This policy explains what happens to your information when you use LiftWrite. LiftWrite is provided by Tripper Pantana, an individual in Virginia, USA.
What stays on your iPhone
Your workouts, notes, food diary, recipes, body measurements, supplements, settings and how-to video history are stored in a local database on your iPhone. LiftWrite doesn't sync that database to any server. If you turn on LiftWrite's iCloud Backup, a copy is saved to your own private iCloud (below). Friends you've added and the workouts they share with you are also kept on your iPhone. Delete All Data in Settings › Privacy & Data removes it.
AI and voice
LiftWrite's AI features use Apple's on-device model (Apple Intelligence). Rite's answers are worked out on your iPhone. When you snap a meal, a water bottle or an exercise, or ask Rite about a photo, LiftWrite looks at the photo on your iPhone (with Apple's Vision framework and LiftWrite's own small models); the photo isn't uploaded. Only a barcode it finds in a food photo can be looked up, as described below.
Hands-free voice logging uses Apple's speech recognition on your iPhone only. While you have hands-free turned on, the microphone stays on (also on the Lock Screen) so LiftWrite can hear "Hey Rite"; your speech is turned into text on your iPhone, no audio is recorded, saved or sent, and hands-free turns off when you stop it, end your workout or after the quiet time you choose. Hands-free starts only when you start it: in the app, with the "Hey Rite" control in Control Center, on the Lock Screen or the Action button, with Siri, or, if you leave "Start Hey Rite with every workout" on, when you start a workout in LiftWrite. While it's on, iOS shows the microphone indicator and LiftWrite shows a Live Activity on the Lock Screen.
LiftWrite doesn't send your prompts, your voice, your photos or your data to any AI company or server.
What leaves your iPhone, and when
Information leaves your iPhone only when you use one of these features:
Food search. When you search for a food, the text you typed goes to the sources you've turned on: Open Food Facts (world.openfoodfacts.org), and USDA FoodData Central through LiftWrite's food search service. That service runs on Cloudflare (a Cloudflare Worker); it looks your search up in USDA FoodData Central (and, when LiftWrite's fatsecret connection is turned on, in fatsecret) and sends the results back. With the search text, LiftWrite sends a random request number, the time of the request and an App Attest check (below). LiftWrite doesn't send an account or your identity. The service doesn't keep a log of searches. To answer repeated searches faster it keeps the results for 15 minutes, filed under a scrambled (one-way hashed) form of the search, not the text you typed.
Food details and barcodes through LiftWrite's food service. When you open a food from USDA, or scan a barcode, LiftWrite may ask its food service for that food's full label and ingredients. Only the food's ID number or the barcode is sent, with the same request number, time and App Attest check. The service asks USDA FoodData Central or fatsecret and keeps the answer for up to 24 hours to answer the same request again.
Your own USDA key (optional). If you turn on online food search and enter your own USDA API key, the search text and your key go straight to USDA FoodData Central (api.nal.usda.gov), and the search text also goes to Open Food Facts.
Barcode lookup. After you agree to barcode lookups, the barcode you scan, or one LiftWrite reads from a food photo, is sent to Open Food Facts to find the product. Only the barcode is sent. Requests to Open Food Facts include the app's name and version, as Open Food Facts asks apps to do.
App Attest. Food search and Card links use Apple's App Attest, a device-integrity check. It lets LiftWrite's services confirm that a request comes from a genuine copy of LiftWrite on a real Apple device, to prevent abuse. It doesn't contain your name, an account or any of your entries. The service keeps the App Attest key it was given for your copy of LiftWrite (a random public key, not tied to your Apple Account) and when it was last used, so it can recognise genuine requests and limit abuse. To limit abuse it also counts requests per App Attest key, and per internet (IP) address when a new copy of LiftWrite first registers, and deletes those counts after about two hours.
Apple Health (optional). Only if you allow it, LiftWrite reads workout data, body mass and active energy burned from Apple Health. It writes confirmed workouts and nutrition values to Apple Health only when you turn those options on. LiftWrite never uses Health data for advertising and never sends it off your iPhone to us.
