Cadence Lift Privacy Policy

Our Privacy Commitment

Cadence Lift is an on-device strength training logger. Your workouts, exercises, body-weight entries, and preferences are stored locally on your device. There is no account to create, and we collect no usage analytics and no telemetry. On iPhone, one feature contacts our server automatically: when Live Activities are enabled (the default), the app sends a small transient payload to our relay so your Lock Screen rest timer stays current — see "Rest-timer Live Activity updates" below. The app's other server features — the AI Coach and the optional Share workout link — run only when you choose to use them.

Cadence Lift runs on iPhone (with an Apple Watch companion) and on Android (with a Wear OS companion and Health Connect). This policy covers both. Sections that mention your iPhone, iCloud Backup, Apple Health, or Live Activities are iPhone-only; the "Health Connect (Android)" section below is the Android equivalent. On Android the features that send your data to a LightPath server are the optional AI Coach and the optional Share workout link — there is no iCloud Backup and no rest-timer relay (the Android rest timer is a fully local alarm). Two Google Play services also make network calls on Android but carry no workout data: Play Integrity (anti-abuse, run as part of each Coach request) and Google's in-app review prompt — both described below.

On iPhone, four features can involve data leaving your device. Three do nothing until you choose to use them (iCloud Backup, the AI Coach, and the optional Share workout link); one — Live Activity rest-timer updates — is on by default and can be turned off by disabling Live Activities for Cadence Lift:

• iCloud Backup backs your data up to your own private iCloud — we can't read it.
• The AI Coach sends a summary of your training to an AI service to generate feedback, but only when you use it and only after you accept a consent screen.
• Share workout link sends one workout you choose to our server, which hosts it at a public, unlisted link you can send to anyone; it expires automatically. The other ways to share a workout (Markdown, JSON, copy) never touch our server. See "Sharing your own data" below.
• Rest-timer Live Activity updates send a small transient payload to our relay each time you log a set, so the Lock Screen / Dynamic Island timer stays correct without the app running. The payload is deleted once the update is delivered.

All four are described in detail below. On iPhone, if you never enable Backup, use the Coach, or create a Share workout link, the only thing that leaves your device is the transient rest-timer relay payload described below — processed to deliver your timer update, then deleted — plus the anti-abuse records described in that section (a device public key and rate counters that expire within 24 hours, none containing workout data). You can turn the relay off too by disabling Live Activities. On Android, the AI Coach and Share workout link are the features that send your data off the device — use neither and your training data never leaves your phone; the only remaining network call is Google Play's in-app review prompt, which carries no workout data.

What the everyday app does NOT collect

Outside of the off-device flows described above, Cadence Lift does not collect, store off-device, or transmit:

• Usage analytics, behavioral data, or session telemetry
• Crash reports
• Advertising identifiers or cross-app tracking IDs
• Location data
• Contact information
• Any account, email address, or login

What we store on your device

All app data is stored locally on your device — using SwiftData (Apple's on-device framework) on iPhone, and Room (Android's on-device database) on Android:

• Workout history: sessions, exercises, sets, reps, weights, timestamps, and rest-timer state
• Templates: the routines you build (Push, Pull, Legs, or your own)
• Body-weight entries: any weight readings you log inside the app
• Reminders: the workout reminder schedule you configure
• Preferences: training goal, rest-timer overrides, and other settings

Uninstalling Cadence Lift permanently deletes all of this on-device data. (If you've turned on iCloud Backup, a copy remains in your own iCloud until you delete it there — see below.)

iCloud Backup (optional)

This section applies on iPhone only. Cadence Lift can back up your full workout history to iCloud so you can recover it on a new phone. This is off until you turn it on in Settings → Data → iCloud Backup.

• The backup is stored in your own private iCloud account (Apple's CloudKit private database). Only you can access it — LightPath Apps cannot read it, the same way Apple's own iCloud backups work.
• It never passes through, and is never stored on, any LightPath server.
• You control it: back up, restore, or stop using it at any time, and manage the stored data through your Apple ID's iCloud storage.

AI Coach (optional)

Cadence Lift includes an optional AI Coach that gives feedback grounded in the workouts you've logged. It is off until you start it, and the first time you use it you must accept an in-app consent screen before any data leaves your device. If you never use the Coach, none of the data below is sent anywhere.

