Privacy Policy

1. Who we are (data controller)

PrimedLifter is operated by SH Services, which is the data controller for the personal data described below.

• Controller: SH Services, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK), KvK number 78102421, established in the Netherlands.
• Contact: hello@primedlifter.app

2. What data we collect

• Account data: email address and (via Google sign-in, if used) your name and Google account identifier. Authentication is handled by Supabase Auth.
• Profile data: display name, chosen role (athlete or coach), units preference, and notification preferences.
• Training data: programs, blocks, exercises, prescribed and logged sets/reps/RPE/weights, training maxes, notes, and any video links you add.
• Health-related data: bodyweight entries you choose to record. You can turn bodyweight tracking off in Settings.
• Coaching relationships: invite codes and the links between coaches and their athletes.
• Push notification data: a device push subscription (endpoint + keys) for each device on which you enable push.
• Technical data: data your browser sends with each request (e.g. IP address, user-agent), processed by our hosting provider to deliver the service.

3. Why we use it, and our legal basis

• To provide the service (accounts, programs, tracking, coach features) — legal basis: performance of our contract with you.
• To send notifications you have not opted out of (e.g. coach feedback, program assignment) — legal basis: contract / your consent for push on a device.
• To keep the service secure and working — legal basis: our legitimate interest in operating and protecting the platform.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who your data is shared with

• Your coach / your athletes: if you accept a coach's invite (or invite an athlete), the connected party can see the training data, programs, and training maxes relevant to that coaching relationship. Ending the relationship in Settings stops further sharing.
• Public programs: if you mark a program public, other users can view and copy it. Your private training maxes and logged actuals are not shared this way.
• Processors: we use Supabase (database, authentication, and serverless functions) and our hosting provider to run the service. They process data on our behalf under data-processing terms.

5. Where data is stored and transfers

Data is stored in our Supabase project. Where data is processed outside the EU/EEA, it is protected by appropriate safeguards (such as Standard Contractual Clauses) provided by the relevant processor.

6. How long we keep it

We keep your personal data for as long as your account is active. When you delete your account, your profile and the data you own (programs, lifts, logged training, bodyweights, coaching links, and push subscriptions) are permanently removed. Some records may persist briefly in encrypted backups before they age out.

7. Your rights

Under the GDPR you have the right to:

• Access and port your data — use Settings → Account & privacy → Export my data to download a copy as JSON.
• Erasure ("right to be forgotten") — use Settings → Account & privacy → Delete my account to permanently delete your account and owned data.
• Rectification — correct your data directly in the app, or contact us.
• Object / restrict / withdraw consent — e.g. turn off push or notification types in Settings.
• Complain to your local supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).

8. Cookies & local storage

We use only what's necessary to run the app: an authentication session (so you stay logged in) and local storage for your preferences and an offline cache (service worker). We do not use third-party advertising or tracking cookies.

9. Children

PrimedLifter is not intended for anyone under 16. We do not knowingly collect data from children under 16.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or a notice within the platform. The "last updated" date above reflects the latest revision.

11. Contact

Questions or requests about your data? Email hello@primedlifter.app.