Shared Card links (optional). When you share a Card as a link, an encrypted copy goes to the LiftWrite sharing service (a Cloudflare Worker). The key that unlocks it stays in the link itself, and the service never receives it. The service also stores the preview you approved (with the "Detailed" preview, the Card's title, your nickname and a few details, and a preview picture; with "Private", only the Card type and your nickname), the time the link expires, and App Attest information used to prevent abuse. Anyone who has the link can see the preview. When someone opens your link, their device downloads the encrypted copy from the same service and unlocks it with the key in the link. A Card link lasts at most 30 days. Cards are deleted when they expire, and you can revoke a Card sooner; a revoked Card stops working at once and is deleted within a day. Request logging is turned off.
LiftWrite iCloud Backup (optional). When it's on, LiftWrite saves a copy of your LiftWrite data (your journal, photos and attachments, saved meals, splits, your Friends list and what friends shared with you, Link people and settings) as one file in your own private iCloud database (Apple CloudKit). Data LiftWrite read from Apple Health isn't included. Only your Apple account can read it; LiftWrite and its developer can't see it. It counts toward your iCloud storage. LiftWrite keeps the latest copy and the one before it. Turn it on or off, back up, restore or delete the backup in Settings › iCloud Backup. Delete All Data also deletes it unless you choose to keep it.
Coach sharing (optional). Cards you choose to share with a coach go through Apple iCloud (CloudKit), in a shared space between you and that coach. Your private journal, food diary, body data, photos and notes are never put there.
LiftWrite Link (optional). A LiftWrite Link carries what you chose to send (a workout, a split, a coach summary or your friend card) inside the link itself. It goes only where you send it, for example in Messages, and LiftWrite's servers never see it. Your friend card has your name, a short friend code and a random ID made for LiftWrite Link, which isn't tied to your Apple Account. A friend link can also carry a one-time iCloud invite (see Friends).
Friends (optional, 18 and older). When you invite a friend or accept an invite, LiftWrite makes a private shared space for the two of you in Apple iCloud (CloudKit). It lives in the inviter's iCloud and is shared only with the one person who accepted. Each invite link works once. Friends is not public: there is no chat, no free-text posting and no public profile.
What your friend sees: your name, your friend code and, while "Share my workouts" is on for that friend, the workouts you finished in the last 30 days: the workout's name, date and length, and each exercise's name, sets, reps, weight, time or distance, total volume and personal records. They also see your reactions, whether you share workouts with them, and your weekly workout goal (a number, for your streak together).
Plans and challenges you choose to share: a workout plan you share with them (its days, workout names, exercises, sets, reps and target weights, and later changes you save while it's shared; never your notes or tips), whether you follow a plan they shared, and challenges you start or accept with them (the goal, and your progress as a number worked out on your iPhone from your finished workouts; workouts marked "Don't Share with Friends" don't count).
What's never shared with friends: your notes, the text you wrote a workout in, food, recipes, water, supplements, body measurements and weight, photos, Apple Health data, and anything else in your journal.
Train Together (optional): when you and a friend train together, each set you finish goes to that friend as you go: the exercise's name, the set's number, reps, weight or time, and whether it was a warm-up. So does the list of exercises in the workout, with their targets, and your totals when you finish (sets, reps, weight moved, time). The sets are deleted from the shared space six hours after the session. Train Together works only while you both share workouts with each other.
Your choices: "Share my workouts" can be turned off for each friend, and any single workout can be marked "Don't Share with Friends". Turning sharing off deletes your shared workouts from that friendship. You can stop sharing or following a plan and leave a challenge at any time. A plan you saved from a friend is your own copy and stays on your iPhone. Remove or Block ends a friendship, its challenges and its shared plans, and deletes what you shared there. Block also ignores that person's invites. "Leave All Friends and Delete My Shared Data" and Delete All Data end every friendship and delete what you shared.
How it works: Apple stores the shared space and delivers it between your iPhones. It counts toward the inviter's iCloud storage. When something changes, Apple sends your iPhone a silent notification so LiftWrite can fetch it. LiftWrite and its developer can't read your shared space; only you and your friend can.
Reports: Report on a friend's page opens an email to liftwrite@icloud.com with the friend's name and friend code. It contains only what you choose to send.
Training together with SharePlay (optional). When you start LiftWrite Link in a FaceTime call, the workout you share (its plan, the note it came from and your nickname) goes to the people in that call through Apple's SharePlay.
Nearby sharing (optional). When you share a workout with someone nearby, your iPhone connects directly to theirs over Wi-Fi or Bluetooth (Apple's Multipeer Connectivity) and sends the same workout details. While your invitation is open, nearby iPhones can see an invitation code and when it expires.
