ArcliftGet the app

Privacy Policy

Last updated

This policy explains what Arclift does with your information. It covers the Arclift app for iPhone, and this website, arclift.app. Both are run by Yassine Zeriouh.

The short version

  • Arclift has no account system. There is nothing to sign up for.
  • Your workouts are stored on your device and synced through your own private iCloud account. No server of ours ever receives them, and we cannot read your training data.
  • Apple Health is optional and switched off until you turn it on.
  • Usage analytics and ad measurement run only if you choose Allow when iOS asks whether Arclift may track, the first time you open Arclift, and you can withdraw that at any time in Arclift’s settings or in iOS Settings. They never contain exercise names, notes, weights, reps or free text.
  • Nothing is sold. If you allow measurement, a few partners receive device identifiers and app events so we can tell which ads bring people to Arclift and whether they subscribe. If you don’t, none of them ever hears from your device.

Data you create in Arclift

Everything you log stays in a database on your device: workout names and notes, start and end times, exercises, sets, weight, reps, time, distance, RPE, rest durations, personal records, templates, custom exercises and any photos you attach to them, and your unit and progression preferences.

That database is mirrored to the private database of your own iCloud account, in a container named iCloud.io.zeriouh.arclift, so your training is available on every device signed in to the same Apple Account. This is Apple’s CloudKit service. Records in a private CloudKit database are accessible to you and not to us. We have no way to read, export or restore them.

Sync has no in-app switch. If you are not signed in to iCloud, or you turn iCloud off for Arclift in the iOS Settings app, Arclift falls back to storing everything locally and keeps working exactly the same way.

Apple Health

The Health integration is optional and off until you turn it on, and iOS asks for your permission separately on top of that. You can change or revoke it at any time in the Health app under Sharing, or in Arclift’s settings.

Arclift asks to write two kinds of data:

  • Workouts, so a finished session counts toward your activity
  • Estimated active energy burned for that session

Arclift asks to read five kinds of data:

  • Body weight, to turn bodyweight exercises into real volume
  • Heart rate, for a session’s average and peak
  • Heart rate variability, resting heart rate and sleep analysis, to judge recovery

All of it is processed on your device. Health data is never used for advertising and is never included in analytics.

Recovery is scored on your device by comparing the last day against your own rolling baseline. The only thing that score is allowed to do to your training is hold a progression suggestion steady instead of increasing it. It never raises a target, never forces a deload, and missing Health data always resolves to normal training. Nothing about you is decided automatically in a way that produces legal effects or similarly significant effects, so Art. 22 GDPR does not apply, and every suggestion is a suggestion you are free to ignore.

One thing worth knowing: a few Health-derived values are saved alongside the workout they belong to, namely your body weight at the moment you finished, that session’s average and maximum heart rate, and a reference to the workout written to Health. Because they are part of the workout record, they sync to your private iCloud database with the rest of it.

Analytics and ad measurement

Arclift asks for your permission before it collects any analytics or measures any advertising. The question is Apple’s own tracking prompt, shown right after a screen that explains what is shared and with whom. It comes up once, when you first open the app after installing it, or, if a library you already had arrived through iCloud and skipped the setup, the first time the app opens with that library. Nothing described in this section runs unless you choose Allow in that prompt; if you choose Ask App Not to Track, or have switched tracking requests off for all apps, none of it runs. You can withdraw your answer at any time in Arclift under Settings › Privacy › Analytics & ad measurement, or in the iOS Settings app under Privacy & Security › Tracking. Withdrawing stops every partner named below and deletes the advertising identifiers we had shared for attribution.

Usage analytics

Arclift sends usage analytics through PostHog, on its EU Cloud, so the events are stored on servers in the European Union. Nothing is sent before you allow it, and nothing further is sent once you withdraw.

