Privacy Policy

This Privacy Policy explains how Cadence Marketing LLC (“we,” “us,” or “our”) collects, uses, shares and protects personal information when you use MyLiftTracker, including the website at https://mylifttracker.com, the web app, and the optional connector for Claude and other apps (together, the “Services”).

MyLiftTracker is operated by Cadence Marketing LLC, and we decide how your personal information is processed. If you don't agree with this policy, please don't use the Services. If you have questions, email us at contact@mylifttracker.com.

Summary of key points

• What we collect: the details you give us (your name, email address, password and invite request), the workouts and body measurements you log, and technical information such as your IP address and browser.
• Health-related data: workouts, bodyweight and body fat you log may count as health data under some laws. We use it only to run MyLiftTracker for you. Our Consumer Health Data Privacy Policy covers it in detail.
• We're not a healthcare provider, and MyLiftTracker isn't a medical record. HIPAA doesn't apply to what you log here.
• We don't sell your personal information or show ads. If you accept analytics, Microsoft may use what Clarity collects for its own purposes, including advertising (see section 4).
• Google Analytics and Microsoft Clarity run only on our public pages, never inside the signed-in app. They store cookies only if you accept analytics.
• Depending on where you live, you can ask to see, correct, delete or get a copy of your information. Email contact@mylifttracker.com.

1. What information do we collect?

Information you give us

In short: we collect what you enter when you request an invite, create an account and use the app.

• Invite requests: your name, your email address, and anything you write in the optional message.
• Account details: your name, email address and password. We store your password only as a salted hash, never the password itself. We also keep your time zone, weight unit and sound settings.
• Training data: the exercises, workouts and sessions you create, and the sets, reps, weights, rest times, tempo, notes and personal records in them.
• Body measurements: bodyweight, body fat percentage and notes, if you choose to log them.
• Messages: if you email us, we keep your message and email address so we can reply.

Sensitive information. Some of what you log, such as bodyweight and body fat, may be treated as health data or sensitive personal information in some places. You decide whether to log it. We use it only to provide the Services to you, and we don't use it to infer anything about you. We're not a healthcare provider and this isn't a medical record, so HIPAA doesn't apply to it. Please keep medical details, such as diagnoses, conditions or medications, out of your notes — we don't need them.

Payment information. We don't collect any. The Services are currently free.

Information collected automatically

In short: some information, such as your IP address and browser details, is collected automatically when you use the Services.

• Security and activity logs: when you sign in, use your account, make changes (yourself or through a connected app), request an invite or connect an app, we record what happened along with your IP address, approximate country, browser (user agent) and the time. We use this to keep accounts secure, stop abuse and investigate problems.
• Device and usage data: our hosting and security providers process standard technical information, such as your IP address, browser type, operating system and the pages you request, to deliver and protect the Services.
• Cookies and similar technologies: see section 4 and our Cookie Notice.

Information from apps you connect

If you connect Claude (made by Anthropic) or another app through our connector, it can read your training data and bodyweight log, and add exercises, workouts and bodyweight entries or change your workouts, when you ask it to. It can't delete anything. Anything the app saves, such as a workout it builds, is stored in your account like anything you enter yourself. We record which apps you've connected and when each was last used. We don't receive your conversations with the app.

2. How do we use your information?

In short: to run MyLiftTracker, keep it secure, contact you about your account, improve our public site and meet legal obligations.

• To review invite requests and send invite codes.
• To create and manage your account and sign you in.
• To provide the Services: saving your workouts, showing your history, personal records and progress charts, running the rest timer, and letting connected apps work with your data when you ask them to.
• To send service emails, such as your invite code and important notices about your account or these policies. We don't send marketing emails.
• To protect the Services: blocking spam and bots, limiting repeated attempts, spotting suspicious sign-ins, and suspending accounts that break our Terms of Service.
• To understand how people use our public pages, so we can improve them (see section 4).
• To answer your messages and requests, including privacy requests.
• To comply with the law, enforce our Terms, and establish, exercise or defend legal claims.

Legal bases if you're in the EEA, UK or Switzerland

We rely on: performance of a contract, to provide the Services you signed up for; legitimate interests, for security, fraud prevention and improving our public site in ways that don't override your rights; consent, for analytics cookies and session recordings, which you can withdraw at any time; and legal obligations, where the law requires us to process information.

3. When and with whom do we share your information?

In short: only with service providers that help us run MyLiftTracker, with apps you choose to connect, and when the law requires it. We don't sell it.

Service providers. These companies process information on our behalf, under contracts that limit what they can do with it:

• Cloud hosting providers, which run our app servers and host our database in the United States.
• A content delivery and security provider, which delivers the site, protects it from attacks and bots, and runs the Turnstile check on our sign-in, sign-up and invite forms.
• An email provider, which sends our emails, such as invite codes, and hosts our inbox if you email us.
• Google Analytics, which measures visits to our public pages (see section 4).
• Microsoft Clarity, which records how people use our public pages, only if they accept analytics (see section 4).

