GDPR rights

1. Data controller

The data controller for ParseLift is Lucas Ekström, an individual developer operating from Sweden. All GDPR contact should go to support@parselift.com. Please include the email address registered to your ParseLift account so we can identify the right record.

2. Why we process your data

ParseLift processes personal data only to run the app and the subscription service you have asked for. The core purposes are:

• Creating and managing your account and preferences.
• Generating, running, and adapting your training plan.
• Syncing your training data between your devices.
• Verifying and renewing your Pro subscription.
• Answering questions through the Pro AI coach.
• Keeping the service reliable and secure.

3. Legal bases (Articles 6 and 9 GDPR)

• Contract (Article 6(1)(b)): to deliver the app, sync your account, verify subscriptions, and provide customer support.
• Legitimate interest (Article 6(1)(f)): to keep the service reliable and secure through server logs, abuse prevention, and rate limiting. This also covers checking that your email address is verified before we grant the one-time Pro Preview free trial, used only to prevent trial abuse (such as throwaway accounts farming free AI usage). These activities are weighed against your rights and only use what is strictly needed.
• Consent (Article 6(1)(a)): for optional features you choose to use. The Pro AI coach receives your training context only when you send it a message or request a session review, and you can stop sharing at any time by not using the coach. Choosing an affiliate region for shopping links is optional and can be changed in Settings. Crash reporting (Sentry) also relies on your consent: it is off by default and you control it in Settings under Diagnostics.
• Legitimate interest (Article 6(1)(f)): to investigate AI quality and safety reports you submit through the flag control. Those reports are bounded to the review intent, outcome, proposed changes, reasons, and server metadata needed to understand the issue.
• Health-related details (Article 9(2)(a) GDPR): your self-reported restrictions, injury notes, and prenatal or postpartum status count as health data. We process them only with your explicit consent, given when you enter them, and only to keep your plan and coaching safe for your body. You can edit or remove them in your training profile at any time.
• Legal obligation (Article 6(1)(c)): where we must retain data to meet tax, billing, or other legal requirements.

4. Categories of personal data

• Account data: email, display name, sign-in method.
• Training profile: age, biological sex, height, bodyweight, training history, motivation, self-reported restrictions.
• Training data: plans, sessions, sets, reps, weights, personal records, exercise notes.
• Daily and session check-ins: sleep, energy, soreness, session feel, rate of perceived exertion.
• Preferences: units, theme, equipment, notification settings.
• Subscription state: Pro status, product identifier, verification timestamp.
• Assistant history and reports: Pro AI coach prompts and replies, plus AI session-review reports you submit.
• Diagnostics: crash logs, performance metrics, and a random app-install identifier.

5. Your rights

If you live in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with equivalent protection, you have the following rights:

• Access (Article 15). Ask for a copy of the personal data we hold about you.
• Rectification (Article 16). Ask us to correct inaccurate or incomplete data.
• Erasure (Article 17). Ask us to delete your data where no other legal reason requires us to keep it. You can delete your account yourself from the app or by email. See the Delete your account page.
• Restriction (Article 18). Ask us to pause processing while a question about your data is being resolved.
• Portability (Article 20). Receive your data in a structured, machine-readable format. The in-app CSV export covers this for your training data. For the rest, email us.
• Object (Article 21). Object to processing that relies on legitimate interest.
• Withdraw consent (Article 7(3)). Stop any consent-based processing at any time: turn off diagnostics in Settings, stop sharing with the coach by not sending messages, or edit your restrictions and injury notes in your training profile. Withdrawal does not affect processing that already happened.
• Automated decision-making (Article 22). ParseLift does not make decisions that produce legal or similarly significant effects on you using automated processing alone.

We respond to every valid request within 30 days. If a request is complex we may extend this by another 60 days and will tell you why.

6. Processors and service providers

ParseLift relies on the following processors to deliver the service. Each one only handles the data needed for its specific role.

7. International data transfers

Some of the services above process personal data in the United States or other countries outside the European Economic Area and the United Kingdom. For Google Firebase, RevenueCat, Anthropic, and Sentry, ParseLift relies on each provider's data-processing terms and the transfer safeguards they offer, including the European Commission Standard Contractual Clauses, the UK Addendum or IDTA where required, and adequacy decisions such as the EU-US Data Privacy Framework where a provider relies on one. Google Play processes billing and distribution data under Google's own controller terms rather than as our processor. For the Pro AI features specifically, your prompt and the training-context summary are sent to Anthropic for processing under Anthropic's Commercial Terms and Data Processing Addendum, which include the Standard Contractual Clauses where required. These safeguards are intended to keep your data protected to a standard equivalent to EU law wherever it is processed. A copy or summary of the safeguards for any provider is available on request at support@parselift.com.

8. Retention periods

• Training data on your device: kept until you uninstall or clear app storage.
• Synced training data: kept while your account is active; deleted within 30 days of account deletion.
• Assistant history: kept until you delete it or close your account. Deleted within 30 days of account deletion.
• Deletion marker: after account deletion we keep a small record containing only your account identifier and the deletion time, so that late billing messages and sync attempts for the deleted account are safely rejected.
• Subscription records: purchase records stored in the ParseLift database are removed with the rest of your account data. Billing and tax records connected to your purchases are kept by Google Play, RevenueCat, and our bookkeeping for up to 7 years where Swedish accounting law requires it.
• Diagnostic logs: retained for up to 90 days, then automatically purged.

9. Automated decisions and profiling

The app does change its behaviour based on the data you log. It suggests weight adjustments, proposes swaps, and flags possible overtraining. These are suggestions, not automatic decisions: the app shows each suggestion to you before any change is applied. Nothing the app does meets the Article 22 definition of solely automated decision-making with legal or similarly significant effect.

10. Security

Sign-in is handled by Google's authentication system. Data in the cloud is access-controlled per user. Requests to our servers are protected by app integrity verification and require a valid sign-in session. You help by keeping your sign-in credentials private and by signing out on shared devices.

11. How to file a complaint

If you are not happy with how we have handled a request, please contact us first. If that does not resolve it, you have the right to file a complaint with a data protection supervisory authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): imy.se/en . Users in other EU member states can also file with their own national authority.

12. Contact

All GDPR requests, questions, and complaints: support@parselift.com.