Version 1.2.1 · Effective: 28 October 2026
Lux Lift is provided by Lux Wealth Group Pty Ltd (ACN 702 600 682), Australia ("we", "us"). We handle your personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles and, where they apply to you, the EU and UK General Data Protection Regulation (GDPR). For the GDPR, we are the controller of your information. Privacy contact: support@luxwealthgroup.com.au
We collect only what the app needs. We never sell your data and never use it for advertising. Your health and training entries go to our cloud database only if you say yes — if you say no, you can use the training features on this device without cloud sync. Our database is in Sydney. Lux Lift is a training log and does not provide medical advice, diagnosis or treatment. If you choose to connect an AI app (such as Claude or ChatGPT) to Lux Lift, it can read your training data and suggest changes. Nothing is saved until you approve it in Lux Lift. That provider handles what it reads under its own terms. If you buy Lux Lift Pro, Apple or Google takes the payment; we never see your payment details. If you connect Apple Health or Health Connect, Lux Lift reads your sleep, resting heart rate and body weight, and saves your completed strength workouts there. Readings it takes from the health app are saved in Lux Lift and go to our cloud only if you said yes to storing health data. An AI app you connect can read them only if you switch on health sharing for that app, separately for each health source. You can delete your account in the app or on our website.
We do not collect your precise location, contacts, photos, payment details, or any food log. Body weight, check-in answers, profile answers, your protein target, training data and health-app data may be health information, which the law treats as sensitive.
After your first sign-in we ask whether you agree to us storing your health and training data in our cloud database so it syncs and is backed up. If you say yes, we store it and use it only to run the app for you. If you say no, you can use the training features on this device in local-only mode: the app does not sync your health and training entries to our cloud. Your account, your choice records and technical data are still stored. Information you choose to send us in feedback or a support request may still reach us. You can pause syncing, or withdraw consent (which deletes the cloud copy), at any time in Settings.
You can connect Apple Health (iPhone) or Health Connect (Android) in Settings. If you do, Lux Lift reads your sleep and resting heart rate to show them alongside your training, reads your body weight (for example from a smart scale) to add it to your weigh-ins, and writes each completed strength workout to the health app. It reads nothing else. Sleep and resting-heart-rate readings are saved as Lux Lift readings and kept for a rolling 90 days. Like your other health and training entries, they go to our cloud only if you said yes to storing health data; otherwise they stay on this device, in the app's encrypted storage, separately for each account. On your device they are left out of your device's own backups (such as iCloud or Google backup) and are removed when you sign out, switch account or delete your account. You can delete them in Settings at any time. Weigh-ins Lux Lift reads are saved as ordinary Lux Lift body-weight entries, marked "from Apple Health" or "from Health Connect". You can see, edit or delete them like any other entry. Like your other health and training entries, they go to our cloud only if you said yes to storing health data; otherwise they stay on this device. Deleting one in Lux Lift removes Lux Lift's copy, not the original record in the health app. Each workout Lux Lift writes is a copy of your training entry; once written, Apple Health or Health Connect holds that copy under your control. We never use health-app data for advertising or marketing, never use it for data mining, never use it to train AI models and never sell it. Your sleep, resting-heart-rate and imported body-weight trends can be read by an AI app only if you connect one and switch on health sharing for it (see "AI tools"). If you remove Lux Lift's permission in the health app, syncing stops. Lux Lift only ever deletes health-app records it wrote itself; it never deletes records made by other apps or devices.
To run your account; sync and back up your data (if you said yes); show your history, targets and per-lift suggestions; work out next-weight suggestions automatically from your logged workouts, and your check-in answers if you give them (they are suggestions about training load only; you decide what to lift); show your sleep and resting heart rate next to your training and save completed workouts to your health app (if you connect one); send the reminders and rest-timer alerts you turn on; show you changes an AI app you connected suggests, save the ones you approve, and let you undo them where possible; let an AI app you connected read the health trends you switched on for it, only to help with your training; keep a log of what an AI app you connected accesses, so you can see it and we can look into misuse; give you Lux Lift Pro if you buy it, and check its status with Apple or Google; answer your feedback and support requests; keep the service secure and fix problems; and meet our legal obligations. We will ask before using your information for any new purpose.
