Aurek privacy policy

LiftReady is now Aurek. Same company (JAC Software LLC), same terms.

Applies to the Aurek iPhone app and the website aurek.app (also reached through getaurek.com and our earlier addresses liftready.app, getliftready.com and cadet-coach.web.app). Last updated October 14, 2026.

Aurek is run by JAC Software LLC, doing business as Aurek, a Florida limited liability company (“we”, “us”). We decide how the data described here is used. Contact: support@aurek.app.

What stays on your device and what we store

Only on your device (never on Aurek’s servers, never shared):

• Sleep: nights you log, the bedtime button, nights from Apple Health (including from a watch or ring such as an Apple Watch, Garmin, Oura or WHOOP that writes to it), sleep stages, naps, sleep debt.
• Readiness: the score and its inputs, including morning check-in and journal answers (energy, soreness, mood, stress, pain) and journal entries with any AI coaching replies.
• Heart rate, resting heart rate, heart rate variability and VO2 max; the heart rates you enter on Training zones; a fitness test’s resting heart rate; a workout’s average heart rate.
• Injuries, pain notes, “Something hurts” reports, medical clearance, allergies and the stress and sleep answers from setup, and the workout explanations the app writes because of them.
• Progress photos.

This data lives in the app’s storage on that phone or in that browser (IndexedDB), separately for each account signed in there. Your other devices don’t show it. To move it to a new phone or browser, use Settings → Your data → Move to a new phone or browser (it saves a file you import on the other device). Signing out offers to remove it from the device; deleting your account removes it from the device you delete from. If you clear the app’s or the browser’s data, it’s gone, because we don’t keep a copy. (Before October 2026 this data was kept in your account; the first time you open the updated app, it is moved onto that device and deleted from our servers.)

In your Aurek account (on our servers in the United States, so it syncs):

