Privacy Policy
This Privacy Policy explains how the operator of JAM Lifting at jamlifting.com (“JAM Lifting,” “we,” “us”) collects, uses, and shares information when you use the app, Club, Shop, or related pages. It is part of our Terms of Use.
1. What we collect
We collect only what the product needs to log training, run Club, and fill shop orders.
Account. Email address, hashed password (handled by our auth provider), and sign-in timestamps. We do not see your raw password.
Profile. Display name, optional avatar, program and training days, home gym, verification flag (admin-only), and whether you are signed in or in a session (so friends can see status).
Training log. Sessions, exercise names, sets, reps, weights, rest, RPE, cardio mode/resistance/program notes, undo history on-device, and related achievements.
Heart rate (iPhone and Apple Watch, optional). If you allow Apple Health access, the app reads your heart rate during a workout. That heart rate is uploaded with each logged set and stored with the workout in your account, so it shows in your history on every device. The Watch app may also save finished workouts to Apple Health. We only read heart rate; we do not read other Health records.
Identifiers. An account user ID that links your rows (log, profile, posts) together.
Body metrics (optional). Height, body weight, BMI we calculate, and body-fat % if you enter it. This is health-related data you choose to store.
Photos (optional). Progress photos (front/left/right) and images attached to posts. You control whether they stay private or go on the feed.
Club. Posts, captions, likes, friend requests, friend list, and “nice lift” counts. Admin posts may be shown to all members.
Gym extras (optional). Home-club slug, unofficial crowd estimate, “I’m here” check-in and auto check-out, and a gym check-in barcode/QR you type, screenshot, or scan for your own check-in. If you are signed in, that check-in code (and the optional member name and email you enter with it) is saved to your account so it syncs across devices. We are not your gym, do not receive your official membership file from it, and never collect your gym password.
Shop. Item, size, and the email/shipping details Stripe collects at checkout. We do not receive full card numbers, CVC, or bank logins.
Device and technical. Browser type, approximate time zone, pages loaded, error logs, notification permission, and a push-subscription endpoint if you allow alerts. We use local storage on your phone so the app works if the network drops.
We do not require precise GPS. Crowd and gym features use the club you pick, not a live map of your location, unless your browser separately asks and you allow it.
2. How we use it
- Create and secure your account
- Save and sync your log across devices
- Show today’s session, charts, awards, and share cards
- Run Club (feed, friends, presence, notifications you enabled)
- Fill merchandise orders and prevent fraud
- Email you for sign-in, password reset, and order receipts
- Fix bugs, stop abuse, and meet the law
We use this information only to run the app. We do not track you across other companies’ apps or websites, we do not show ads, and we do not use Apple Health or heart-rate data for advertising or marketing. We do not sell your personal information. We do not use your progress photos to train public AI models. We do not rent your email list.
3. Who we share with
We share data with vendors who process it for us, not to market you as their customer:
- Supabase — accounts, database, and file storage
- Netlify — hosting and serverless shop/crowd functions
- Stripe — payments
- Resend (or similar) — transactional email from mail.jamlifting.com
- The gym or payment pages you open yourself (your gym’s site or app, Stripe Checkout)
Other members see what you publish: profile name, avatar, public or friend-visible posts, likes, and online / in-session status. They do not get your email or your private lift history unless you share it.
We may disclose information if required by law, to protect a person from serious harm, or in a sale or shutdown of the project (the buyer must honor this policy or give you notice).
4. Where it lives
The app is hosted in the United States. Vendors may store copies in U.S. regions. If you use JAM Lifting from another country, you understand your data is processed in the U.S., which may have different privacy laws than your home country.
A copy of recent logs can also sit in your browser (local storage) so the phone still works offline. Clearing site data on the device deletes that local copy; it does not always delete the cloud account until you use Delete account.
5. How long we keep it
We keep account and training data while the account is open. After you delete the account we remove or de-identify logs, posts, photos, and profile rows we control, except backups that roll off on a normal schedule, legal holds, shop records we must keep for tax, and content other people still need (for example a post you made that a friend already downloaded).
Stripe keeps payment records under its own policy. Email providers keep message logs for a limited time.
6. Your choices
- Access / export. Progress → Export CSV for lifts. You can also email us for a copy of profile data we hold.
- Correct. Edit profile name, program, gym, and body entries in the app.
- Delete. In the app: Account settings → Delete account (iPhone: More → Account → Delete account). This erases your profile, log, heart-rate data, photos, posts, and sign-in. This is permanent. Export first if you want a file.
- Photos. Do not upload a pose if you do not want it stored. Remove shots from Progress; deleted cloud objects may linger in backups briefly.
- Notifications. Turn them off in the phone or in the app reminder controls.
- Marketing. We do not send promo blasts today. Transactional mail (confirm, reset, receipt) is required to run the account.
If you are in the EEA, UK, or a similar region, you may also have the right to object, restrict processing, or lodge a complaint with a supervisory authority. We rely on: performing the contract (account and log), your consent (photos, optional metrics, push, gym extras), and legitimate interests (security, abuse, basic product analytics).
7. Security
We use HTTPS, hashed passwords at the auth provider, and access rules so members cannot read another person’s private log. No method is perfect. Do not reuse passwords. You are responsible for who can unlock your phone.
8. Children
The service is for adults 18 and older. We do not knowingly collect data from children. If you believe a minor created an account, email us and we will delete it.
9. California and similar U.S. state laws
California residents can request to know, delete, or correct personal information as described above. We do not sell or “share” personal information for cross-context behavioral advertising as those terms are used in the CCPA/CPRA. We do not use sensitive information (health metrics, precise photos of the body) to infer characteristics for ads.
Authorized agents may email us with proof of authority. We may need to verify the account email first. We will not discriminate against you for exercising a privacy right.
Categories we collect: identifiers (email, profile name), commercial info (shop SKU/size), internet activity (app use), geolocation (club you selected, not precise GPS), visual info (photos you upload), and health-related info (weight, body fat, workout loads, and heart rate from Apple Health/Watch). See sections 1–3 for sources, uses, and recipients.
10. Cookies and local storage
We use first-party local storage and similar browser storage to keep you signed in, remember gym mode, sound, and drafts, and to cache the app (including a service worker). We do not run third-party ad pixels. Blocking all storage will break sign-in and offline logging.
11. Changes
We may update this policy. The “Last updated” date will change. Continued use after an update means you accept the revised policy. For material changes we will try to notice you in the app or by email.
12. Contact
Privacy questions and deletion requests:
JAM Lifting · jamlifting.com
hello@mail.jamlifting.com