Privacy Policy

Weightlifting Analytics is a training platform for weightlifters and their coaches: personal bests, logged workouts, coach-written programs, and percentile comparisons against other athletes in your demographic group. This policy covers the web app and the iOS app, which share one account and one database.

• Account details: name, email address, password (stored only as a secure hash by our authentication provider), date of birth, gender, bodyweight class, competition category, and an optional Instagram handle.
• Training data you or your coach enter: personal bests, logged workouts, assigned programs, wellness check-ins (including any soreness, niggle or injury you choose to report in one), goals and goal check-ins, competition plans and results.
• An AI API key, only if you add one in your profile (Anthropic, OpenAI, or both). It is stored encrypted, used only for the AI features you ask for, and never shown again to you or anyone else.
• Health data, only if you connect Apple Health: nightly sleep duration and stages, read-only. We never write to Apple Health.
• Medications you choose to list and the doses you log. This exists so you hold your own record, for example for anti-doping declarations. It is entered by you, never inferred.
• Hydration: your water bottles and logged drinks, including logs made by scanning an NFC bottle tag.
• Device data: a push notification token for each device you allow notifications on.
• Usage and reliability data: which pages and screens are used, and crash reports. This is our own internal analytics with no advertising or third-party tracking involved.

To run the service: show your training history, resolve program percentages against your personal bests, compute readiness and progress, and send the in-app and push notifications you would expect (a coach assigned you a program, a wellness reminder you scheduled).

Percentile comparisons use a snapshot of your gender, weight class and category at the time each personal best was set. They are drawn from the best lifts and lift ratios of every approved athlete, and other athletes and coaches see them without names. Where only a few athletes have recorded a lift, a point on a chart can be one athlete's number, and someone who knows who trains that lift may recognise it.

Your date of birth is used to check that you are old enough to hold an account and to apply the protections for athletes under 18 described under "Children". It is never shown to other athletes.

We do not sell your data, show ads, or use your data for advertising. We do not track you across other apps or websites.

• You. Your data is scoped to your account by row-level security in the database.
• Coaches you approve. A coach can only request to connect using the connect code you share; they see nothing until you accept. A connected coach can read your training data, wellness, sleep, hydration and medication log (read-only), and only your programming coach can assign or edit your programs. You can disconnect a coach or rotate your connect code at any time.
• Administrators, for account approval and support. An administrator can see athlete names in the comparison charts.
• Our infrastructure providers, as processors only: Supabase (database, authentication and hosting) and Vercel (application hosting). Apple delivers push notifications. None of them use your data for their own purposes.

We have no AI key of our own and send nothing to an AI provider unless a coach asks for one of two things. Both run on that coach's own API key with Anthropic or OpenAI, whichever they have chosen in their profile, so the request goes from our server to that provider under the coach's account with them.

Importing a program with AI sends the file, photo or text the coach uploads, and the names of the exercises in their library.

A training-load report on an athlete the coach is connected to sends that athlete's training for the dates the coach picked: the volume prescribed and logged for each exercise, the heaviest sets of their priority lifts, their daily readiness scores, the areas they marked as sore, any niggle or injury they reported in a check-in, and the titles of their open goals. It leaves out the athlete's name and the name of their program. Text the athlete or coach typed themselves, such as a goal title or a pain location, is sent as written. It does not send sleep, hydration, medications, body weight or contact details.

The provider handles what it receives under its own API terms and the coach's settings with it. We cannot delete copies it holds. The report that comes back is kept in our database so the coach can read it again, and only the coach who ran it can see it. It is an AI model's reading of training numbers for a coach, not a medical assessment.

The training-load card also has an "Ask ChatGPT" button, which uses no key of ours or the coach's: it copies those same numbers to the coach's clipboard so they can paste them into their own ChatGPT. What happens to them there is between the coach and that provider.

Olympic Weightlifting Program Builder creates basic plans in your AI conversation without a Weightlifting Analytics account. Generating a plan does not automatically send the conversation to us. An optional import link contains the generated program; anyone holding the link can read it. Opening it sends the program to our website for validation and preview. Do not include private personal or health information in these links.

The optional account skill in the same plugin uses the website through your AI host's browser tools. You sign in on the website. At your request, the assistant can read relevant training data and enter or edit programs using your account's existing permissions. Installing the plugin does not grant coaching permissions or bypass subscription limits. Saving a template and assigning a program to an athlete are separate actions.