• Account: your name and email address, and a sign-in managed by Google Firebase Authentication (your password is stored by Firebase in scrambled form; we never see it).
• What you log: your profile basics and goals (name, age, sex, height, goals, schedule, units and preferences), your training plan and seasons, fitness test results and maxes, training zones without heart rates (bike power, swim and run test times, if you enter them), workouts and sets, meals and nutrition, water, vitamins, your weight history (every weigh-in, with its date and time), daily steps and active calories, your Fitness Score history and year goals, reminders (including the weekly weigh-in) and app settings.
• Meal photos waiting for the AI: if an AI estimate of a meal photo, nutrition label or menu doesn’t go through (no signal, the AI is busy or its daily limit is reached), the photo — already compressed — is kept with its meal, date and what went wrong, so it can be tried again. It’s stored in your account (and on your device until it syncs) and removed once you log that meal or discard the photo.
• From Apple Health (iPhone app, only if you connect it): workouts (type, time, distance, calories — saved as outside activities, without heart rate) and daily steps and active calories. Everything else Aurek reads from Apple Health (sleep, heart rate, HRV, VO2 max) stays on your iPhone. Aurek only reads; it never writes to Apple Health.
• Location for cardio (only if you track a run, walk, hike, ride or other activity with GPS): while an activity is recording, your phone’s location (latitude, longitude, altitude, accuracy and time) is used to measure distance, pace and splits and to draw your route. Location is only collected between Start and Finish (including with the screen off in the iPhone app, while the activity is recording), never in the background otherwise.
• Notifications: a push token for each device where you turn notifications on, and the times of your reminders, so reminders reach you.
• Squad and friends (optional): the display name and stats you choose to share, whether your card is for friends or public, your friend code, who you added and who added you, and challenges you start or join (title, dates and members).
• Training together (optional): group workouts you host or are invited to (“Lift with me”) and training-partner links: the workout plan, the date, who was invited and who joined, and each person’s name and how many sets they finished. Only the people in that workout or partnership see it.
• Feed (optional, only what you post): your posts — text, photos you add, and any workout or run you attach (lifts, sets, distance, time, pace, and the run map with the first and last 200 meters cut off) — plus your likes, comments, reports and the people you block. Friends-only posts are visible to the people you added as friends; public posts to every Aurek user with a confirmed email. Photos are re-saved by the app before upload, which removes location and camera details.
• Feedback board: posts, replies, votes, reports and any screenshot you attach, with your display name and basic device info (for example “iPhone iOS 18.5 · iPhone app · 390×844”). Posts and replies are visible to every signed-in Aurek user.
• Error reports: when something in the app breaks, the error message and where in the code it happened, the app version, whether it was the website or the iPhone app, and which screen was open. Links, email addresses, ids and quoted text are removed before it is sent, and nothing you typed or logged is included. Reports are linked to your account only so we can limit how many one account sends and delete them with your account; they are deleted automatically after 30 days.
• Usage counts (you can turn them off): how many times each screen or feature (for example “meal logged” or “run saved”) was used per day, and how many people used it. With each count we also note the part of the day it happened (morning, midday, evening or night on your device’s clock), where in the app the tap started (for example the Today screen, the tab bar or a notification), which version of Aurek you used (the website, the website added to your home screen, or the phone app), and whether it was your first day. We also count, for each week, how many people who signed up that week opened the app again 1, 7 and 30 days later; your account’s sign-up date is used for this when the count arrives and is not stored with it. Use by Aurek’s own team and test accounts is counted separately so it doesn’t mix with yours. The daily totals we look at are anonymous: no name, no account id and no content is stored with them, and never a health value — only that a feature was used. To count each person only once a day, the server keeps a short list of which features (and which version of Aurek) your account used that day for 5 days, then deletes it. Each day we also count how many accounts were used in the last 1, 7 and 30 days and how many have notifications turned on (totals only, from sign-in times and notification settings), and how many notifications of each kind were sent. Turn usage counts off in Settings → Your data → Share anonymous usage counts; you are then also left out of the daily totals of active accounts.
• Sign-up steps: for each account we note the week you signed up, where you came from if the website knows it (for example a link from Instagram), and when you reached each step (finished setup, saw the plans, started a trial, subscribed, canceled or got a refund), to see where sign-ups get stuck. The record also notes whether the account is one of Aurek’s own team or test accounts, so those are left out of the totals. This record is linked to your account, is never shared, and is deleted with your account.
• Subscription (if you subscribe): your plan (monthly or yearly), its status (free trial, active, payment problem, canceled), trial and renewal dates, and the Stripe customer and subscription ids that link your Aurek account to Stripe. Aurek never receives or stores your card number, its security code or your bank details — those go straight to Stripe. Whether you were given free access is stored the same way. For the business’s own bookkeeping and taxes we also keep a record of each payment, refund and payout: its date, amount, Stripe’s fee, the plan, the sales tax and the state or country it was charged for, and the Stripe ids — never card or bank details. Only Aurek’s owners can see it.
• Email confirmation and password resets: to confirm your email address we send you a link or a 6-digit code, and a link when you ask to reset your password. A code is stored only as a scrambled (hashed) value for up to 15 minutes, with how many times one was sent (to stop abuse). Password-reset requests are counted per email address, stored only as a scrambled (hashed) value, for a day.
• Subscription choices: if you pause your subscription or take a discount, when you did (each is offered once). If you tell us why you’re canceling (optional), that answer and any note you write are stored without your name, email or account id.
• Invites (referrals): your invite code, how many friends joined or subscribed with it, and, if you joined with a friend’s link, whose link it was. Each friend who subscribes can earn the person who invited them a credit on their bill; nothing else about you is shared with them.
• AI features: whether you allowed AI features and when, a count of how many AI requests you made each day (kept 7 days, to enforce the daily limit), and what your AI requests cost us each day and each month, by feature (the daily totals kept 8 days, the monthly ones about 10 weeks, to enforce the AI spending limits; deleted with your account). Not the photos or text you sent.
• Emails from Aurek: if your subscription ends, one email a few weeks later, and whether you unsubscribed from emails like it.
• Terms you accepted: when you accept the Terms of Service we keep a record of your acceptance: the name you typed, that you confirmed you are 18 or older, that you gave the separate health data consent, the date and time, the version of the Terms, your account email, whether you used the website or the iPhone app and its version, your browser or device (user agent) and the IP address it came from. It is our proof that you agreed; if you delete your account, this record is kept for 3 years and then deleted automatically.
• Security counters: to stop abuse, the server counts requests per account (and, for requests made without signing in, per network, using a scrambled (hashed) form of the network address, never the address itself). These counters are deleted automatically within 7 days.