If the GDPR applies to you, we rely on: the contract with you, to provide your account and the app, including Lux Lift Pro if you buy it; your explicit consent, for health and training data (given on our health-consent screen) and for health-app data (given when you allow Lux Lift in Apple Health or Health Connect and on our health-consent screen), including, if you connect an AI app and switch on health sharing for it on our consent screen, letting that app read your sleep, resting-heart-rate and imported body-weight trends; you can withdraw it at any time; our legitimate interest in keeping the service and your account safe, for technical and security logs and the AI access log; and legal obligations where they apply.
Reminders and rest-timer alerts are scheduled and shown by your own device. We don't use a push-notification service, so no notification provider receives your information. You can turn them off in the app or in your device settings.
Lux Lift doesn't send your data to AI services for its own purposes.
You can choose to connect an AI app to your Lux Lift account. Nothing is shared until you connect one and approve it on our consent screen. Only accounts that keep their data in our cloud can connect; local-only data is never shared.
Once connected, the AI app can read your recent workouts, personal bests, the body-weight trend from weigh-ins you entered yourself, current program, Lux Lift's next-weight suggestions and your history of AI changes. Suggestions are about training load only. They are not medical advice and don't take account of injury, illness or how you feel.
Health data is shared separately, and only where your version of Lux Lift offers health sharing. The AI app can read your sleep, resting-heart-rate and imported body-weight trends from Apple Health or Health Connect only if you switch on health sharing for that AI app and that source on our consent screen. Every switch is off until you turn it on, and you can turn it off at any time in Settings → Connected AI. Health trends cover up to the last 90 days and are averages and changes, never your raw readings. Lux Lift never uses data shared with an AI app for advertising or marketing, never sells it, never uses it for data mining and never uses it to train AI models.
The AI app can also suggest changes: logging a workout, a new draft program, a change to your current program, or undoing an earlier AI change. Nothing is saved until you open Lux Lift and approve the exact change. Suggestions you don't approve expire after 10 minutes. A draft program never replaces your current one unless you choose it.
It can't read your check-in answers, notes, profile answers, settings or account details, and it can't delete your account or anything you entered yourself.
In Lux Lift (Settings → Connected AI) you can see pending suggestions, approve or reject them, see every change you approved and, where possible, undo it, turn health sharing on or off where it is offered, and disconnect.
When an AI app you connected reads or suggests something, we record which app, which action, the result and the time, linked to your account. Our database provider also automatically records technical details of each request, such as IP address, approximate location and device details (see "What we collect"). These logs are kept for the period set by our plan, currently at least seven days.
We also keep an AI access log: each time an AI app you connected accesses your data, it records which app, what kind of data it accessed and when. It doesn't contain your workouts or other content. You can see it in Settings → Connected AI → Access log. We use it so you can check what was accessed, and so we can look into misuse.
What the AI app reads from Lux Lift goes to its provider. Until it leaves Lux Lift, this policy applies in full: it is sent encrypted, health data goes only as trends, every access is recorded in your AI access log, and we never use it for advertising, never sell it and never use it to train AI. Once the provider receives it, the provider handles it under its own terms and privacy policy, which may include storing it outside Australia and, depending on your settings with that provider, using it to improve its models. We don't control what the provider does with it. Turning a switch off or disconnecting stops any further access at once, but it doesn't get back what the provider already received; ask the provider about that. Review the provider's terms, and your settings with it, before you turn sharing on.
If you copy a prompt or your log out of the app and paste it into an AI app yourself, you are sharing it with that provider under its terms.
Only service providers that run the app for us, and only for that purpose: Supabase (database, login, backups and technical logs); Google (only if you choose "Continue with Google"); Apple (only if you choose to sign in with Apple); Apple or Google (only if you buy Lux Lift Pro: they take the payment and tell us your subscription status); our web-hosting provider (technical data only); our email provider, which holds the messages you send to our support and feedback addresses; and Resend, which sends our sign-up confirmation and password-reset emails (your email address and the email, including one-time sign-in links). Resend may use automated tools, including AI, to screen a small sample of emails for abuse and safety. It doesn't use them to train AI models. Our service providers may use their own sub-processors under their terms. Our service providers, including tools we use to build and run the app, may process information only as needed to operate the app. Data from health apps is exchanged with Apple Health or Health Connect only on your own device; imported readings and weigh-ins are then handled like your other entries. If you connect an AI app, what it reads goes to that app's provider (see "AI tools"). We share information with authorities only where the law requires.