Choosing save or signup on the import page keeps the pending program in browser local storage for up to 24 hours so it can resume after account setup. It is removed after a successful import, cancellation or the next access after expiry. Clear browser site data to remove it sooner. Reopen the original link when switching browsers. Saved programs and an account-linked fingerprint used to prevent duplicate imports follow our normal account storage and deletion policies.

A third skill in the same plugin reviews a training load brief: the numbers described in the section above, which a coach copies from an athlete's Training Load card and pastes into the conversation themselves. The plugin does not fetch it.

Relevant website content viewed by the assistant may become part of your AI host's conversation context. These plugins do not request Apple Health, sleep, hydration, medication or unrelated administrative data. Keep unrelated sensitive information out of program notes. Passwords and verification codes belong in the website sign-in flow, not in chat.

Your AI host handles conversations, files and browser content under its own privacy policy, settings and retention rules. We cannot delete copies held by that provider. The plugin package has no separate credential store and does not extract website session tokens. Programs saved in Weightlifting Analytics remain subject to this policy and the website's normal sharing rules.

To stop the connected workflow, stop browser actions, sign out in the browser being used or disable the plugin. Removing the plugin does not sign you out of the website, erase saved programs or delete the conversation. Contact your AI host about its copies and contact us about website data.

Sleep is read from Apple Health only after you grant permission, and you can revoke that permission in iOS Settings or disconnect in the app at any time. Health data is used only to show your sleep and recovery context in the app and to your connected coaches. It is never used for advertising or marketing, never sold, and never shared with any third party.

Data protection law asks for a reason for each use of personal data. Ours are:

• To provide the service you signed up for: your account, your training data, your programs and your coach connections.
• Your consent, for the health-related information you choose to add: wellness check-ins and anything you report in them, medications, body weight, and sleep from Apple Health. None of it is required. You can stop at any time by deleting the entries or disconnecting Apple Health, and deleting your account removes all of it.
• Our legitimate interest in keeping the service working and secure: our own usage and reliability data, and a record of signups that failed so we can fix them.

The database is hosted by Supabase in the European Union (Stockholm, Sweden), and the application runs on Vercel in the same region. If you use the service from another country, your data is sent to and stored there.

Our providers may process data in other countries under their own safeguards. An AI provider (Anthropic or OpenAI, both in the United States) receives data only when a coach uses one of the AI features described above.

• See and take a copy of your data: Profile, Your Data, Download my data, on the website and in the iOS app. It is one file holding everything we hold about your account.
• Correct it: your profile, personal bests, logged sessions and check-ins can all be edited by you.
• Delete it: Profile, Your Data, Delete account on the website, or Profile, Delete account in the iOS app.
• Object to a use of your data, or ask us to limit it, by contacting us.
• Withdraw consent for health-related information at any time, as described above.
• Complain to the data protection authority where you live. In the United Kingdom that is the Information Commissioner's Office.

We answer requests within one month.

Your training history is the product, so it is kept for as long as your account exists: we do not silently expire or purge it.

You can delete your account yourself on the website (Profile, Your Data) and in the iOS app (Profile, Delete account), or by contacting us. Asking deactivates your account straight away, and an admin deletes it once 14 days have passed. Until then you can sign in and restore it. Deletion is permanent and removes your account and the personal data attached to it, including any AI key you added.

Two things are kept without your identity: our usage data, which no longer points at you, and the record of a signup that failed, with your email address removed.

If you are a coach, the programs, goals and competitions you set for your athletes stay with those athletes, because they are part of their training history. Your templates, your exercise library and your reports are deleted with your account.

All traffic is encrypted in transit (HTTPS). Database access is enforced per-row, per-user by row-level security. Passwords are handled by Supabase Auth and are never visible to us.

You must be 13 or older to have an account. We ask for your date of birth when you sign up and do not create an account for anyone under 13. We rely on the date you give us and do not check it against a document.

The age at which you can agree to a service like this yourself depends on where you live, from 13 to 18. If you are younger than that age in your country, ask a parent or guardian before you sign up.

• If you have told us you are under 18, your training data is never sent to an AI provider: a coach cannot run an AI training-load report on you.
• A coach can only ask to connect using your connect code or your exact email address, and sees nothing until you accept. You can disconnect a coach at any time.
• We do not show ads, sell data or build an advertising profile of anyone, at any age.

A parent or guardian can contact us to see, correct or delete the data of a child in their care.

Weightlifting Analytics is run by Yegeun Ji, who decides how your personal data is used (the "data controller").

If this policy changes in a way that matters, we will note it here with a new effective date.

Questions or requests (including data export or deletion): yegeunji@outlook.com.