What is sent:

  • Which parts of the app are used, such as starting a workout, completing a set, finishing a workout, opening the summary, exporting a share card, or viewing and dismissing the paywall
  • Coarse numbers attached to those events, such as how many exercises or sets a session had, how long it lasted, how many personal records it produced, and which plan type was selected
  • Your onboarding answers as fixed categories, such as goal, experience level, equipment and preferred session length
  • Reliability events when an operation fails, reduced to a stage and an error code with the original message deliberately discarded
  • Standard technical context collected by the analytics library: platform, operating system name and version, app version and build, bundle identifier, device manufacturer, model and type, screen size, language, time zone, whether the connection is WiFi or cellular, and whether the build came from the App Store, TestFlight or a simulator
  • An installation identifier, which is a random identifier the analytics library generates on your device the first time Arclift runs and stores only in the app’s own storage. It is not derived from your device, your Apple Account or anything else about you, it carries no identity, and it changes if you delete and reinstall the app.

Your IP address necessarily reaches the analytics servers, because every network request carries one. Arclift marks every event so that the provider does not look up a location from it, so no country, region or city is derived or stored alongside your events.

Because some of those counts describe a workout, Apple classes this as fitness data on the App Store privacy label. It means the shape of a session, never its contents: how many sets, how long, how many records, and never which exercise, which weight or how many reps.

What is never sent:

  • Exercise names, workout or template names, and any note or free text you type
  • Weights, reps, distances, times or any other value from a set
  • Any Health data
  • Identifiers for your workouts, templates, exercises or sets
  • Prices, product identifiers, transaction identifiers or receipts
  • Your name, email address, precise location, contacts, photos or file paths

Two independent filters enforce this before anything leaves the device: an allowlist of permitted property names, and a scrubber that strips anything matching a name, note, weight, rep count, identifier or path pattern.

We cannot tell who you are from these events. To be precise about the legal term, though, they carry a persistent installation identifier, so under the GDPR they count as pseudonymous rather than anonymous data.

Ad measurement

We advertise Arclift on Google Ads and on Meta platforms (Facebook and Instagram). To know which of those ads actually bring people to the app, and whether those people go on to subscribe, the app includes three measurement libraries. All three start only after you allow measurement, and all three stop when you withdraw it. None of them is used to show you personalised ads: the consent signals we send to Google and Tenjin say measurement yes, ad personalisation no.

Google Analytics for Firebase, from Google, generates a pseudonymous app instance identifier and records the first open, sessions, and in-app purchase events, together with app version, device model, operating system and language, and the Identifier for Vendors (IDFV). It receives the Identifier for Advertisers (IDFA) only if you allow tracking on the system prompt described below. Google uses this to report which Google Ads campaigns led to installs and purchases, including on-device conversion measurement, which matches events on your device without sending your identity to Google, and modelled conversions, which are estimates rather than user-level matches. Google’s privacy policy and its page on how it uses information from apps that use its services apply.

The Meta SDK, from Meta Platforms, records that the app was installed and opened, with app and device information, the IDFV, and an anonymous identifier the library generates itself. It receives the IDFA only if you allow tracking. Meta uses this to credit its ads with installs and subscriptions, and processes it as an independent controller under its own privacy policy.

Tenjin is a mobile measurement service that puts the results of every ad network side by side. It receives a pseudonymous installation identifier generated on your device, the IDFV, your IP address and the approximate region it implies, app and device information, and install and session events. It receives the IDFA only if you allow tracking. Tenjin also receives copies of Apple’s SKAdNetwork postbacks: campaign-level signals that Apple sends from the operating system, without any user or device identifier. Arclift sets a SKAdNetwork conversion value of zero once per install, which registers the install and reports nothing about what you do afterwards. Tenjin’s privacy policy applies.

RevenueCat, which already manages your subscription (see Purchases below), ties the two halves together. When you allow measurement, the app gives RevenueCat the matching identifiers: the Firebase app instance identifier, Meta’s anonymous identifier, Tenjin’s installation identifier, the IDFV, and the IDFA if you allowed tracking. It also collects Apple’s Search Ads attribution token so installs from Apple Search Ads can be credited. RevenueCat then reports subscription events on our behalf, such as a trial starting, a purchase, a renewal or a cancellation, to Google Analytics, Meta and Tenjin, so an ad can be credited with a subscription. Those reports carry the product, a timestamp, the currency and the price, never your payment details. Withdrawing your consent deletes those identifiers from your RevenueCat record.