When you do use the Coach, Cadence Lift sends, to power your feedback:

• A summary of your logged training — exercises, sets, reps, weights, RPE, any workout notes, and bodyweight.
• Your training goal (the strength / hypertrophy / conditioning style you pick in the app) and anything you enter in the Coach profile — goals, injuries / limitations, training days per week, experience level, and the short notes you ask the Coach to remember — plus the messages you type to the Coach.
• A per-install identifier used only to authenticate the request and prevent abuse. It is not an account and is not tied to your identity.

This data is sent to our processing service (a Cloudflare Worker) and our AI provider, Google (via the Gemini API), solely to generate your coaching response. To confirm each request comes from a genuine, unmodified install, the app first attaches an anti-abuse attestation: on iPhone this uses Apple's App Attest, and on Android it uses Google Play Integrity, which contacts Google's servers. The attestation contains no workout data. We do not sell your data, use it for advertising, or use it to track you across apps or websites. Requests are logged by our AI gateway for security and cost control and retained for a limited period, and are processed under Google's API terms. This is the data reflected in our App Store privacy disclosure and our Google Play Data Safety form (categories: Health & Fitness, Identifiers, and User Content — all used only for app functionality, never linked to your identity, never used for tracking). The rest-timer relay's transient payload (iPhone only) is covered by the same categories.

Rest-timer Live Activity updates (on by default)

This section applies on iPhone only. On Android the rest timer runs entirely on your device (a local alarm) and sends nothing to any server.Cadence Lift shows your rest timer as a Live Activity on the iPhone Lock Screen and in the Dynamic Island. To keep that timer correct without the app running, each time you log a set the app sends a small payload to our relay (a Cloudflare Worker), which asks Apple's push service to deliver the update to your device. This happens whenever Live Activities are enabled for Cadence Lift — which is the default.

What is sent:

• Your device's push token — Apple's delivery address for the update
• The current exercise name and set number, so the timer card can show them
• The fire time of the rest interval
• A per-install random identifier, used only to authenticate the request and prevent abuse — not an account, not tied to your identity

Retention:

• The pending update is deleted when it fires, is canceled, or expires — typically within your 1–5 minute rest interval, at most a few hours.
• The per-install identifier and your IP address appear only in rate-limit counters that self-expire within 24 hours.
• App Attest device keys — a public key and a counter, containing no workout data — are kept to verify requests come from the genuine app.
• Payloads are never logged.

To stop this traffic entirely, turn off Live Activities for Cadence Lift in iOS Settings. The in-app rest timer and its local notification keep working without it.

Apple Health integration

Cadence Lift can integrate with Apple Health if you grant permission. The integration is optional and the iPhone app works without it. The Apple Watch companion uses Apple Health while you're actively in a workout (see below).

What we write to Apple Health (with your permission)

• Finished workouts: when you end a session, Cadence Lift writes an HKWorkout record so the workout shows in Apple's Fitness rings.
• Body weight: when you log a body-weight entry inside Cadence Lift, that entry is mirrored to Apple Health.
• Heart rate and active energy (Watch only): while the Apple Watch companion is running an active workout, heart-rate samples and active-energy estimates from Apple's standard workout session are attached to the HKWorkout record. These come from your watch's sensors via Apple's HKLiveWorkoutBuilder — Cadence Lift does not derive or modify them.

What we read from Apple Health (with your permission)

• Body weight history: when you ask Cadence Lift to import body-weight readings from Apple Health, it reads up to the last 365 days so the in-app weight chart includes data you've already logged elsewhere.
• Heart-rate variability (HRV), optional: if you opt in to the readiness indicator, Cadence Lift reads your overnight HRV (heartRateVariabilitySDNN) to flag days your HRV is below your personal baseline. The reading is used only to draw the in-app badge — it is never stored, transmitted, or shared.
• Heart rate and active energy during a Watch workout: the Apple Watch companion subscribes to live heart-rate samples while a workout is active, both to attach them to the HKWorkout record and to power the optional "set start detected from your heart rate" rest-timer trigger. Sampling stops as soon as you end the session.

Apple Health data is stored on your device by Apple and governed by Apple's own privacy and Health Records policies. Other than the optional AI Coach — which, if you use it, can include your bodyweight in the summary it sends (see above) — Cadence Lift never transmits Apple Health data anywhere; the data simply moves between Cadence Lift's local storage and Apple Health's local storage on the same device (or the same iCloud-paired iPhone & Apple Watch, which Apple handles natively).

You can revoke Health permissions at any time in Settings → Privacy & Security → Health → Cadence Lift. The app handles revoked permissions gracefully — it simply stops writing to and reading from Health.

