Privacy
Privacy Policy
Last updated: May 25, 2026 · LFT Systems, LLC
The short version
We collect what you tell us in your intake (age, goals, weight, training history, joint concerns) plus what you log (workouts, weights, optional photos, your training partner if you have one).
We use it to build and store your personalized plan, send it to your inbox, and remind you about it. We email you when your plan is ready and once a week with your meal plan.
We do not sell your data. We do not share it with advertisers. We do not train AI models on your inputs.
You can delete your account at any time by emailing support@lftcoach.com. We remove your account, plan, logs, and any photos within 7 days.
What we collect
Information you provide
- Your email address
- Intake answers: age, gender, weight, height, training experience, goals, training days per week, equipment access, joint concerns, diet preferences
- Optional uploaded photos (front, side, back) used to generate a one-time body-composition estimate
- Workout logs (sets, reps, weights, exercise feedback)
- Weight check-ins
- Training partner email (only if you invite one)
Automatic information
- An HMAC-signed device cookie (
lft_device) so you stay signed in on this browser. No third-party tracking cookies. - IP address for rate-limit protection (hashed before storage; we do not store raw IPs).
- Standard server access logs (kept by Vercel for operational reasons).
How we use it
- Generate your personalized training and nutrition plan
- Email your plan to you and deliver weekly meal plans
- Send you a magic-link sign-in code when you log in
- Show you progress, streak, and milestone information
- Share workout activity with your invited training partner (workout date and focus only — never your weight, photos, or full plan)
- Detect and stop abuse (rate limits)
Who we share it with
To operate the service we send your data to:
- Supabase (US-based) — stores your plan, intake, logs, and partner info
- Resend — sends our emails (plans, meal plans, magic links)
- Vercel — hosts the site and runs our serverless API
- Anthropic — generates your plan via the Claude API; Anthropic does not train models on API inputs
We do not sell your data. We do not share it with advertisers. We do not use it to target ads on or off this site.
Your rights
- Delete your account — email support@lftcoach.com. Done within 7 days. Removes account, plan, logs, photos, and partnership records.
- Export your data — email us and we'll send a JSON file of everything you've stored with LFT.
- Correct your data — most fields are editable in your dashboard. If something isn't, email us.
- Opt out of emails — every email has an unsubscribe option. Unsubscribing turns off plan, meal-plan, and milestone emails. We'll still email you a sign-in link if you request one.
Cookies
We use one cookie: lft_device. It is HMAC-signed, HttpOnly, Secure, SameSite=Lax, and lets us remember your signed-in browser. We do not use Google Analytics, Facebook Pixel, or any third-party tracker.
Security
Your data lives in encrypted-at-rest storage at Supabase. Access is restricted to the API key held by our serverless functions; the public-facing site has no direct database access. We use HTTPS for everything.
Children
LFT is for adults 18 and over. We do not knowingly collect data from anyone under 18.
Changes to this policy
If we make a material change, we will email all active users at least 7 days before the change takes effect. The "Last updated" date at the top of this page will reflect the most recent change.
Contact
Questions about this policy? Email support@lftcoach.com. We respond within one business day.