App Tracking Transparency

Your answer to Apple’s tracking prompt is your answer to everything in this section. If you choose Allow, Arclift runs the analytics and measurement described above, and it may read your device’s advertising identifier (IDFA) and share it with Google, Meta, Tenjin and RevenueCat so that an install or a purchase can be matched to the ad that led to it. If you choose Ask App Not to Track, the app never reads the IDFA and none of the partners above hears from your device. You can change your choice at any time in the iOS Settings app under Privacy & Security › Tracking; switching tracking off there also switches off analytics and ad measurement in Arclift.

The Analytics & ad measurement toggle in Arclift’s settings switches all of the above off on its own, whatever iOS allows. Switching it back on needs tracking to be allowed for Arclift.

Purchases

Arclift Pro is an in-app purchase. Apple processes the payment, and we never see or handle your card, billing address or Apple Account details.

Subscription state is managed for us by RevenueCat, so that a purchase you make on one device is recognised on another. RevenueCat receives the App Store transaction information, the product and offering identifiers, and standard app and device context such as app version, operating system version, device model, country and whether the purchase is a sandbox one. It generates an anonymous identifier for the installation. Arclift never gives it an email address, a name or any account identifier, because it has none to give. If you have allowed measurement, RevenueCat also reports subscription events to Google Analytics, Meta and Tenjin, as described under Ad measurement above; if you have not, it does not.

Notifications

Rest alerts and the reminder about a workout you left running are local notifications, scheduled on your device by the app itself. Arclift has no push notification capability and no notification server, so nothing about them leaves your phone.

Camera and photos

If you make a share card, you can pick a photo from your library or take a new one. The card is composed entirely on your device and handed to the iOS share sheet or saved to your photo library when you ask for it. Your photos are never uploaded to us or to anyone else.

Exercise videos

Exercise demonstration videos ship with the app as on-demand resources and are downloaded from Apple’s servers the first time you need them. No third party is involved and no information about what you watched is collected.

This website

arclift.app is a set of static pages. It sets no cookies, stores nothing on your device and asks you for nothing. Like any web server, our hosting provider records a technical log of requests, which typically includes your IP address, the page requested, the time, the referring page and your browser’s user agent. Those logs exist to deliver the site and to detect abuse, and they are kept only for as long as the provider needs them for that purpose.

To learn which pages people read and where they come from, the site counts visits with OpenPanel, open-source analytics software that we run ourselves at a.getmilestones.app rather than use as a third-party service. Each page view, and each click on a link to another site such as the App Store, sends the page address and title, the referring page, and your browser’s user agent and IP address. OpenPanel turns the user agent into a browser, operating system and device type, and the IP address into an approximate location (country and city); it does not store the IP address itself. To tell visits apart without a cookie, it combines the IP address, the user agent and a secret that changes every day into an identifier, so the same visitor cannot be recognized from one day to the next. These statistics carry no name, email address or IP address.

Why we are allowed to process this

The GDPR requires a legal basis for each purpose. Ours are:

  • Running the app you asked for (Art. 6(1)(b) GDPR, performance of a contract): storing your workouts on your device, syncing them to your own iCloud account, and delivering Arclift Pro to you once you have bought it.
  • Your consent (Art. 6(1)(a) GDPR, section 25(1) TDDDG for storing and reading identifiers on your device, and, for health data, Art. 9(2)(a) GDPR): reading from and writing to Apple Health, and everything under Analytics and ad measurement above, including the advertising identifiers shared through RevenueCat. You can withdraw either at any time, in Arclift’s settings or in the Health app, with effect for the future.
  • Our legitimate interest (Art. 6(1)(f) GDPR): keeping the app reliable through the coarse failure reports described above, delivering this website, counting visits to it, and defending against abuse of it. Our interest is in a working product; the data involved is minimal and carries no identity.
  • Legal obligations (Art. 6(1)(c) GDPR): where tax or commercial law requires records of a purchase to be retained, that retention is Apple’s and RevenueCat’s, not ours.

Who else receives data

We use these providers, and no others:

  • Apple, for iCloud sync, Health, the App Store, video delivery and SKAdNetwork
  • RevenueCat, for subscription and entitlement management and, if you allow measurement, for reporting subscription events to the partners below
  • PostHog, for usage analytics, only if you allow it
  • Google (Google Analytics for Firebase and Google Ads), Meta Platforms and Tenjin, for ad measurement, only if you allow it. Google and Meta decide for themselves how they use the measurement data they receive, so for that data they act as independent controllers rather than as our processors.
  • Our hosting providers, for serving this website and storing its visit statistics

We do not sell your information, we do not share it with advertisers or data brokers, and we do not use it to build a profile of you. We may disclose information if a law or a valid legal request requires it, though in practice we hold almost nothing that could be disclosed.