A copy of what’s in your account is also kept on your device (browser storage or the app’s storage) so the app works offline. Aurek doesn’t use advertising cookies or tracking cookies; the website and app use your browser’s storage only to keep you signed in, work offline and remember your settings.

How we use it

• To run the app: build your training plan, nutrition targets and reminders, and sync them across your devices. Your readiness score, sleep plan and recovery advice are worked out on your device from the data kept there. Reminders contain only times and plain prompts (for example “Bedtime 10:30 PM”), never sleep or health numbers.
• To run your subscription: start a free trial or subscription, check whether your account has access, show your plan, trial days and renewal date, and pause it or apply a discount when you ask.
• To send emails about your subscription: a confirmation when a trial or subscription starts (plan, first charge date and how to cancel), a reminder 3 days before a free trial ends (also as a notification), a reminder before a yearly plan renews, notice of any price change, and, once, a heads-up before paid plans start. Marketing-type emails have an unsubscribe link and our postal address.
• To send one email after a subscription ends (you can unsubscribe in one click), and account emails you ask for (confirming your email, resetting your password).
• To send a weekly recap notification on Sunday evening (sessions done, lift changes, weight change — never sleep or readiness), unless you turn it off in Settings › Notifications.
• To show what you chose to share with friends, in a squad, in a group workout or on a public leaderboard.
• To run the website: if you join the waitlist we keep your email and the plan you picked, and use them only to tell you when subscriptions open. We count page views and button taps on aurek.app as anonymous daily totals (no cookies, no IP address stored, and nothing at all if your browser sends a Global Privacy Control or Do Not Track signal).
• To see what brings people to Aurek: when you create an account after arriving from a link with a campaign tag (for example from Instagram), we store that source with your account, and we count sign-ups, setups, trials and subscriptions per week as totals. This stays with us and is never shared.
• To keep Aurek safe and working: moderate the feed and the feedback board, limit abuse (rate limits, one free trial per person), fix problems (error reports), see which features are used (anonymous usage counts), and protect our users and the Service.
• To meet legal obligations and enforce our Terms: for example keeping proof of the Terms you signed, answering valid legal requests, and handling copyright and intimate-image complaints.

What we don’t do. We do not sell your personal data, and we do not share it for cross-context behavioral advertising or targeted advertising. We don’t share it with data brokers, don’t use it to build marketing profiles, and don’t use your data to train AI models. There are no ads and no third-party analytics or tracking in Aurek: usage counts are Aurek’s own totals, and error reports are used only to fix bugs. We don’t make decisions about you by automated means that have legal or similarly significant effects; the plan, targets and scores the app works out are suggestions you can change.

