Privacy Policy
Who is responsible for your data
Dorji Holdings Ltd, trading as Dorji Labs, is the data controller for the limited personal data described in this policy. Dorji Holdings Ltd is registered in England and Wales under company number 17308437, with registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. Contact: planmylift@dorjilabs.com.
Information used by PlanMyLift
Workout and profile data
Your workouts, programs, exercise history, equipment, preferences, bodyweight and movement limitations are stored locally using Apple’s on-device storage. If iCloud is available, Apple’s private CloudKit service can sync this data between your devices. Dorji Labs does not operate a user-account or server-side workout-history database and cannot browse your private CloudKit records.
Apple Health data
If you choose to connect Apple Health, PlanMyLift requests permission to read sleep analysis, heart-rate variability and resting heart rate, and to write completed workouts. These measurements are used on-device to calculate a readiness view. Raw values, detailed Health records and readiness scores are not sent to Dorji Labs or the AI provider. When you request a cloud-generated workout, one broad state—primed, steady or depleted—may accompany the request so the result can respect recovery. Apple Health access is optional and can be changed in Apple’s Health or Settings apps.
On Apple Watch, an active workout can additionally read heart rate and active energy, and save the workout and active energy to Apple Health. These permissions support the Watch workout session and activity recording. This heart-rate and energy data is not sent to our AI provider.
Cloud AI requests
Before sending a workout request to cloud AI, the app asks for your explicit permission to share the request and the context described below with Anthropic through Cloudflare. You can choose on-device interpretation instead and change or withdraw this permission in Profile → Cloud AI privacy. This choice is separate from Apple Health permissions and subscription access. Withdrawing permission stops future cloud AI requests; it cannot recall requests already sent. On-device interpretation can still use our service for purchase verification and trial creation counts, without sending the workout request or health context to the AI provider.
When cloud interpretation is used, PlanMyLift sends the minimum information needed to understand the request: the text you submit, requested duration, movement or injury limitations you entered, and, if enabled, the broad recovery state described above. It does not send your workout history, exact loads, raw Health readings, name or email address. Requests are encrypted in transit and pass through our Cloudflare-hosted security proxy to Anthropic’s commercial API. Dorji Labs does not use this content to train models or retain it after returning the response. Anthropic states that API inputs and outputs are normally deleted from its systems within 30 days, subject to its legal and abuse-prevention exceptions.
Security, entitlement and usage information
To authenticate the app, validate subscriptions, prevent replay attacks and enforce service allowances, our infrastructure may process IP address, request time, an Apple App Attest device-key identifier and counter, StoreKit subscription status and storefront, a one-way hash derived from Apple’s subscription identifier, and usage or cost counters. These records do not contain workout history or raw Health data. Usage and security ledgers are retained while reasonably necessary to operate subscription limits, protect the service and resolve abuse or billing issues.
Support and website visits
If you email us, we receive your email address and whatever you include in the message. Cloudflare, which delivers the website and service, processes standard network and security information such as IP address and request metadata under its own retention controls.
Why we process information
| Purpose | UK lawful basis |
|---|---|
| Provide requested app, AI and subscription features | Performance of our contract with you |
| Use optional Health information and health-related context you deliberately submit | Your consent; you may withdraw it at any time |
| Secure the service, prevent abuse and enforce limits | Our legitimate interests in operating a safe and sustainable service |
| Meet tax, consumer-protection or other legal requirements | Compliance with legal obligations |
Service providers and international transfers
Apple provides iCloud, HealthKit, App Attest and StoreKit; Cloudflare provides website delivery, request security and the AI proxy; Anthropic interprets eligible custom-workout requests; and our email provider handles messages you send us. These providers process data only for the relevant service. Some processing may occur outside the UK. Where required, transfers rely on adequacy regulations, contractual safeguards or another lawful transfer mechanism.
Your choices and rights
You can use the core logger without Apple Health and choose on-device interpretation for custom requests in Profile → Cloud AI privacy. You can export workout data in the app, delete programs and logs there, change Health permissions in Apple settings, and manage iCloud data through your Apple ID settings.
Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent. Email planmylift@dorjilabs.com to exercise a right. Because we do not run user accounts, we may have little or no information that can be linked back to you. You may complain to the UK Information Commissioner’s Office at ico.org.uk.
Additional notice for California and other US residents
Where applicable US state privacy law provides a right, you may request access to, correction of, deletion of, or a portable copy of personal information we control, and may appeal a refused request. You will not receive discriminatory treatment for exercising a privacy right. An authorised agent may submit a request where permitted by law; we may ask for information reasonably necessary to verify the request or the agent’s authority.
In the preceding 12 months, the categories we may have processed are identifiers and network information used for security; commercial and subscription information supplied by Apple; fitness or health-related request content you deliberately submit; and support communications. The sources, purposes and recipients are described above. We do not sell personal information, share it for cross-context behavioural advertising, use sensitive personal information to infer characteristics for advertising, or knowingly sell or share information about anyone under 16. We therefore do not provide a “Do Not Sell or Share” link. Submit a rights request to planmylift@dorjilabs.com.
Children’s privacy
We do not knowingly collect personal data from children. If you believe a child has provided personal data to Dorji Labs, contact planmylift@dorjilabs.com so we can review and, where appropriate, delete it.
Security
We use measures including encrypted transport, Apple App Attest, signed StoreKit transaction verification, data minimisation and access controls. No system can be guaranteed completely secure.
Changes
We may update this policy when the app, providers or legal requirements change. The effective date above identifies the current version. Material changes will be communicated where required.
Contact
Privacy questions: planmylift@dorjilabs.com.