Privacy Policy

This Privacy Policy describes how June AI Apps LTD ("June AI Apps," "Company," "we," "us," or "our"), a company registered in Israel, collects, uses, stores, shares, and protects information in connection with the MaxLift AI mobile application (the "App") and our website at https://maxliftai.com (the "Website").

By downloading, installing, accessing, or using the App or visiting the Website, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service available at https://maxliftai.com/terms.

We collect information in the following categories:

A. ACCOUNT AND IDENTITY INFORMATION

When you create an account, we collect data depending on your chosen authentication method:

Anonymous accounts: A unique Firebase user identifier (UID) is generated automatically. No name or email is collected.

Apple Sign-In: Your Apple-provided identity token, and — only if you authorize — your name and email address. Apple may provide a private relay email address rather than your actual email.

Google Sign-In: Your Google ID token, access token, name, and email address as provided by Google's authentication service.

Email and password: Your email address and a securely hashed password.

If you upgrade from an anonymous account by linking Apple, Google, or email credentials, the associated identity data is added to your existing account.

B. PROFILE AND PERSONALIZATION DATA

During the onboarding personalization quiz and throughout your use of the App, you may provide:

Body metrics: Age, biological sex, height, and weight. Fitness profile: Training experience level, primary and secondary fitness goals, target body type, and priority muscle groups. Lifestyle factors: Self-assessed sleep quality, stress level, nutrition adherence, and daily activity level. Schedule preferences: Preferred number of workouts per week and preferred workout duration. Injury and health information: Body part affected, severity (mild, moderate, severe), description, and affected movement patterns. Exercise preferences: Disliked exercises or exercise type preferences.

C. WORKOUT AND PERFORMANCE DATA

When you use the App to train, we collect:

Session data: Start time, completion time, active duration, workout rating (1–5), perceived effort, session notes, and intensity adjustments with reasons. Exercise data: Exercises performed (including order), sets completed or skipped, and skip reasons. Set-level data: Weight lifted, weight unit, target and completed repetitions, target and actual RPE (rate of perceived exertion), rest duration, whether weight was adjusted from the suggestion, adjustment reasons, and per-set notes. Derived data: Personal records, estimated one-rep maximums (e1RM), strength baselines, volume metrics, training streaks, adherence rates, and muscle group volume distribution.

D. PROGRAM AND TRAINING DATA

Generated training programs, program state (active, paused, completed, abandoned), program history, completed and skipped workouts with skip reasons (busy, vacation, sick, injured, mental health day, other), and check-in snapshots (periodic reassessments of lifestyle factors).

E. USER PREFERENCES

Weight unit preference (kg or lbs), app theme (system, light, or dark), rest timer behavior, sound preferences, and exercise substitution choices.

F. TECHNICAL AND DEVICE DATA

We do not actively collect device-specific information such as device model, operating system version, or hardware identifiers. However, the third-party services we use (Firebase, RevenueCat) may collect standard device metadata as part of their normal operation. See Section 6 for details.

G. SUPPORT CORRESPONDENCE

If you contact us via the in-app support email, we receive your email address, the contents of your message, and your Firebase user ID (automatically included in the email body for support purposes).

We use the information we collect for the following purposes:

Providing the service: Generating personalized training programs, exercise selections, weight suggestions, and periodization structures through our Training Engine (a combination of AI and rule-based algorithms).

Personalizing your experience: Adapting training recommendations based on your profile, injuries, goals, performance history, lifestyle factors, and feedback.

Tracking your progress: Calculating personal records, training statistics, estimated strength levels, volume trends, adherence metrics, and progression data.

Operating the App: Authenticating your identity, managing your account, syncing data across devices, processing subscriptions, and recovering in-progress workouts after app interruptions.

Improving the service: Analyzing aggregated and anonymized usage patterns to improve our algorithms, fix issues, and develop new features.

Communicating with you: Responding to support requests and notifying you of material changes to the App or our policies.

Complying with legal obligations: Fulfilling requirements under applicable privacy and data protection laws.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not use your data for advertising or behavioral profiling beyond what is necessary to operate the App.

We recognize that much of the data you provide — including body metrics, injury information, workout performance, and lifestyle assessments — constitutes sensitive health and fitness information. We apply the following protections to this data:

Purpose limitation: Health and fitness data is used exclusively to generate and improve your personalized training experience within the App. It is not used for advertising, profiling for unrelated purposes, or shared with insurance companies, employers, data brokers, or advertisers.

Access restriction: Your individual health and fitness data is accessible only to you through your authenticated account. We do not expose individual user data to other users.

No third-party health sharing: We do not share your health and fitness data with third parties except as necessary to operate the service (see Section 6) and as required by law (see Section 7).