We name our analytics providers because your consent depends on knowing them. For the others we list what they do rather than who they are; email contact@mylifttracker.com and we'll tell you which companies we currently use.

Apps you connect. If you connect Claude or another app, we share the training data it asks for with that app, at your direction. Anthropic's own terms and privacy policy apply to what happens inside Claude. You can disconnect an app at any time in Settings.

Exercise videos. Some exercises link to demonstration videos on YouTube, Vimeo or another site. Wherever the app shows one of those exercises, such as in a workout, its YouTube preview image loads from YouTube. A video itself only loads when you press play, and YouTube videos play from youtube-nocookie.com. When either happens, the site hosting the video receives your IP address and browser information.

Legal requirements and safety. We may disclose information if the law, a subpoena or a court order requires it, or when we believe in good faith that it's needed to protect the rights, property or safety of MyLiftTracker, our users or others.

Business transfers. If Cadence Marketing LLC is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that deal. We'll tell you before your information becomes subject to a different privacy policy.

We have not sold personal information in the past 12 months, and we won't. If you accept analytics, Microsoft Clarity sets identifiers that Microsoft may also use for advertising, which some state laws treat as sharing. That happens only with your consent, and you can withdraw it at any time in Cookie preferences or by sending a Global Privacy Control signal.

4. Do we use cookies and other tracking technologies?

In short: yes. Essential cookies keep you signed in and the site secure. Analytics runs only on our public pages, and stores cookies only if you accept.

Our Cookie Notice lists every cookie and browser storage item we use, what each one does and how long it lasts. You can change your choice there, or with Cookie preferences at the bottom of any public page.

Where analytics runs

Google Analytics and Microsoft Clarity load only on our public pages: the homepage, features, FAQ, about, invite request, sign-in, sign-up and legal pages. They never load inside the signed-in app, so they never see your workouts, body measurements or other training data.

Google Analytics

Google Analytics loads on our public pages for every visitor. Unless you accept analytics, it runs with storage switched off: it writes no cookies, creates no identifier, and sends Google only cookieless signals, such as that a page was viewed, which Google uses to estimate overall visit numbers. If you accept analytics, it sets the cookies listed in our Cookie Notice and measures visits in the usual way.

We don't use Google Analytics advertising features such as Google signals, remarketing or demographics reporting, and we remove email addresses and invite codes from page addresses before they're sent. You can also block Google Analytics everywhere with Google's browser add-on at https://tools.google.com/dlpage/gaoptout.

Microsoft Clarity

Clarity shows us heatmaps and recordings of how visitors scroll, click and move through our public pages, so we can find what's confusing. It loads only after you accept analytics, and it masks what you type into forms. It also sets identifiers on Microsoft's own domain, which Microsoft may use across other sites, including for advertising. Microsoft describes how it handles this data at https://privacy.microsoft.com/privacystatement.

Global Privacy Control

We honor Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and switch analytics off automatically, without asking: no analytics cookies and no Clarity. That includes turning it off if you accepted analytics before your browser started sending GPC. Google Analytics may still send the cookieless signals described above, because they store nothing and identify no one.

5. How long do we keep your information?

In short: while your account is open, and after that only as long as we need to.

• Account details and training data: until you delete your account or ask us to delete it. When an account is deleted, its details and training data are removed from our live database. Copies can remain in database backups until those are overwritten on our provider's normal schedule. Security and activity logs about the account, which can include your email address, IP address and browser, and your invite request are kept for the periods below.
• Invite requests: while we review them, and afterward for as long as we need to manage invites and prevent abuse. Ask us and we'll delete yours.
• Security events: 90 days. The IP addresses an account is used from: 180 days after they were last seen. Activity logs: as long as we need them to keep the Services secure and look into misuse. Ask us and we'll delete what we don't need to keep.
• Emails you send us: as long as we need them to deal with your message.

If the law requires us to keep something longer, for example to resolve a dispute, we keep it only for that purpose.

6. How do we keep your information safe?

In short: we use technical and organizational safeguards, but no system is perfectly secure.

Our safeguards include encryption in transit (HTTPS), passwords and app access tokens stored only as hashes, separation of each account's data, limits on repeated sign-in and sign-up attempts, bot checks on our forms, Cloudflare protection in front of our servers, and signing out suspended or deleted accounts straight away.

Still, no way of sending or storing data over the internet is 100% secure, and we can't guarantee that unauthorized people will never get past these measures. Use a strong password that you don't use anywhere else. If we learn of a breach that affects your personal information, we'll notify you as the law requires.

7. Do we collect information from minors?

In short: no. MyLiftTracker is for people 18 and older.

We don't knowingly collect personal information from, or market to, anyone under 18. By using the Services you confirm that you're at least 18. If we learn that we've collected information from someone under 18, we'll close the account and delete that information. If you think this has happened, email contact@mylifttracker.com.

8. What are your privacy rights?

In short: depending on where you live, you can ask to access, correct, delete or get a copy of your information, and you can withdraw consent.

