MyLVLLift. Log. LVL up.

Privacy

Your training data is yours.

MyLVL is designed to work locally first. This policy explains when information stays on your device and when paid or connected features use cloud services.

Effective August 18, 2026 · Version 2026-08-18.1

Who this notice covers

This notice applies to the MyLVL mobile app, mylvl.app, and support interactions. In this notice, “MyLVL,” “we,” and “us” refer to the operator of the MyLVL product. The privacy contact is support@mylvl.app. MyLVL is currently offered only to adults age 18 and older.

Information stored on your device

MyLVL may store workout sessions, exercises, sets, programs, body-weight entries, goals, preferences, notes, and app settings on your device. Local-only use does not require an account or network call for workout logging. This data stays on the device unless you choose an account, sync, AI, health-export, support, or other connected feature.

Information used by connected features

Depending on the features you use, we process:

  • Account and profile data, such as email address, authentication identifiers, age eligibility, preferences, goals, equipment, and training constraints.
  • Workout and fitness data, such as sessions, exercises, sets, weights, repetitions, duration, body-weight entries, personal records, notes, programs, and derived training signals.
  • Purchase and entitlement data, such as store, product, subscription status, transaction timing, and restore state. MyLVL does not receive your full payment-card number.
  • Technical and support data, such as app version, platform, operating-system and device details, timestamps, error messages, crash state, and information you send to support.

We use this information to deliver features you request, authenticate and sync your account, provide purchase access, maintain security and reliability, prevent abuse, respond to support, comply with legal duties, and establish or defend legal claims. Where applicable, the legal bases are performance of our agreement with you, your consent for optional processing, our legitimate interests in operating and securing the service, and compliance with law.

AI coaching and generated programs

Personalized AI is optional and requires a separate in-app choice. When you request it, MyLVL sends selected recent workout history, goals, preferences, equipment, and derived training context through our server to DeepSeek as the primary model provider. Anthropic may be used only as an emergency fallback. The model payload excludes your email, display name, MyLVL account identifiers, payment data, and free-text injury notes. Saved AI results identify the provider, model, and generation time. AI output may be inaccurate and is not medical advice.

Service providers and international processing

Connected features use service providers acting for MyLVL or as independent platform providers:

  • Supabase for authentication, database storage, and server APIs.
  • PowerSync for eligible multi-device synchronization.
  • RevenueCat for purchase entitlement and restore management.
  • Apple and Google for app distribution and store billing.
  • DeepSeek for primary AI inference and Anthropic for emergency AI fallback.
  • Cloudflare for website hosting, delivery, and request security.

These providers may process data in countries different from yours. MyLVL must assess and implement any transfer mechanism and contractual safeguards required for a launch region; a connected feature will be restricted where those requirements are not met. Platform-provider terms also apply to data Apple or Google controls directly.

Apple Health and Health Connect

If you enable health export and grant platform permission, MyLVL writes completed strength workouts and estimated calories to Apple Health or Health Connect. MyLVL does not read your health-platform records. Health permissions can be changed in your device settings. When you delete an exported workout or use in-app account deletion, MyLVL attempts to remove the matching record it created on the current health platform. Cleanup can be unavailable after permission is revoked, on another device/platform, or during a platform failure; review and delete any remaining record in Apple Health or Health Connect. Health and training data is never sold or used to personalize advertising.

Advertising

The current app release does not contain a third-party advertising SDK. A future free tier may include advertising after this notice and the app-store disclosures are updated. Free-tier ad placement will not use workout, body, injury, health-platform, AI, purchase, or other sensitive training data. Any legally optional tracking or personalization choice will be separate. Without that permission, only a privacy-preserving contextual ad may be served. If an ad is unavailable or the device is offline, workout logging continues.

Retention

Local data remains until you delete it in MyLVL or remove the app. Synced product data remains while your account is active and is removed through account deletion. Detailed opt-in AI call logs are deleted after 7 days; AI diagnostic events after 30 days; crash reports after 90 days; and feedback after 2 years. Detailed purchase webhook payloads are redacted after 30 days, while limited purchase and entitlement evidence may be retained for up to 7 years for tax, accounting, fraud, and dispute needs. Consent evidence is retained for up to 6 years, and completed privacy-request and deletion-job records for up to 3 years. Apple, Google, and infrastructure providers may retain records they control under their own legal and backup schedules.

Your choices and rights

In MyLVL, open Settings → Privacy & data to export your data, withdraw personalized-AI permission, or delete your account and local data. You may also use our privacy request page to request access, correction, deletion, restriction, objection, or an appeal. Depending on where you live, you may also complain to your data protection or consumer-protection authority. You may withdraw consent without affecting processing already completed lawfully.

Account deletion

In-app deletion removes the MyLVL authentication account, active cloud profile, workout and program data, saved AI results, diagnostics associated with the account, and MyLVL's RevenueCat customer record, attempts current-platform health cleanup, then clears MyLVL data on that device. It does not cancel a subscription managed by Apple or Google, guarantee cleanup of health records on other devices/platforms or after permission loss, or erase store transaction records controlled by Apple or Google. See the account deletion page for the complete process and an external request option.

Security

We use safeguards intended to protect information in transit, at rest, and in access-controlled systems. No service can guarantee absolute security. Do not send passwords, full payment details, or unnecessary health information to support.

Changes and contact

Material updates will receive a new version and effective date and, when required, an in-app notice or new choice. Privacy questions can be sent to support@mylvl.app; use “Privacy request” in the subject line.