User profile data scope: Your profile data (age, sex, height, weight, injuries, lifestyle factors) is used by the Training Engine to generate programs. This data is processed within our infrastructure and is not transmitted to external AI services or third-party model providers for training purposes.

Injury data sensitivity: Injury and health limitation data you report is used solely to adjust exercise selection and training parameters within the App. This does not constitute a medical record, clinical assessment, or healthcare service.

Your data is stored in the following locations:

Cloud storage: Account data, training programs, program history, and completed workout sessions are stored in Google Firebase (Firestore) under your authenticated user ID. Firebase infrastructure is operated by Google and is subject to Google's security practices and certifications.

Local device storage: User preferences are stored in your device's local storage (UserDefaults). Workout recovery data, pending sync sessions, recent workout history, strength baselines, check-in data, personal records, and statistics are stored as encrypted JSON files in the App's sandboxed Documents directory on your device.

Authentication data: Firebase Authentication credentials are stored in your device's iOS Keychain, which persists across app installations.

Image cache: Exercise demonstration thumbnails fetched from our content delivery network (cdn.maxliftai.com) are cached locally on your device for performance.

Subscription data: Subscription status and purchase history are managed by Apple through the App Store and by RevenueCat. We receive subscription status information but do not store payment details such as credit card numbers.

We use the following third-party services to operate the App. Each service receives only the data necessary for its function:

FIREBASE (GOOGLE) — Authentication, cloud database (Firestore), and App Check (device attestation). Data shared: User ID, authentication credentials, training programs, workout sessions, and program history. Privacy policy: https://firebase.google.com/support/privacy

APPLE SIGN-IN — Account authentication. Data shared: Authentication request; Apple returns identity token, and optionally name and email. Privacy policy: https://www.apple.com/legal/privacy/

GOOGLE SIGN-IN — Account authentication. Data shared: OAuth authentication flow; Google returns ID token, access token, and user profile information. Privacy policy: https://policies.google.com/privacy

REVENUECAT — Subscription management and entitlement verification. Data shared: Firebase user ID and subscription status. RevenueCat communicates with Apple's App Store on our behalf. Privacy policy: https://www.revenuecat.com/privacy

APPLE APP STORE — Purchase processing and subscription billing. Data shared: Subscription transactions are processed entirely by Apple. We do not receive or store payment card information. Privacy policy: https://www.apple.com/legal/privacy/

CONTENT DELIVERY NETWORK (cdn.maxliftai.com) — Serving exercise demonstration media. Data shared: Standard HTTP request data (IP address, user agent) when loading exercise videos and thumbnails.

We do not use third-party analytics SDKs, advertising networks, crash reporting services, or behavioral tracking tools within the App.

We do not sell your personal information. We share your data only in the following limited circumstances:

Service providers: With the third-party services listed in Section 6, solely to operate and maintain the App.

Legal requirements: When we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request.

Protection of rights: To enforce our Terms of Service, protect the safety of our users or the public, or protect the rights, property, or safety of June AI Apps LTD.

Business transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your data may be transferred to the acquiring entity. We will notify you of any such transfer and any choices you may have regarding your data.

With your consent: We may share information in other circumstances with your explicit consent.

User-initiated sharing: When you use the App's share feature (such as sharing a personal record image), the content you choose to share is transmitted through your device's standard sharing interface. The shared image does not contain personally identifiable information beyond what is visible in the image itself (exercise name, weight, reps, date).

We retain your data according to the following principles:

Active accounts: We retain your data for as long as your account is active and as necessary to provide the App's services.

Deleted accounts: When you delete your account through the App's settings, we initiate deletion of your data from our cloud systems (Firebase Firestore). This includes your programs, workout sessions, program history, and account document. Account deletion is processed promptly, and data is removed from active systems within thirty (30) days. Residual copies in automated backups may persist for up to ninety (90) days before being overwritten.

Local data: Data stored locally on your device (preferences, cached workout history, strength baselines, statistics) is removed when you delete the App from your device.

Authentication data: Firebase Authentication data stored in your device's Keychain may persist after app deletion. You can remove this by signing out before deleting the App.

Subscription records: Records of your subscription transactions are retained by Apple and RevenueCat in accordance with their respective retention policies and applicable financial record-keeping requirements.

Support correspondence: Emails sent to our support address are retained for as long as necessary to resolve your inquiry and for a reasonable period thereafter for quality assurance and legal compliance.

Depending on your location, you may have the following rights regarding your personal data:

Access: You may request a copy of the personal data we hold about you.

Correction: You may update your profile information, injury data, and preferences directly within the App at any time.

Deletion: You may delete your account and associated cloud data through the App's settings (Settings > Danger Zone). You may also request deletion by contacting us at the email address below.

