Privacy Policy
Last updated: 4 June 2026
1. Who we are
AdaptiveLift is operated by Charlotte Fettes, trading as AdaptiveLift ("we", "us", "our").
Data controller: Charlotte Fettes, trading as AdaptiveLift
Contact: privacy@adaptivelift.app
ICO registration number: C1942496
We are registered with the Information Commissioner's Office (ICO) as a data controller.
2. What data we collect
Account data
- Email address
- Name (if provided)
- Password (stored as a secure hash — we never see your plain-text password)
Profile and training data
- Fitness goals, experience level, training preferences
- Workout logs, exercise performance, session history
- Body metrics if provided (weight, height, measurements)
- Age and biological sex (used for programme personalisation; biological sex is optional)
- Check-in responses (mood, sleep, energy, stress, soreness)
- Specialist screening responses, where you use those features (e.g. injury and rehabilitation, pregnancy and postnatal status, menstrual-cycle tracking, and medical-clearance questions)
- Progress photos (if uploaded)
- Nutrition and food diary entries, including appetite or medication context if you choose to provide it (if used)
Some of this information relates to your health and is treated as special category data — see Section 4 for how we handle it.
Coach data (coaches only)
- Business name, bio, location, timezone
- Credentials and certifications submitted for verification
- Client roster and coaching communications
- Billing and payment information (processed via Stripe)
Payment data
- Subscription status and billing tier
- Payment is processed by Stripe — we do not store card numbers or full payment details
Technical data
- IP address and browser information (collected by our hosting provider, Vercel)
- Authentication tokens (managed by Supabase)
3. How we use your data
We use your data to:
- Create and manage your account
- Generate and adapt your personalised training programme
- Enable the coaching portal and coach-client relationships
- Process subscription payments
- Send transactional emails (trial reminders, subscription updates, coaching messages)
- Improve the app and fix issues
We do not use your data for advertising, and we do not sell your data to third parties.
4. Legal basis for processing
We process your data under the following legal bases (UK GDPR):
- Contract — processing necessary to provide the service you signed up for
- Legitimate interests — improving the app, preventing fraud, ensuring security
- Legal obligation — retaining financial records as required by HMRC
- Explicit consent — for health-related (special category) data, as described below
Special category (health-related) data
Some of the data you can choose to provide is treated as special category data under Article 9 of the UK GDPR because it relates to your health. This includes:
- Daily check-in responses (mood, sleep, energy, stress, soreness)
- Specialist screening answers, where you use those features — for example injury and rehabilitation, pregnancy and postnatal status, menstrual-cycle tracking, and medical-clearance questions (which may touch on matters such as eating-disorder history, diabetes, or cardiovascular risk)
- Progress photos and body measurements
- Nutrition, food diary, and appetite or medication context (for example if you tell us you are using appetite-affecting medication)
Our lawful basis for processing this data is your explicit consent (Article 9(2)(a) UK GDPR). We ask for it only when you choose to use a feature that requires it, and we use it solely to:
- Personalise and adapt your training and nutrition safely
- Apply safety checks and route you to appropriate guidance (for example adapting a programme during pregnancy or after an injury)
We never use health data for advertising, and we never sell it. You can withdraw your consent at any time — by stopping use of the relevant feature, deleting the data, or contacting us at privacy@adaptivelift.app. Withdrawing consent does not affect any processing carried out before withdrawal, and personalisation that depends on that data will no longer be available once it is withdrawn.
Health-related data is given additional protection through access controls: by default it is not visible to coaches, and is shared with a coach only where you have explicitly chosen to share it (for example by sharing specific progress photos or check-ins with your coach).
5. Third-party processors
We use the following third-party services to operate AdaptiveLift. Each acts as a data processor on our behalf:
| Processor | Purpose | Location |
|---|
| Supabase | Database and authentication | EU (AWS) |
| Stripe | Payment processing | US (EU adequacy/SCCs) |
| Resend | Transactional email delivery | US (SCCs) |
| Vercel | App hosting and deployment | US (SCCs) |
All US-based processors operate under Standard Contractual Clauses (SCCs) ensuring adequate data protection in line with UK GDPR.
6. Data retention
- Account data — retained while your account is active, and for up to 12 months after a deletion request to allow reactivation
- Training and workout data — retained with your account data; permanently deleted 12 months after a deletion request if the account is not reactivated
- Payment records — retained for 7 years as required by HMRC
- Email logs — retained for 90 days by Resend
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format. Workout and cardio session data can be exported directly from Settings → Export. For a full export of all personal data held, contact us at privacy@adaptivelift.app and we will provide it within 30 days
- Restriction — ask us to limit how we use your data
- Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@adaptivelift.app. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.
8. Cookies
AdaptiveLift uses only essential cookies required for the app to function:
- Authentication cookies — set by Supabase to keep you logged in
- Session cookies — to maintain your session as you navigate the app
We do not use advertising cookies, tracking cookies, or analytics cookies. No cookie consent banner is required as all cookies are strictly necessary.
Exercise demonstration videos are embedded using YouTube's privacy-enhanced mode (youtube-nocookie.com), which does not set advertising cookies.
9. Children
AdaptiveLift is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us at privacy@adaptivelift.app.
10. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by email or via a notice in the app. The date at the top of this page shows when it was last updated.
11. Contact
For any privacy-related questions or to exercise your rights:
Email: privacy@adaptivelift.app
Charlotte Fettes, trading as AdaptiveLift
ICO registration: C1942496