CleanLift

Privacy

Privacy Policy

Effective date: October 10, 2026

CleanLift is operated by Martin Chalupa (“CleanLift,” “we,” “us,” or “our”). This policy explains how we handle information when you use the CleanLift app and website.

Information we collect

We collect information needed to provide the service, including:

CleanLift does not currently use advertising SDKs or Firebase Analytics. We do not sell personal information or use it for cross-context behavioral advertising.

How we use information

We use information to create and secure accounts, save and display workout history, provide requested AI video reviews and spoken feedback, maintain and improve the service, prevent abuse, respond to support requests, and comply with law.

Camera and gesture controls

While camera-based gesture detection is active, CleanLift processes camera frames on your device to detect body poses and recording gestures. It temporarily keeps a rolling buffer of up to two seconds of video frames on the device. An X gesture can start a provisional local recording before the gesture is confirmed. If confirmed, the recording may include those preceding frames; manual recording starts at the button press without this buffer. Rejected provisional recordings are discarded without uploading them or saving them to Photos. Live gesture detection does not itself send camera frames or pose measurements to our servers.

Completed recordings submitted for review are uploaded as part of the review workflow. You can also save recordings to your Photos library with permission. Those copies remain under your control and may sync through Apple’s services depending on your device settings; deleting your CleanLift account does not delete them.

AI video reviews

When you request a review, CleanLift uploads the video to our cloud storage and sends it, along with relevant workout context, to Google Vertex AI/Gemini to generate form feedback. AI output can be inaccurate and is not medical, physical-therapy, or professional coaching advice. Do not submit a video unless you are comfortable with this processing.

Service providers and disclosures

We use Google Firebase and Google Cloud to provide authentication, database, file storage, cloud functions, and Vertex AI/Gemini processing. These providers process information on our behalf to provide the service. We may also disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or in connection with a business transfer.

Our providers may process information in the United States and other countries where they or their service providers operate.

Retention and deletion

Submitted review videos and generated review audio are temporary. CleanLift is designed to delete them after the related review attempt has been completed or failed; the current backend cleanup job removes them and the related review-attempt record after approximately 24 hours. Cleanup may take longer if a job or cloud service is unavailable.

We retain workout history, account data, and AI usage/accounting records while your account is active, unless they are no longer needed for the purposes above or law requires otherwise. You may delete individual workouts in the app. You can delete your account in the app: open Account, choose Delete Account, and confirm. This removes your Firebase account and the Firestore and Storage data present when deletion runs, including workout history, custom exercises, AI review data, and app-local recordings. A review or upload already running may finish afterward and leave limited UID-linked review metadata or media; our initial deletion process cannot guarantee that such late writes are removed automatically. Contact support@cleanlift.training if you need help with remaining data. Deletion does not remove videos already saved to your Photos library, or your Apple ID or Google account.

Deleting your account does not cancel or refund an Apple subscription; you may continue to be charged. Cancel in Apple subscription settings. A verified active purchase may later be restored to a new account, but deleted workout history will not be restored. We retain purchase bindings to prevent two accounts from claiming one subscription, enable restoration and reconcile Apple billing events. While your account exists, the binding and UID-linked entitlement/token mapping remain, including after subscription expiry. When account deletion completes, we remove the old UID linkage, account token mapping and access grant. The purchase binding remains, containing the original transaction ID, environment, product ID, restoration eligibility, subscription status and access deadline, verification/deletion timestamps, and operational reconciliation metadata. This record is pseudonymous, not anonymous.

Detailed purchase metadata is retained while Apple reports active access, billing grace or billing retry, and during the retention period after the subscription ends. Once Apple verifies an end without retry or a revocation/refund, detailed metadata becomes eligible for removal 180 days after the later of account deletion and the verified effective subscription end. Our daily cleanup job rechecks Apple’s status before removing it; cleanup is deferred if Apple is unavailable. After cleanup, we retain the original transaction ID, environment, product ID and minimal restoration and record-management markers, without the old account linkage or detailed subscription status and timestamps. Apple billing events may cause us to retain updated subscription metadata again. The minimal restoration record remains while CleanLift supports subscription restoration, even after the 35-day deletion tombstone expires. If restoration support permanently ends, remaining markers will be deleted within 180 days under a separately reviewed subscriber and billing plan. This is an operational policy, not a legally mandated period. Recovery procedures must replay completed deletions and purchase-binding transitions before reopening access.

Firestore point-in-time recovery copies can remain for up to 7 days and scheduled Firestore backups for up to 28 days. Cloud Logging retains operational logs in the _Default bucket for 30 days and required audit logs for 400 days. Storage soft delete and object versioning are disabled. Separately from purchase bindings, the deletion process retains a pseudonymous deletion record: a keyed hash (HMAC) of your account identifier, the completion time, and a 35-day expiry. This record does not contain the original account identifier, but we can match it against a known identifier using our secret key to safely retry deletion and check recovery data. It is not anonymous. The recovery copies, logs, purchase bindings, and possible late review writes described above are separate from that record.

Your choices and rights

You can choose not to submit videos for AI review, edit or delete workouts available in the app, and request access to, correction of, or deletion of your personal information by contacting us. Depending on where you live, you may have additional privacy rights. We will respond to verified requests as required by applicable law.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No system or transmission is completely secure, however, and we cannot guarantee absolute security.

Age requirement

CleanLift is intended only for adults aged 18 or older. Do not use CleanLift or provide personal information if you are under 18.

Changes to this policy

We may update this policy as the service changes. We will post the updated version here and change the effective date. If a change is material, we will provide additional notice where required.

Contact

For privacy questions or requests, contact Martin Chalupa at support@cleanlift.training.