How long anything is kept

Your workout data lives on your device and in your iCloud account for as long as you keep it. Deleting the app removes the local copy; deleting the app’s data from iCloud in the iOS Settings app removes the synced copy. Analytics events are kept only as long as they are useful for understanding how the app is used, and are deleted on the retention schedule of our PostHog plan; they carry no identity, so they cannot be traced back to you individually. Google Analytics keeps event data for at most fourteen months; Meta and Tenjin keep measurement data for the periods set out in their own policies. Subscription records are retained by RevenueCat and Apple for as long as needed to service the purchase and to meet their legal obligations. Website request logs are kept for the short period our hosting provider needs them to operate and secure the service. Website visit statistics are kept as long as they help us understand how the site is used; they carry no IP address and only an identifier that changes daily, so they cannot be traced back to you.

Your choices

  • Stop analytics and ad measurement: in Arclift under Settings › Privacy › Analytics & ad measurement. This stops PostHog, Google, Meta and Tenjin at once and deletes the advertising identifiers shared through RevenueCat. Past analytics events carry only an installation identifier and no identity, so we have no way to find yours in order to delete it.
  • Stop tracking: in the iOS Settings app under Privacy & Security › Tracking. The app then never reads the advertising identifier, and analytics and ad measurement stop too.
  • Stop Health access: turn the Health integration off in Arclift’s settings, or revoke it in the Health app.
  • Stop iCloud sync: turn Arclift off under iCloud in the iOS Settings app, or sign out of iCloud.
  • Delete everything: delete the app, and delete its iCloud data in the iOS Settings app under your Apple Account › iCloud › Manage Account Storage.
  • Skip website statistics: a content blocker that blocks a.getmilestones.app, or turning JavaScript off, stops arclift.app from counting your visit. The site works the same either way.
  • Manage your subscription: in the iOS Settings app under your Apple Account › Subscriptions, or from the Arclift settings screen.

Your rights

If you are in the EU or the EEA, the GDPR gives you the right to ask us for a copy of the personal data we hold about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to have its processing restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on our legitimate interest (Art. 21). Where processing rests on your consent, you can withdraw that consent at any time with effect for the future (Art. 7(3)), without affecting what was lawful before you withdrew it.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, where you work, or where you think the problem happened.

In practice, the data most people care about is the training data, and that is the part we genuinely cannot reach: it sits on your device and in your own private iCloud database. Write to us anyway and we will do whatever we can, and tell you plainly where our reach ends.

Children

Arclift is not directed at children. Because Apple Health access and usage analytics rely on your consent, and Art. 8 GDPR sets the age for giving that consent at 16 in Germany, we ask that anyone under 16 use Arclift only with a parent’s or guardian’s involvement. We do not knowingly collect personal data from children.

International transfers

Apple processes iCloud, Health and App Store data in its own global infrastructure. PostHog stores analytics on its EU Cloud, so the events stay in the EU, though PostHog itself is a US company and its staff can reach that data in support of the service. RevenueCat, Google, Meta and Tenjin are based in the United States, so subscription and measurement data reach the US. Google and Meta are certified under the EU-US Data Privacy Framework, which the European Commission recognises as adequate protection. Where a transfer leaves the EEA without such an adequacy decision, it is covered by the European Commission’s Standard Contractual Clauses under Art. 46(2)(c) GDPR, together with the relevant provider’s own supplementary measures. You can ask us for a copy of the mechanism that applies to a given transfer.

Changes to this policy

If this policy changes in a way that matters, the date at the top of the page changes with it, and material changes will be noted in the app’s release notes.

Contact

Questions about privacy go to support@arclift.app. The controller within the meaning of Art. 4(7) GDPR is Yassine Zeriouh.

We have not appointed a data protection officer. Arclift is run by one person, the training data never reaches us, and neither large-scale monitoring nor large-scale processing of special-category data is a core activity, so the thresholds in Art. 37(1) GDPR are not met.