Who is responsible
Lvl Up is a product of The Lycoris Labs Inc (“we”, “us”). We decide how the information described here is used. Write to us about privacy at team@thelycoris.com.
What we collect
Account: your email address and a password. Passwords go to the authentication service and are never kept in the app state on your device.
Setup answers you choose to give: injuries or limitations, equipment, sex, age, weight, height, goal, movement check results, training days and session length. These are used to build and adjust your plan. Some, such as weight and height, are stored but not yet used to change your plan.
Activity: workouts and sets you log, check-ins, water and body logs, streaks, XP and medals.
Pack: if you join a Pack, your first name, avatar and weekly progress numbers are visible to its members.
Optional: a profile photo, progress photos and a notification token if you turn reminders or Pack alerts on. Photos you choose stay on your device. Each permission is asked on your device and can be revoked there.
Camera: where camera rep counting is offered, the video is analyzed on your device and is not recorded or uploaded to our servers.
Messages you send: feedback and reports you send from the app or by email, with the account they came from, so we can reply and act on them.
Not collected: no advertising identifier, no tracking across other companies' apps or sites, no location, no contacts and no microphone.
Where it is kept
Your data is stored on your device and backed up to your Lvl Up account, which is hosted on Supabase. Data is encrypted in transit. Sign-in and invite tokens are random and stored hashed, and the app has no direct access to the database.
Tala AI coach and third-party AI
Tala, the coach in the app, uses an AI model run by a third-party AI provider (Microsoft Azure AI Foundry today; OpenAI is also supported) to answer your typed questions and to suggest small tweaks to your plan. This is off until you turn it on. Before you do, the app asks you, and you can turn it off at any time in Tala or in Profile > Your data. When it is off, Tala uses built-in replies on your device, your plan is built by the app alone, and nothing is sent.
When it is on, each question you send, your last few messages in that chat, and a summary of you and your plan go to our server and then to the provider. The summary can include: your body measurements (age range, sex, height and weight), your goal and what keeps you consistent, what gets in the way, your experience and assessment results, the injury areas and equipment you picked, whether you passed the readiness check, your training schedule, your workout history in the last four weeks (sessions per week, completion rate, streak, how hard sessions felt), and your current plan (days, focus, exercises, sets and rest). The server turns this into fixed numbers and labels and drops everything else. We do not send your name, email address, account ID, photos or free-text notes. Do not type personal details into Tala: your message is sent as you wrote it.
Tala's plan tweaks come back as a small, checked list (a set more or fewer, a swap for a similar movement, a rest change). Our code re-checks every one against your injuries, equipment and weekly limits, and nothing changes in your plan until you approve it; you can undo it. The provider processes this only to produce the reply or the tweaks. We ask it not to store the conversation, but it may keep requests for a limited time to prevent abuse under its own terms. We keep a short-lived, validated copy of each set of tweaks (no profile data) so the same plan is not sent twice; it is deleted with your account. We do not use your messages or body measurements to advertise to you or to train models ourselves. Tala's replies are general training guidance, checked by rules in our server, and are not medical advice.
What we do not do
We do not sell your personal information. We do not use your health or fitness answers for advertising.
Health information
Health and body information (such as injuries, weight and height) is provided by you and is used only to personalize training. If you turn on Tala AI, body measurements, goals and workout history are also sent to the AI provider as described above. It is not medical advice and is not a medical record. Lvl Up does not read Apple Health or Health Connect data today; the optional Health Connect shortcut only opens your device settings.
How long we keep it
We keep your account data while your account exists. When you delete your account it is removed from our servers; what may remain briefly, and why, is listed under What may remain on the Delete your account page.
Your controls and rights
In Profile > Your data you can export a copy of your data, clear parts of it, or delete your account and all data. Clearing or deleting removes it from your device and, for deletion, from your account.
You can also ask us to access, correct, export or delete your information, or ask a question about it, by writing to team@thelycoris.com from your account email. Depending on where you live you may have further rights under local law; we will respect them.
If you cannot open the app, you can ask us to delete your account at lvl-up.vercel.app/delete-account or by emailing team@thelycoris.com from your account email.
Age
Lvl Up is for people 16 and older. We do not knowingly collect data from younger children. If you believe a child has given us data, write to us and we will delete it.
Changes and contact
We will update the date below when this policy changes.
Questions or requests about your data: team@thelycoris.com.