Privacy Policy

POWALIFTA ("we", "us") respects your privacy. This page explains what we collect, why, and what we do with it. We've kept it short on purpose.

What we collect

When you sign up, we ask for your name, email address, and a password. Coaches additionally provide a bio shown on the public coach directory.

As you use POWALIFTA, we store your training data: the programs your coach builds, the sets you log (weight, reps, RPE, notes, dates), your bodyweight entries, your training goals, and any session notes you write. Coaches can see this data for athletes connected to their account.

We do not collect: ID documents, payment card details (handled by our payment processor — Lemon Squeezy), location data, or biometric data.

Where it lives

Your account and training data are stored in a managed Postgres database operated by Supabase. Data is encrypted in transit (TLS) and at rest. We use Supabase's authentication service to manage logins; passwords are hashed and we never see or store the plaintext. Your browser also keeps a small amount of non-sensitive state (theme preference, session tokens) in localStorage.

Sub-processors

We use a small number of service providers to run POWALIFTA: Supabase (database, authentication, file storage), Vercel (website hosting and CDN), Lemon Squeezy (payments — they act as merchant of record and handle all card details), Resend (transactional email, e.g. welcome emails), and Google Fonts (font delivery). Each only receives the data needed to do its job.

How long we keep data

While your account is active, we keep your data so you can see your training history. When you delete your account, we delete your personal data within 30 days, except where billing records must be retained for tax purposes (these are kept by our payment processor).

Who we share it with

Nobody, except: coaches you have connected to (they see your training data and notes — that's the point), our payment processor for billing-related lookups (coaches only), and any authorities if compelled by law. We do not sell user data to advertisers, brokers, or any third party.

Cookies and analytics

We do not use third-party analytics, advertising trackers, or fingerprinting. We keep you logged in using a session token stored in your browser's localStorage.

Your rights

You can access, export, or delete your data at any time. Email powalifta1320@gmail.com and we'll handle it within 30 days. If you're in the EU, UK, or California, you have specific rights under GDPR/UK-GDPR/CCPA — same email, same response time.

Children

POWALIFTA is not intended for use by anyone under 16. We do not knowingly collect data from children. If you believe a child has signed up, contact us and we'll remove the account.

Changes

If we materially change this policy we'll update the "Last updated" date and, where required, notify you by email.

Contact

Questions: powalifta1320@gmail.com