Privacy.
Effective 6 November 2026. Applies to Quietlift 1.0 for iPhone and Android, and to this website.
Short version: we collect nothing. There is no account and no server. Your training data stays on your phone, encrypted, and goes only where you send it.
- Accounts0
- Analytics SDKs0
- Trackers0
- Ads0
Who we are
“Quietlift”, “we” and “us” mean the maker of the Quietlift app. You can reach us at support@quietlift.app.
What we collect
Nothing. Quietlift has no account, no sign-in, no server and no backend of any kind. The app does not send your workouts, your settings, your device identifiers or anything about how you use it to us or to anyone else.
On the App Store, Quietlift’s privacy label is “Data Not Collected”. On Google Play, the Data safety section says no data is collected or shared.
What stays on your phone
Everything you put into Quietlift: workouts, sets, routines, exercises you create, body weight, timers and settings. It is kept in the app’s private storage. Your training data is in a database encrypted with SQLCipher (AES-256).
- Until you set a backup passphrase, the database key is a random key made on your phone and protected by the iOS Keychain or the Android Keystore.
- Once you set a backup passphrase, the database key is derived from it (PBKDF2-HMAC-SHA256, 600,000 iterations), and kept in the Keychain or Keystore so the app opens without asking.
- Nobody can recover your passphrase, including us. We never see it. If you lose it, data locked with it cannot be opened by anyone.
Backups and exports
Backups are files. You decide where they go.
- Manual backupBack up now saves a
.qlbakfile wherever you choose in the system’s save dialog. - Automatic backup, AndroidWrites to a folder you pick once. If that folder belongs to a cloud drive app, such as Google Drive, Dropbox or OneDrive, that app uploads the file under its own terms. Quietlift does not.
- Automatic backup, iPhoneIf you turn it on, writes to Quietlift’s folder in your iCloud Drive. iOS syncs it to your iCloud account under Apple’s terms.
- EncryptionEvery
.qlbakis encrypted with your passphrase (AES-256-GCM). Without the passphrase it can’t be read, by us or anyone. The format is published. - ExportsCSV, JSON and Markdown exports are plain, unencrypted files, handed to the system share sheet. Where they go is up to you.
- Device backupsiCloud Backup on iPhone and Android’s own backup can include Quietlift’s encrypted database. Those are Apple’s and Google’s services, turned on or off in your phone’s settings. After a restore to a new phone, Quietlift asks for your passphrase once.
Network
Quietlift makes no network requests of its own. The one exception is buying or restoring Pro, which goes through the App Store or Google Play. On Android the app doesn’t even hold the internet permission: purchases go through the Google Play app. Every feature works in airplane mode.
Purchases
Pro, and the optional tips, are bought through the App Store or Google Play. Apple or Google take the payment. We never receive your card or payment details. The store tells the app whether Pro is owned, and the app remembers that answer on your phone. Apple and Google give every developer sales and order records under their own privacy policies; we use those only for accounting and refunds.
No analytics, no trackers, no ads
Quietlift contains no analytics, advertising, attribution or tracking code, and no third-party SDK that sends data anywhere. It does not use the advertising identifier. There is no usage counter, in the app or anywhere else. The app keeps no log for you to send us.
Crash reports
We don’t use any crash-reporting service. If you have chosen, in your phone’s settings, to share analytics or diagnostics with app developers, Apple or Google may pass us crash reports for Quietlift. They contain technical details such as the device model, the system version and the place in the code where the crash happened. Quietlift doesn’t write your training data to the system log. You can turn this sharing off at any time in your phone’s settings.
Notifications, widgets and Shortcuts
- Notifications are local. Rest-timer cues, interval cues and the optional Monday report are scheduled on your phone. There are no push notifications and no server that sends them. Quietlift asks for notification permission when your first rest starts, not before.
- Exact alarms (Android): if you allow them, the rest-timer cues arrive on time with the screen off. They are a scheduling permission and send nothing anywhere.
- Widgets read a small file the app writes on your phone, such as your next routine. On iPhone it sits in a container shared only between Quietlift and its widgets.
- Siri Shortcuts (iPhone) run on your phone. If you start one by voice, Siri handles your speech under Apple’s privacy policy.
Permissions
Quietlift asks for a permission only when you use the feature that needs it, after a line explaining why. In version 1.0 that means notifications and, on Android, exact alarms. Picking a file or folder for backup or restore goes through the system’s own file picker, which gives the app only the file or folder you choose. Quietlift does not ask for your location, contacts, photos, camera or microphone.
Apple Health and Health Connect
Not in version 1.0. This policy will be updated before it ships.
If you write to us, we receive your email address and whatever you choose to put in the message. We use it only to reply to you, and we don’t share it. Ask us to delete our correspondence with you at any time.
Deleting your data
- In the app: More › Your data › Delete all data, then type DELETE. This removes your data from the phone.
- Backup and export files you saved elsewhere are not touched. Delete them where you keep them.
- Uninstalling the app removes its data from the phone. Copies in iCloud Backup or Android’s backup are managed in your Apple or Google settings.
Since we hold no data about you, there is nothing for us to export or erase on our side, apart from any email you sent us.
Children
Quietlift is a training log for adults and is not directed at children. It collects no data from anyone, children included.
This website
quietlift.app is a set of static pages. It uses no cookies, no analytics, no scripts and no fonts or files from other servers. Like any web server, the host may keep standard access logs (such as IP address and pages requested) for security and operation; we don’t use them to identify or track you.
Changes to this policy
If this policy changes, the new version appears on this page with a new date at the top, and the change is described here. If a future version of the app ever needs to collect anything, the policy changes before that version ships.