Your account and app data are stored in Supabase's Sydney data centre. Supabase is a United States company and its staff may access data from outside Australia to operate the service. Google sign-in is handled by Google in the United States and other countries. Sign in with Apple is handled by Apple in the United States and other countries. If you use a private relay address, the emails we send you pass through Apple's relay service. Our account emails are sent through Resend, a United States company. They are sent from servers that currently appear to be in Japan, and Resend stores email records and logs in the United States. Our email provider is part of a United States group and may process email in the United States, India and the Philippines. Our web server currently appears to be in Sydney based on its network location (our host has not confirmed its physical location); our hosting provider and its cloud provider are United States companies and may access technical data such as your IP address from overseas. We handle AI connections on servers in Sydney. If you connect an AI app, its provider receives what it reads and may store it outside Australia. For Claude (Anthropic) and ChatGPT (OpenAI), that includes the United States. If you add another AI app yourself, the information goes to wherever that provider operates; check its privacy policy before you connect.
Data is encrypted in transit. Database rules restrict each person to their own data, and we test those rules. Access by our team and tools is limited to what is needed to run and fix the app. For app-store and AI-directory reviewers we keep one demo account with made-up data; it contains no real person's information.
While your account is open we keep your data. We delete the live account and app records within 30 days of an account-deletion request. Existing Supabase backups follow their own retention period of about seven days. Supabase's technical logs are kept for the period set by our plan, currently at least seven days. Resend keeps its email records and logs for about 30 days. Our web host's technical logs may have a different period; we will state it once confirmed. We keep records of your choices (age, terms, consent) while your account is open, so we can show what you agreed to; they are deleted with your account. Feedback is deleted after 12 months. We keep subscription records for as long as tax and accounting laws require us to keep records of transactions, then delete them. If you have not signed in for 23 months, we email you; if you still have not signed in by 24 months, we delete the account. Local-only data stays on your device until you delete it or sign out — signing out deletes it from the phone, so export it first. Sleep and resting-heart-rate readings are kept for a rolling 90 days, on your device and, if you said yes, in our cloud (see "Health apps"); imported weigh-ins are kept like your other body-weight entries.
We keep the record of an AI connection while it is active and for 12 months after you disconnect. We keep each change you approved, and its suggestion, for 12 months so you can see and undo it. If you change or delete something an AI app suggested, we delete its content from this history and keep only a record that the change happened. Suggestions you rejected, or that expired or couldn't be applied, are deleted after 30 days. A draft program from an AI app is deleted when you open or discard it, or after 90 days if you do neither. We keep each entry in your AI access log for 24 months, then delete it. Disconnecting an AI app doesn't remove it. If you withdraw health consent, your access log stays so you can still see it; it is deleted if you delete your account. Apart from your AI access log, all of this is deleted if you delete your account or withdraw health consent.
When you delete your account, your activity and access logs are deleted with it.
You can delete your account and its data in the app (Settings → Account), or without the app at luxwealthgroup.com.au/lift/delete-account, where you confirm the request from the email address on your account. We delete the live account and app records within 30 days; what we keep for a short time after that, and why, is set out in "How long we keep it". Deleting your account doesn't cancel a Lux Lift Pro subscription; cancel it in your Apple or Google account settings first. Deleting Lux Lift's data doesn't delete records in Apple Health or Health Connect, or what an AI app's provider already received.
You can see and correct your data in the app, export it free as CSV or JSON (Settings), pause cloud sync, withdraw health consent (which deletes the cloud copy), disconnect a health app, turn health sharing with an AI app on or off where it is offered, see, approve or reject suggestions from an AI app, undo changes you approved where possible, and disconnect it (Settings → Connected AI), delete your account (see "Deleting your account"), and ask us what we hold. If the GDPR applies to you, you can also ask us to restrict or stop some uses, receive your data in a portable format (our export does this), withdraw consent at any time, and complain to your local data protection authority. We reply within 30 days, free of charge. If we refuse a request we tell you why and how to complain.
Lux Lift is for people aged 18 and over. We do not knowingly allow anyone under 18 to create an account, and we delete any such account we find.
If a breach is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC) as the law requires, and, where the GDPR applies, the relevant data protection authority.
Contact us first; we reply within 30 days. If you are not satisfied you can complain to the OAIC (oaic.gov.au) or, if the GDPR applies to you, to your local data protection authority. We post changes here with a new date and tell you in the app before any material change.