Data portability: You may request that we provide your data in a structured, commonly used, and machine-readable format where technically feasible.

Objection and restriction: You may object to or request restriction of certain processing of your data.

Withdrawal of consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed before the withdrawal.

To exercise any of these rights, contact us at support@maxliftai.com. We will respond to verified requests within thirty (30) days, or within the timeframe required by applicable law.

You may also manage certain data choices directly:

Account type: You may use the App with an anonymous account to minimize the personal information associated with your usage. Profile data: You may update your injuries, goals, and preferences at any time through the App. Notifications: You may disable local notifications through your device's iOS settings. Subscriptions: You may manage or cancel subscriptions through your Apple ID account settings.

MaxLift AI is not intended for individuals under the age of sixteen (16). We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us at support@maxliftai.com and we will take prompt steps to delete such information and terminate the associated account.

If we become aware that we have collected personal information from a child under 16 without verified parental consent, we will delete that information as quickly as possible.

We implement commercially reasonable technical and organizational measures to protect your data, including:

Encryption in transit: All data transmitted between the App and our cloud services uses TLS (Transport Layer Security) encryption.

Encryption at rest: Data stored in Firebase is encrypted at rest using Google's infrastructure-level encryption.

Authentication security: Firebase Authentication handles credential management with industry-standard practices, including secure token handling and password hashing. Apple Sign-In and Google Sign-In use OAuth 2.0 and OpenID Connect protocols.

App attestation: Firebase App Check verifies that requests to our backend originate from the authentic MaxLift AI app, helping prevent unauthorized access.

Local data isolation: Data stored on your device is within the App's sandboxed container, which is protected by iOS's built-in security model.

No method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security and are not responsible for unauthorized access resulting from factors beyond our reasonable control, such as device compromise, network interception, or vulnerabilities in third-party services.

June AI Apps LTD is based in Israel. Your data may be processed and stored in Israel and in other countries where our service providers operate (including the United States, where Google and RevenueCat infrastructure is located).

Israel has been recognized by the European Commission as providing an adequate level of data protection. Where your data is transferred to countries that have not received an adequacy determination, we rely on appropriate safeguards such as standard contractual clauses adopted by the European Commission, or the service provider's compliance with recognized data protection frameworks.

By using the App, you acknowledge and consent to the transfer and processing of your data in these locations.

If you are located in the European Economic Area (EEA), the United Kingdom, or a jurisdiction with similar data protection laws, we process your personal data on the following legal bases:

Contract performance: Processing necessary to provide the App's services to you, including account management, program generation, workout tracking, and subscription management. This covers the data described in Section 2 (A through E).

Legitimate interests: Processing necessary for our legitimate interests, including improving the App, ensuring security (App Check), and preventing fraud, provided these interests are not overridden by your rights.

Consent: Where required by applicable law, we obtain your consent before processing certain data, such as injury and health information. You may withdraw consent at any time as described in Section 9.

Legal obligation: Processing necessary to comply with applicable laws, regulations, or legal processes.

The MaxLift AI Website (https://maxliftai.com) may use essential cookies necessary for the Website to function. We do not use advertising cookies, third-party tracking cookies, or behavioral analytics on the Website.

The App itself does not use cookies. The App does not contain advertising SDKs, third-party analytics trackers, or behavioral profiling tools.

The App uses a Training Engine — a combination of artificial intelligence and deterministic algorithms — to generate personalized workout programs and recommendations based on the data you provide.

How it works: The Training Engine processes your profile data, reported injuries, preferences, and workout history to select exercises, determine training volume, set rep ranges, suggest weights, and structure periodization.

No external AI services: Your personal data is not sent to external large language model (LLM) providers, third-party AI APIs, or cloud-based machine learning services for the purpose of generating your training programs.

Automated decision-making: The training programs generated by the App are the result of automated processing. These outputs are recommendations only and do not have legal or similarly significant effects on you. You are not obligated to follow any recommendation and retain full control over your training decisions. If you have concerns about automated processing, you may contact us to request human review of how your data is used.

The App uses local notifications only (processed entirely on your device) for rest timer alerts and workout reminders. We do not send remote push notifications, and we do not collect or store push notification tokens.

You can disable notifications at any time through your device's iOS Settings.

We may update this Privacy Policy from time to time to reflect changes in our practices, the App's features, or applicable laws. When we make material changes, we will:

Update the "Last updated" date at the top of this page. Make reasonable efforts to notify you through the App or via email.

Your continued use of the App after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with an updated policy, you should stop using the App and delete your account.

We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our privacy practices, please contact us at:

June AI Apps LTD Email: support@maxliftai.com Website: https://maxliftai.com

We will endeavor to respond to all privacy-related inquiries within thirty (30) days.