AI features

AI features are off until you allow them. The first time you use one (meal photo or description estimates, nutrition label or menu scans, schedule reading, watch-screenshot reading on the website, and optional AI coaching replies to your journal), Aurek asks once whether to allow them, and you can turn this off again any time in Settings › Your data › AI features. We keep a record of your answer and when you gave it. When allowed, only the photo or text you submit and the minimum context needed (for example your nutrition targets or today’s plan) are sent through our server to the Gemini API of Google LLC (a third-party AI provider) to produce the answer. Your readiness score, sleep, heart rate, HRV, injuries, check-in answers and anything from Apple Health are never sent to AI features; a journal reply uses only the words you wrote. These requests are processed only to answer you and are not stored by Aurek: our server keeps only a count of how many AI requests you made that day. AI answers are estimates, not medical or dietary advice, and are made by a computer, not a person. Google processes these requests under its Gemini API terms; on the free tier, which Aurek uses today, those terms allow Google to use submitted content to improve its products (including its AI models), and the consent screen says so. On Google’s paid tier, which we plan to move to, Google doesn’t use it that way; we’ll update this page and the consent screen when we do. Aurek itself never uses your data to train AI models. Don’t submit anything in an AI feature you wouldn’t want processed that way; every AI feature can be skipped and entered manually instead. A meal photo kept because its estimate failed is sent again when you tap Try again, or automatically (a few times at most) when the app is back online; the estimate is only logged after you review it.

Apple Health

• Health data is read only after you tap “Connect Apple Health” and approve it in the iOS permission sheet.
• Sleep, naps, heart rate, HRV and VO2 max read from Apple Health stay on your iPhone: they are never sent to Aurek’s servers. Workouts (without heart rate), steps and active calories are saved in your own Aurek account so your plan and calories match on your other devices. Nothing from Apple Health is visible to anyone else (never to friends or squads), and it is never used for advertising, marketing or data mining, never sold, never sent to AI features, and never shared with third parties (workouts, steps and calories only with the infrastructure provider that stores your account, Google Firebase).
• Disconnect any time in Settings → Connected devices, or in iPhone Settings → Health → Data Access & Devices → Aurek. You can also remove everything imported from Apple Health (nights, workouts and daily numbers; runs you saved stay).

Watches and rings (Garmin, Oura, WHOOP and others)

Aurek doesn’t connect to these devices directly. If their app writes to Apple Health on your iPhone, Aurek reads that data through Apple Health, as described above, and nothing else about your device account reaches us.

Location and run routes

• Aurek asks for location permission the first time you start a GPS run. You can say no and still use everything else; runs can be logged without GPS.
• A saved run keeps a simplified route, distance, times, splits and elevation in your own Aurek account. It is never used for advertising and never sent to AI features.
• Routes are private. Wherever a route could be shown to anyone else, the first and last 200 meters are cut off so where you start and finish (often home) doesn’t show. Only you can see the full route.
• Maps are drawn with OpenStreetMap: map images for the area you’re viewing are loaded from tile.openstreetmap.org (the OpenStreetMap Foundation sees your IP address and which map squares were loaded, like any website; your route itself is never sent to them).
• Delete any run from its page, or all of them with your account. Turn location off any time in iPhone Settings → Aurek → Location, or in your browser’s site settings.

Who processes your data

These companies process data for us to run Aurek, under contracts or terms that limit how they may use it. We don’t give anyone else your data except as described in this policy.

• Google Firebase / Google Cloud (Google LLC, United States): sign-in, database, server functions, hosting, push notifications and server logs (which can include your account id but not what you log, and are kept up to 30 days). When we turn on Firebase App Check, the website also uses Google reCAPTCHA Enterprise and the iPhone app Apple’s App Attest to confirm requests come from the real app.
• Google Gemini API (Google LLC, United States): only the AI requests described above, under Google’s Gemini API terms.
• Google Firebase Crashlytics (iPhone app): crash and error reports — the scrubbed error details above plus your phone model, iOS version and an app installation id.
• Email delivery: Aurek’s own emails (the confirmation code or link, password resets, and the subscription emails described above) are sent through Aurek’s email provider (for example Google Gmail), which sees your email address and the message. Until that is set up, confirmation and reset emails are sent by Google Firebase Authentication.
• Stripe (Stripe, Inc., United States): payments for subscriptions — checkout, your card, receipts, renewals, cancellations and refunds. Stripe receives your email address, your Aurek account id (to link the payment to your account), your card and billing details (which you enter on Stripe’s page, not in Aurek) and the payments made. Stripe acts as Aurek’s payment processor and handles that data under its own privacy policy, including keeping payment records for as long as the law requires and using them to prevent fraud.
• Food databases: to look up calories and nutrients, our server sends the name of a food or a barcode number — never your name, email, account id or meal photo — to the U.S. Department of Agriculture’s FoodData Central and to Open Food Facts.
• Apple: delivers push notifications to iPhones, provides Apple Health on your device, and runs the App Store (including the rating prompt).
• OpenStreetMap Foundation: serves the map images on run maps (no account data, no routes).