Emails to support. Report a Problem, Request a How-To and Contact Support open an email to liftwrite@icloud.com in your mail app. It contains only what you choose to send, and you see it before you send it. App and device details are included only if you leave "Include app & device info" on. We keep support emails in that inbox until we delete them.
Who else is involved
Service providers. LiftWrite's food and Card services run on Cloudflare, which processes requests and stores Card links for us under its own privacy and security commitments. We don't let Cloudflare use your information for anything except running these services.
Food databases. Open Food Facts, USDA FoodData Central and, when it's turned on, fatsecret receive only the search text, food ID or barcode described above, never your journal or anything that identifies you. Their own privacy policies apply to what they receive, as they do when you visit their websites.
Apple. iCloud, CloudKit, SharePlay, Siri, Apple Health, App Attest and Apple Intelligence are Apple services and work as Apple's privacy policy describes.
We don't share your information with anyone else, and we don't sell it. If we ever add a service provider that receives personal information, it must protect it at least as well as this policy does, and we'll update this policy first.
Deleting your data and your choices
On your iPhone: Settings › Privacy & Data › Delete All Data removes your journal, settings and local files, ends your friendships and deletes what you shared with friends, and deletes your LiftWrite iCloud Backup unless you choose to keep it.
Apple Health: you can turn each Health option off in LiftWrite, and change or remove access in the Health app. Data already in Apple Health stays there until you delete it in Health.
Shared Card links: revoke a Card in LiftWrite, or it is deleted when it expires (30 days at most). Delete All Data doesn't reach Card links you already shared, so revoke any you want gone first.
Hands-free, microphone and speech: turn hands-free off at any time, turn off "Start Hey Rite with every workout" in Settings › Voice, or turn off microphone or speech recognition access for LiftWrite in the iOS Settings app.
Food lookups: you can decline barcode lookups and turn off online food sources; the food database built into LiftWrite works offline.
Support emails: ask us at liftwrite@icloud.com to delete an email you sent us.
Anything else: email liftwrite@icloud.com to ask a question about your information or to ask for help with deletion.
Files you send yourself
Exports. When you export your data or a backup archive, LiftWrite makes a file and hands it to the share sheet. It goes only where you send it. An export can contain everything in your journal, so keep it somewhere safe.
Imports. When you import a LiftWrite file, LiftWrite reads the file you picked on your iPhone and adds what's in it to your journal. Nothing is uploaded.
Diagnostics. If you export diagnostics, the file lists app events, such as which feature ran, whether it worked and roughly how long it took. It doesn't contain your entries, and it goes only where you send it.
Apple features on your iPhone
Siri, Shortcuts and App Intents. If you use LiftWrite with Siri, Shortcuts or other App Intents, Apple handles the request as Apple's privacy policy describes, and LiftWrite carries out the action on your iPhone. LiftWrite doesn't send those requests anywhere else.
Control Center, Lock Screen and Live Activities. The "Hey Rite" control turns hands-free on or off. While a workout clock or hands-free is running, its Live Activity shows on your Lock Screen and in the Dynamic Island, where anyone who can see your iPhone can see it. LiftWrite removes it when the workout or hands-free ends.
Apple Watch. If you use LiftWrite on Apple Watch, your iPhone and your Watch exchange workout and timer details directly with each other.
Spotlight. If you turn on system search in Settings, LiftWrite adds items to your iPhone's Spotlight index so you can find them in search. The index stays on your device, and turning the setting off removes LiftWrite's items.
Device backups. If you back up your iPhone with iCloud Backup or to a computer, that backup can include LiftWrite's database. Those backups are managed by your Apple account and device settings, not by LiftWrite.
What we don't do
LiftWrite has no ads and no analytics or tracking tools. We don't sell your personal information, and we don't share it with advertisers or data brokers. There's no account or sign-in.
Children
LiftWrite is only for adults 18 and older, and Friends is only for people 18 and older. We don't knowingly collect information from anyone under 18. If you think someone under 18 is using LiftWrite with Friends or a Card link, email us and we'll help delete what they shared.
Questions and help
You can ask questions about your information or request help at liftwrite@icloud.com.
Changes to this policy
If this policy changes, we'll update it in the app and on our website and change the date above. If a change means more of your information leaves your iPhone, we'll tell you in the app before it applies to you. This version is dated November 9, 2026 and goes with Terms of Use version 2026-11-08.