Privacy Policy

1. Data we collect

Account data: name, email address, and authentication identifiers.

Assessment and health data: age, gender, height, weight, activity level, occupation, sleep patterns, goals, allergies, dietary preferences, food intolerances, current medications, existing medical conditions, typical meals, and exercise habits.

Progress data: weight and measurement entries, water intake, sleep records, activity records, daily check-ins, and any progress photos or documents you upload.

Booking and contact data: name, email, phone number, stated health goals, preferred appointment time, and message content.

Technical data: IP address, device and browser information, and essential session cookies.

2. Why we process it

To create and deliver your personalized nutrition and lifestyle plan (performance of a contract).

To manage your account, subscription, and consultation bookings (performance of a contract).

To send service messages such as booking confirmations and renewal notices (legitimate interest).

To send newsletters where you have subscribed (consent, withdrawable at any time).

To keep the platform secure and to meet legal obligations such as financial record-keeping.

3. Health data and explicit consent

Assessment answers relating to your health are special category data under Article 9 GDPR. We process them only on the basis of your explicit consent, given when you complete the assessment, and only to generate and adjust your plan. You may withdraw this consent at any time by deleting your assessment data or your account.

4. Storage, retention, and security

Data is stored on encrypted infrastructure hosted within the European Union. Access is restricted to your own authenticated account through row-level security rules, and administrative access is limited to what is strictly necessary to operate the service.

We retain account and health data for as long as your account is active, and for up to 12 months afterwards unless you request earlier deletion. Financial records are retained for 7 years where Dutch law requires it.

5. Sharing with third parties

We do not sell personal data. We share data only with processors who help us run the service: our cloud hosting and database provider, our payment provider (PayPal) for subscription handling, and our email delivery provider for service messages. Each acts under a data processing agreement.

6. Your rights

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any right, email liftwithzin@gmail.com. We respond within 30 days.

7. Changes

We may update this policy as the platform develops. Material changes are announced in-app and by email where you have an account.