• Access and copy: ask for the personal information we hold about you, in a format you can take elsewhere.
• Correction: fix information that's wrong. You can edit most of your training data yourself in the app.
• Deletion: ask us to delete your account and personal information.
• Withdrawing consent: change your cookie choice at any time with Cookie preferences at the bottom of our public pages or in Settings. For anything else, email us. Withdrawing consent doesn't affect processing that already happened.
• Connected apps: disconnect an app, or delete an access token, at any time in Settings.
• If you're in the EEA, UK or Switzerland, you can also object to or ask us to restrict certain processing, and you can complain to your local data protection authority.

To make a request, email contact@mylifttracker.com from the email address on your account. We'll answer within the time the law allows, such as 45 days under California law or one month in the EEA and UK. We won't treat you differently for exercising your rights.

When we delete an account, we may keep limited information where we need it to prevent fraud, resolve disputes, enforce our Terms or comply with the law.

You can also set most browsers to block or delete cookies. If you block the strictly necessary ones, you won't be able to sign in.

9. Controls for Do-Not-Track features

Most browsers have a Do-Not-Track (DNT) setting. There's no agreed standard for how websites should respond to it, so we don't respond to DNT signals. We do honor Global Privacy Control, as described in section 4.

10. Do United States residents have specific privacy rights?

In short: if you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia or another state with a consumer privacy law, you may have the rights below. The law can limit them in some cases.

Categories of personal information we have collected in the past 12 months

• A. Identifiers, such as your name, email address, IP address and account ID: Yes.
• B. Personal information listed in the California Customer Records statute, such as your name and email address: Yes.
• C. Characteristics of protected classifications, such as age, gender or race: No. We ask you to confirm you're 18 or older, but we don't collect your date of birth.
• D. Commercial information, such as purchase history: No.
• E. Biometric information: No.
• F. Internet or other network activity, such as pages viewed and, with your consent, recordings of how you use our public pages: Yes.
• G. Geolocation data: approximate country only, worked out from your IP address. No precise location.
• H. Audio, electronic, visual or similar information: No.
• I. Professional or employment-related information: No.
• J. Education information: No.
• K. Inferences used to build a profile about you: No.
• L. Sensitive personal information: Yes. This covers your account login (email address and password) and, if you log them, body measurements and training data that may count as health information. We use sensitive personal information only to provide the Services and for other purposes the law allows, never to infer characteristics about you, so the right to limit its use doesn't apply.

We keep each category for the periods in section 5.

Sources of personal information

You, your browser and device, and apps you connect. See section 1.

How we use and share personal information

See sections 2 and 3. We disclose personal information to service providers for business purposes under written contracts. We have not sold personal information in the past 12 months and won't. Apart from the Microsoft Clarity identifiers described in section 4, which are set only if you accept analytics, we don't share it for cross-context behavioral advertising.

Your rights

• Right to know whether we process your personal information, and to access it
• Right to correct inaccurate personal information
• Right to delete your personal information
• Right to get a copy of the personal information you gave us, in a portable format
• Right to opt out of the sale or sharing of personal information, targeted advertising and certain profiling. We don't sell personal information, and Microsoft Clarity only runs if you opt in; you can withdraw that in Cookie preferences or with Global Privacy Control.
• Right to a list of the categories of third parties, or the specific third parties, we've disclosed personal information to, where your state's law provides it
• Right not to be discriminated against for exercising these rights

How to exercise your rights

Email contact@mylifttracker.com. We also honor Global Privacy Control signals as an opt-out. You can use an authorized agent to make a request for you. We may ask for proof that the agent is authorized, and may deny the request without it.

Verifying your request

We'll confirm you are the person the information is about, usually by asking you to write from the email address on your account. We use information you give us for verification only for that purpose.

Appeals

If we decline your request, you can appeal by replying to our decision or emailing contact@mylifttracker.com with “Appeal” in the subject. We'll tell you in writing what we decided and why. If we deny your appeal, you can contact your state attorney general.

California “Shine the Light” law

California residents can ask once a year, free of charge, for information about personal information we disclosed to third parties for their own direct marketing in the previous year. We don't make those disclosures.

Consumer health data

Washington, Nevada and some other states give extra rights over consumer health data. Our Consumer Health Data Privacy Policy explains how we handle it and how to use those rights.

11. Is your information transferred internationally?

We're based in the United States, and our service providers store and process data there. If you use the Services from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from yours. Where the law requires it, we rely on safeguards such as the Standard Contractual Clauses our providers offer.

12. Do we make updates to this policy?

Yes, when our practices or the law change. The “Last updated” date at the top shows when this policy last changed. If we make a material change, we'll post a notice on the site or email you before it takes effect.

13. How can you contact us about this policy?

Email contact@mylifttracker.com, or write to us at:

Cadence Marketing LLC, United States. Email: contact@mylifttracker.com

14. How can you review, update or delete the data we collect from you?

You can see and change most of your data in the app, and manage connected apps in Settings. To get a copy of your data, correct your account details or delete your account, email contact@mylifttracker.com from the email address on your account.