Privacy Policy
Effective date: 18 May 2026
LiftRex is a workout tracking app operated by Enya Venture, a sole proprietorship registered with SSM (Suruhanjaya Syarikat Malaysia). This Privacy Policy explains how we collect, use, store, and protect your data when you use the LiftRex mobile app or the LiftRex website at liftrex.app.
By using LiftRex, you agree to the collection and use of your data as described in this policy. If you do not agree, please do not use the app or website.
1. Data We Collect
Workout data
- Exercises, sets, reps, weight, duration, start and end time
- Routine names and exercise configurations
Device data
- Operating system version (iOS or Android), device model, app version
- Anonymous UUID generated on first launch, used to identify your device for data sync and reward tracking. This UUID is never linked to your personal identity.
Location data (optional)
- GPS coordinates for gym check-in feature
- Collected only if you explicitly grant location permission
- Used solely for gym check-in verification
HealthKit data (optional, iOS only)
- Active calories and workout session data from Apple HealthKit
- Collected only if you explicitly grant HealthKit permission
- Used solely for workout verification and calorie display within the app
- Never stored on LiftRex servers
Points and voucher data (Malaysia users only)
- Points earned, spent, and expired
- Voucher codes, issue dates, expiry dates, and redemption status
Referral data (Malaysia users only)
- Referral codes and referral claim status
Email address (website only)
- Collected only if you submit the waitlist form at liftrex.app
- Used solely to notify you when the app launches
2. How We Collect Data
- Directly from your input during workout logging and routine creation
- From Apple HealthKit, only if you explicitly grant permission
- From your device GPS, only if you explicitly grant location permission
- From Apple CloudKit for iCloud data sync across your own devices
- From waitlist form submission on the LiftRex website
3. How We Use Your Data
- To provide workout tracking, routine management, and progress features
- To calculate and award points for qualifying workouts (Malaysia only)
- To generate and track voucher codes for reward redemption (Malaysia only)
- To display gym trophy board rankings using anonymised data only — no personally identifiable information is used
- To sync your workout data across your own devices via Apple iCloud
- To send push notifications about points expiry, streaks, and workout reminders, only if you grant notification permission
- To notify waitlist subscribers when the app launches
We do not sell your data to any third party.
We do not share your personal information with third parties.
4. Data Storage
- Workout data is stored locally on your device and synced via Apple CloudKit (iCloud) across your own devices.
- Voucher codes and points data are stored on LiftRex servers hosted in Malaysia (Malaysia users only).
- Waitlist emails are stored on LiftRex servers hosted in Malaysia.
- HealthKit data is never stored on LiftRex servers. It is read temporarily within the app and not transmitted externally.
- Anonymous UUID is stored locally on your device and on LiftRex servers for reward tracking and routine sharing.
5. Third-Party Services
- Apple CloudKit — used for iCloud data sync. Your workout data is stored on Apple servers subject to Apple's privacy policy at apple.com/privacy.
- Apple HealthKit — used for optional fitness data reading on iOS, only if you grant permission. HealthKit data is governed by Apple's privacy policy.
We do not integrate any advertising SDKs, analytics platforms, or social media trackers.
6. Data Retention
- Workout data: retained on your device and in iCloud until you delete the app, remove data from iCloud, or request deletion from us.
- Waitlist email: retained until you request removal or the app launches publicly, whichever comes first.
- Voucher and points data: retained for 24 months after your last activity (Malaysia users only).
- Anonymous UUID: retained for 24 months after your last activity.
- Referral data: retained for 24 months after your last activity (Malaysia users only).
7. Your Rights Under PDPA 2010 (Malaysia)
Under the Personal Data Protection Act 2010 (PDPA), you have the following rights:
- Right to access — you may request a copy of the personal data we hold about you.
- Right to correction — you may request that we correct any inaccurate or incomplete personal data.
- Right to withdraw consent — you may withdraw your consent for us to process your personal data at any time. This may affect your ability to use certain features of the app.
- Right to deletion — you may request that we delete your personal data from our servers.
To exercise any of these rights, email us at chowdao@liftrex.app with your request. Please include sufficient information for us to verify your identity (such as your device UUID, which can be found in the app's Profile section).
We will respond to your request within 14 business days.
8. Children
LiftRex is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete that data immediately.
If you are a parent or guardian and believe your child has provided data to LiftRex, please contact us at chowdao@liftrex.app.
9. Cross-Border Data Transfer
Your workout data synced via Apple CloudKit may be processed on Apple servers located outside Malaysia. This transfer is governed by Apple's Data Processing Agreement and their internationally recognised privacy certifications.
LiftRex server data (points, vouchers, referral codes, waitlist emails) is stored on servers in Malaysia.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via an in-app notification.
Continued use of the app after changes are posted constitutes your acceptance of the updated policy. Previous versions of this policy are available on request by emailing chowdao@liftrex.app.
11. Contact
For privacy enquiries, data requests, or complaints:
We will respond within 14 business days of receiving your enquiry.