If we add or change a company that receives your personal data, we update this list before it does.

Who at Aurek can see your data

Aurek is run by its two owners. They have admin tools to look up an account (name, email, sign-up date, subscription and moderation status), read the Terms you signed and where your account came from, review reported or held posts and comments, manage the feedback board, run billing, and read error reports and usage totals. They don’t have tools to browse what you log, and your health data isn’t on our servers at all. They can technically reach the database through Google’s console, and do so only to support you, investigate a problem, keep the Service secure or meet a legal obligation.

When we might disclose data

• Because you asked: what you share with friends, squads, group workouts or the feed, or to a service you connect.
• Legal reasons: when a valid law, court order, subpoena or other legal process requires it, or to report child sexual exploitation as the law requires. Where the law allows, we tell you before we disclose your data.
• Safety: to prevent fraud or abuse, or when we believe in good faith that disclosure is needed to protect someone from death or serious harm.
• A business transfer: if Aurek or JAC Software LLC is sold, merged or reorganized, your data may move to the new owner, which must keep honoring this policy (or ask for your consent to a new one). We’ll tell you before that happens.

Security

Data is sent over encrypted connections and stored encrypted by Google Cloud. Database rules only let you read and write your own data, and refuse health data (sleep, journal, heart numbers, injuries) even from your own app; shared data (squad stats, feed and feedback posts) is limited to what you post or choose to share. Posting to the feed or feedback board and sharing with friends requires a verified email. Feed posts and comments pass an automatic word filter, can be reported by anyone who sees them, and objectionable content is removed by an admin within 24 hours. No system is perfectly secure; if a breach affects your personal data, we will tell you (and regulators where required) as the law requires. Found a security problem? Email support@aurek.app with the subject “Security report” (see section 21 of the Terms).

Keeping and deleting your data

• Your account and what you log: kept while your account exists, until you delete it (or a single entry).
• Download: Settings → Your data → Download a backup: everything in your account (weight history, meal photos waiting for the AI…) plus the health data on the device you download from (sleep, naps, journal, heart numbers, injuries, progress photos), in a file you can keep or move.
• Delete: Settings → Your data → Delete my account (in the iPhone app or on the website at aurek.app) permanently deletes your account and all of your data on our servers, including your weight history, meal photos waiting for the AI, runs and their routes, push tokens, squad stats and friend codes, group workouts you host and your place in others, training-partner links, challenges you started alone, your feed posts (with their photos and comments) and your comments, likes and reports on other posts, your block list, your feedback posts, replies, votes and reports, your invite code, your AI answer and counters, error reports and where your account came from. On the device you delete from, the health data kept there (sleep, journal, heart numbers, injuries, progress photos) is deleted as well; on your other phones or browsers, sign in and delete, or sign out with “Also remove your health data from this device”. If you can’t sign in, email us from your account email and we’ll delete it for you.
• Subscriptions: deleting your account first cancels any subscription at Stripe immediately, so you are never charged again; if that can’t be done right then, nothing is deleted and you can try again. Stripe keeps its own record of past payments as tax and financial laws require.
• What we keep after you delete your account: the record of the Terms you signed (3 years, as proof of the agreement); anonymous totals (usage counts, website counts, weekly sign-up and return counts, daily active-account and notification counts, monthly counts of ended subscriptions, cancellation reasons) that can’t be linked to you; a log of free access we gave or removed (with the account id and the reason); and a log of moderation actions (with a masked email). Copies in our database backups are deleted when those backups expire, within 30 days.
• Automatic deletion: error reports after 30 days; email codes after 15 minutes; AI request counts after 7 days; per-person usage lists after 5 days; security counters within 7 days; server logs within 30 days.
• Bookkeeping records of payments: kept as long as tax law requires (generally 7 years), even after an account is deleted, without the link to the account.
• Waitlist: kept until subscriptions open and deleted within 30 days after that. Ask us any time to remove your address sooner.
• Health data left from before October 2026: it is moved to your device the first time you open the updated app and deleted from our servers then. For accounts that don’t open the app again, we delete it from our servers.

