energy). Rexlift never reads any data from Apple Health or Health Connect, and never uses Health data for advertising or shares it with third parties. You can disconnect at any time in Profile → Connected apps or in your phone's Health settings.

3. AI features (Rexlift Pro)

Body-scan analysis and Coach Rex replies are produced by an AI model provider (Anthropic) processing requests on our behalf. For a scan, the photos you captured and your optional check-in answers are sent to the provider over an encrypted connection; for the coach, your message history and a minimal training profile (goal, experience, split, days, equipment, limitations — no name, email or photos) are sent. The provider does not use your data to train its models under our agreement. Results are estimates, not medical advice.

Scan photos are deleted from our storage after analysis unless you chose "keep my photos", in which case you can delete them any time from the scan. Analysis results and coach conversations stay in your account until you delete them or your account.

4. Who can see what

Your workouts, body data, photos, scans and coach conversations are private by default. Community posts are visible to the audience you choose (public, friends, or only you). You control profile visibility, leaderboard participation and whether exact weights are shared in Profile → Privacy. Direct messages are visible only to you and the recipient. Blocked people cannot see your content or contact you.

5. How we share data

We share data only with providers that process it for us under contract: Supabase (database, storage, authentication), Anthropic (AI features), RevenueCat (purchase status), Expo (app updates and push delivery), Apple and Google (push notifications, sign-in, purchases), Sentry (error reports) and PostHog (product analytics without personal content). We never sell personal data.

6. Your choices and rights

7. Retention and security

We keep your data while your account exists and delete it when you delete your account (see section 6). Data is encrypted in transit and at rest; access is restricted with row-level permissions so only you (and the people you choose) can read your records.

8. Children

Rexlift is for people aged 18 and over. We do not knowingly collect data from anyone under 18.

9. Changes

We will post changes here and update the date above. For material changes we will notify you in the app.

10. Contact

Email contact@rexlift.app · RexLiftApp, 1301 Marina Hotel Apartments, Dubai Marina, Dubai, United Arab Emirates.