Health Connect (Android)

On Android, Cadence Lift integrates with Health Connect if you grant permission. The integration is optional and the app works fully without it. Health Connect data moves only between Cadence Lift's local storage and Health Connect on the same device — we never transmit it to any LightPath server. (The one exception is the optional AI Coach, which, if you use it, can include your body weight in the summary it sends — see "AI Coach" above.)

What we write to Health Connect (with your permission)

• Finished workouts: an Exercise Session record, plus an Active Calories Burned record over the same interval (when that permission is granted), when you end a session.
• Body weight: when you log a body-weight entry inside Cadence Lift.
• Body fat percentage: when you log a body-fat entry inside Cadence Lift.

What we read from Health Connect (with your permission)

• Body weight and body fat history: only when you tap "Import from Health Connect," so the in-app charts can include readings you logged in other apps. Cadence Lift skips records it wrote itself.

You can revoke Health Connect permissions at any time from Health Connect — open the Health Connect app (or reach it through your device's privacy or app settings) and go to App permissions → Cadence(the app appears under its on-device name, "Cadence"). The app handles revoked permissions gracefully — it simply stops reading and writing. Health Connect data is stored on your device by Android and governed by Google's Health Connect terms. We never sell or transfer your health data to anyone, and never use it for advertising.

Cadence Lift also includes a Wear OS companion: it shows your active session, lets you log sets from your wrist, and reads heart rate from the watch's sensors during a workout. Heart-rate readings stay on the watch — they drive the on-watch heart-rate display and the optional "detect when a set starts and ends" feature; only the resulting set start/end timing (never the heart-rate values themselves) is sent to your phone over the local Wear OS Data Layer, so your phone can start the rest timer. Sets you log on the watch sync to your phone the same way. None of this is transmitted to a LightPath server, and heart rate is never written to Health Connect on Android. When you end a session on your phone, Cadence Lift writes the Exercise Session record described above to Health Connect.

Apple Watch companion

Cadence Lift includes an Apple Watch companion that's installed automatically when you install the iPhone app on a paired Apple Watch. The watch app lets you log sets, watch the rest timer, and (optionally) trigger rest detection from your heart rate.

• Watch ↔ iPhone sync uses Apple's standard WatchConnectivity framework. Messages travel directly between the watch and the paired iPhone over Bluetooth / local Wi-Fi — they do not pass through any LightPath server.
• Shared on-device storage between the iPhone app, the watch app, and the home-screen widgets uses an Apple App Group container. It lives on your devices, not in iCloud and not on our infrastructure.
• Watch HealthKit: the watch app uses Apple's standard HKWorkoutSession to attach heart-rate and active-energy data to your workout. See the Apple Health section above for the full list.

Live Activities, widgets, and complications

This section applies on iPhone only.Cadence Lift uses Apple's ActivityKit to render the rest timer as a Live Activity on the iPhone Lock Screen and Dynamic Island while a session is active, and uses WidgetKit to render Smart Stack widgets and Apple Watch complications. The widgets and complications read from a small local snapshot file in the App Group — they do not phone home, fetch from any server, or run their own networking.

The Lock Screen / Dynamic Island rest timer is the exception: it's kept current by push. When you log a set, the app sends your device's push token, the exercise name, the set number, and a per-install identifier to our relay, which asks Apple to update the timer. The payload is deleted once the update is delivered. Turning off Live Activities for Cadence Lift stops this entirely — see "Rest-timer Live Activity updates" above.

Local notifications

Cadence Lift schedules two kinds of local notifications. The notifications themselves are scheduled and fired locally on your device. (The separate Live Activity timer on the Lock Screen is updated by push — see "Rest-timer Live Activity updates" above.)

• Rest-timer alerts when your between-set rest timer ends.
• Workout reminders on the schedule you choose in Settings → Reminders. You can turn these off entirely or per-day.

You can revoke notification permission at any time in your device's notification settings for Cadence Lift (on iPhone, Settings → Notifications → Cadence Lift; on Android, Settings → Apps → Cadence Lift → Notifications).

Data we do not use

Cadence Lift does not include:

• Analytics SDKs (no Google Analytics, Firebase Analytics, Mixpanel, Amplitude, or similar)
• Crash reporting services (no Crashlytics, Sentry, or similar)
• Advertising networks or ad identifiers
• Social or login SDKs (no Sign in with Apple, Google, Facebook, etc.)