Your privacy choices and rights

Wherever you live in the United States, you can:

• Know and access what we keep about you, and get a copy you can take elsewhere: Settings → Your data → Download a backup, or ask us.
• Correct it: edit your profile, entries and settings in the app, or ask us.
• Delete it: delete single entries in the app, or everything with Settings → Your data → Delete my account, or ask us.
• Withdraw consent any time: turn off AI features (Settings › Your data › AI features), disconnect Apple Health, turn off location for Aurek, turn off notifications or usage counts, unsubscribe from marketing emails, stop sharing with friends, or delete your account to withdraw your health data consent. Withdrawing doesn’t affect what was done before.
• Opt out of the sale of personal data, targeted advertising and profiling: there is nothing to opt out of — we don’t do any of them. We treat a Global Privacy Control signal from your browser as an opt-out request anyway; on aurek.app it also turns off the anonymous page counts.
• Not be treated differently for using any of these rights. We don’t charge for them.

How to ask. Email support@aurek.app from your account email (or use Settings › Help & support) and say what you want. To protect you, we may ask you to confirm the request from your account email or by signing in. You can use an authorized agent; we’ll ask for your signed permission and may ask you to confirm your identity with us directly. We answer within 45 days; if we need more time (up to 45 more days) we’ll tell you why.

Appeals. If we decline your request, you can appeal by replying to our answer with the subject “Appeal”. We answer appeals within 45 days and explain the result. If you’re not satisfied, you can contact your state attorney general.

California. We don’t sell or share personal information (as the California Consumer Privacy Act uses those words), haven’t done so in the past 12 months, and don’t disclose personal information to others for their own direct marketing. The categories we collect are the ones listed in “What we store” above: identifiers (name, email, account id), customer records, commercial information (subscription), internet activity (error reports, usage counts), precise geolocation (run routes, only while recording), sensitive personal information about health (what you log, with your consent), and the content of what you post. We use sensitive personal information only to provide the Service you asked for.

Washington, Nevada, Connecticut and other states with consumer health data laws: see the Consumer Health Data Privacy Policy.

Consumer Health Data Privacy Policy

Our Consumer Health Data Privacy Policy (for Washington’s My Health My Data Act and similar laws in Nevada, Connecticut and other states) is on its own page: Consumer Health Data Privacy Policy.

Only for adults (18+)

Aurek is only for people 18 and older, in the United States. We don’t knowingly collect data from anyone under 18; if we learn an account belongs to someone under 18, we close it and delete its data. If you think a minor is using Aurek, tell us at support@aurek.app.

Changes and contact

The terms of use cover prices, free trials, renewal, cancellation and refunds. If this policy changes, the new version will be posted on this page with a new date. If a change is material — for example a new use of data you already gave us, or a new kind of company that receives it — we’ll tell you in the app or by email before it takes effect and, where the law requires, ask for your consent first. Questions or requests: use Settings › Help & support in the app, or email support@aurek.app.