On iPhone, the app contacts our backend for three things: the rest-timer Live Activity relay (on by default; disable Live Activities to stop it), the AI Coach (only when you use it), and the optional Share workout link(only when you tap it — see "Sharing your own data" below). On Android, LightPath-server contact happens for the AI Coach (only when you use it) and the optional Share workout link (only when you tap it); separately, two Google Play services make network calls that carry no workout data — Play Integrity (anti-abuse, part of each Coach request) and Google's in-app review prompt, which the app may surface after a session to ask for a Play Store rating. With the review prompt, the dialog and any rating you leave go directly to Google Play; Cadence Lift is never told whether the dialog appeared or whether you reviewed. Apart from those, everything works entirely offline.

Sharing your own data — your choice

Cadence Lift lets you share a finished workout. Most ways of sharing never touch our server: when you export a workout as Markdown or JSON, or copy it to the clipboard, the app hands the data straight to the system share sheet and you decide where it goes — a notes app, a chat, a file. We never see or store those exports.

Cadence Lift also offers an optional way to share that does use our server: Share workout link. When you tap it, Cadence Lift sends that single workout to our server, which stores it and hosts it at a public web page so you can send the link to anyone — the way you might share a workout with a training partner. Specifically:

• What is sent and stored: the workout you chose to share — its title, exercises, sets, reps, weights, RPE, and any notes you typed on that workout — plus a per-install identifier used only to authenticate the request and prevent abuse (not an account, not tied to your identity). Your other workouts, your Coach profile, and your body-weight history are not included.
• The link is public and unlisted: the page is reachable by anyone who has the link, which uses a long, randomly generated code that isn't listed or guessable. It is not password-protected — treat the workout as public once you send the link.
• It expires automatically: a shared link is deleted after about 30 days without a view, and after 90 days at the latest, after which the page returns "not found."
• You control whether one is ever created: nothing is uploaded unless you tap Share workout link. The Markdown / JSON / copy options above stay fully on-device.

This is the only way a workout is stored on our server, and it falls under the same disclosure categories as the rest of our backend use (Health & Fitness, Identifiers, and User Content — used only to provide the feature you asked for, never linked to your identity, never used for tracking or advertising). The Markdown, JSON, and copy options never touch our server on either platform.

Permissions Cadence Lift requests

On iPhone:

• Apple Health (optional): read body weight and (if you opt in) HRV; write finished workouts, body weight, and — from the Apple Watch companion during an active workout — heart-rate and active-energy samples. See above.
• Notifications (optional): deliver rest-timer alerts and workout reminders.
• Apple Watch pairing (automatic): if you have a paired Apple Watch, the companion app installs alongside the iPhone app. No additional permission prompt is shown for the watch beyond Apple's standard install confirmation.

On Android:

• Health Connect (optional): write finished workouts (Exercise Session and Active Calories), body weight, and body fat; read body weight and body fat when you tap Import. See above.
• Notifications (optional): deliver rest-timer alerts and workout reminders.
• Body Sensors (Wear OS companion): read heart rate on the watch during an active workout, for the on-watch display and set detection. The readings stay on the watch.

That's the entire list on both platforms. The app does not request location, camera, microphone, photo library, or contacts on either platform.

Children's privacy

Cadence Lift is not directed at children under 13 and we do not knowingly collect data from them. The everyday app keeps your training history on your device and we keep no database of your workouts — aside from any single workout you explicitly publish with Share workout link, which is stored only until the link expires; the off-device flows are the transient rest-timer relay (iPhone only), optional iCloud Backup to your own iCloud (iPhone only), and — on both platforms — the optional Share workout link and the optional AI Coach behind an explicit consent screen.

International users

If you use the AI Coach, create a Share workout link, or (on iPhone) have Live Activities enabled, those request payloads may transit infrastructure outside your country — on iPhone, Cloudflare and Apple's push service; on Android, Cloudflare and Google (the Gemini API, plus Google Play's anti-abuse and review services). They are processed to serve the request, not to build any store of your data. Your training history itself stays on your device (or in your own iCloud if you enable Backup on iPhone).

Changes to this policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated revision date at the top. Because we don't collect contact information, we cannot notify you directly — please check this page if you want to confirm the current version.

Contact

If you have questions about this privacy policy or about Cadence Lift's privacy practices, please contact us at:

• Email: steve@lightpathapps.com
• Website: https://lightpathapps.com