Privacy Policy

1. Controller and scope

Roberta Virzi PT is the controller for personal data processed through the StormLift mobile apps for Android and iOS and this legal website. StormLift Labs is a product operated by Roberta Virzi PT, registered with the Dutch Chamber of Commerce under number 42094735. StormLift Labs and StormLift are product/brand names, not separate legal entities.

StormLift is a free fitness planning and workout tracking app for adults aged 18 and over. It has no user accounts, subscriptions, in-app purchases, advertising, product analytics SDK or crash-reporting SDK.

2. Data StormLift handles

Depending on what you choose to use, StormLift may process:

• Profile data: display name, training goal, age, gender preference and profile photo.
• Fitness and body data: workouts, exercises, sets, repetitions, weights, rest times, duration, pace, incline, completion history, progress, body weight, height and calculated BMI.
• App data: exercise preferences, settings, reminders, active and resumable workout checkpoints, generated or imported plans and, on Android, local translation cache entries.
• User-directed files and messages: imported workout files, manual backups, exports, shared files and feedback emails.
• Technical requests: exercise search terms, filters, identifiers and media requests sent to YMove or its media hosts; on Android, app, device and operational information processed by Google ML Kit as described below.

StormLift does not intentionally collect precise location, contacts, payment data, advertising identifiers or data from Health Connect or Apple Health.

3. Purposes and legal bases

• To provide workout creation, tracking, history, progress, reminders, import, export, backup and restore features: performance of the agreement you make with Roberta Virzi PT by accepting the Terms (GDPR Article 6(1)(b)).
• To process fitness and body data you choose to enter, including information that may qualify as data concerning health: your explicit consent in the onboarding safety screen (GDPR Articles 6(1)(a) and 9(2)(a)). You can withdraw your consent at any time from Settings using the in-app Delete All Data action (called Delete all StormLift data on Android). This deletes all app-managed data, including the fitness and body data required for these features, and may prevent StormLift from continuing to provide them. Withdrawal does not affect earlier lawful processing.
• To answer feedback or support email: your request and, where needed, Roberta Virzi PT’s legitimate interest in providing support (GDPR Articles 6(1)(b) and 6(1)(f)).
• To establish, exercise or defend legal claims and meet legal duties where applicable (GDPR Articles 6(1)(c), 6(1)(f) and 9(2)(f)).

4. Local storage, platform backup, device transfer and manual backup

StormLift stores app-managed state in private storage on your device. StormLift does not operate an account server or its own cloud-sync service for your profile, workout history or progress.

Android Auto Backup remains enabled. If backup is enabled in your Android and Google account settings, Android may automatically upload StormLift app files and settings—including workouts, history, progress, profile information and profile photos—to the backup service associated with your Google account. Android may restore that data after reinstalling the app or during device transfer. YMove catalog and translation cache files are excluded from StormLift’s Android backup rules.

On iOS, eligible durable StormLift data in normal app storage—including workouts, history, plans, profile and body information, preferences, settings, onboarding and stored consent versions—may participate in Apple device backup, iCloud backup or device transfer according to your Apple and system configuration. Apple controls those backup and transfer facilities; StormLift does not operate the associated cloud storage.

StormLift may also let you create manual backup or export files containing durable app data, including profile and body data, workouts, history, plans, settings, preferences, onboarding and stored legal consent versions. Restored consent is checked against the requirements current at the time of restore; missing or older consent must be accepted again. Once a manual backup, export or shared file is saved outside StormLift-managed storage, it remains where you saved or sent it and must be deleted there separately.

5. Third-party services and recipients

• YMove: licensed exercise names, instructions, images and videos. StormLift sends exercise queries, filters, slugs or identifiers and related request data over HTTPS. Saved profile, body measurements and workout history are not intentionally sent to YMove.
• Google ML Kit Translation on Android: translates supported exercise guidance on the device after downloading language models. Google states that ML Kit processes device information, app information, configured languages, performance metrics and identifiers for diagnostics and usage analytics. Google states that this SDK data is encrypted in transit and not shared onward by ML Kit.
• Android and Google services: optional Auto Backup, device transfer, notification delivery, ML Kit model management and Google Play distribution.
• Apple and iOS services: optional device backup, iCloud backup, device transfer, local notification delivery and App Store distribution.
• Remote media hosts: loading YMove-provided thumbnails or videos discloses ordinary network request data such as IP address and device/browser headers to the serving host.
• Your chosen apps and services: email, file, cloud-storage or sharing providers process data only when you direct an export, share or feedback action to them.
• GitHub Pages: hosts this static legal website and may process ordinary server request logs under GitHub’s own privacy terms.

Roberta Virzi PT does not sell personal data and does not share it for advertising. Third-party providers may process data outside the European Economic Area under their applicable transfer mechanisms and privacy terms.

6. Retention and deletion

App data remains on the device until you edit it, delete individual items, use the in-app Delete All Data action, clear app storage or uninstall the app, subject to the Android and iOS backup behavior described above. Translation and exercise cache entries remain until refreshed, cleared or deleted. Feedback email is retained only as long as reasonably needed to respond, maintain support records or meet legal obligations.

StormLift has no account-deletion process because it has no user accounts. Delete All Data removes StormLift-managed local data from the current device, including profile and body data, profile photos, workouts and history, checkpoints and active runtime state, preferences and settings, onboarding and legal consent state, and app-managed cache and temporary data. The app then returns to onboarding.

Delete All Data does not synchronously delete manual backups, exports or shared files outside StormLift-managed storage; historical Android, Google, Apple or iCloud backup copies controlled by platform infrastructure; system permissions; or unrelated system and account data. Manage platform backup copies through the applicable Google, Android, Apple or iOS settings. If you later restore a manual backup, restored consent is checked against the then-current requirements.

7. Your GDPR rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Because most data is held in app storage on your device or in backups and files controlled through your platform or chosen destination, the fastest way to exercise control is through the app, an export, Delete All Data, or the applicable platform and file-storage settings. Roberta Virzi PT may be unable to access or identify local-only data remotely.

Send rights requests to stormliftapp@gmail.com. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority where you live or work.

8. Security

StormLift uses private app storage on Android and iOS and HTTPS for remote requests. Manual exports and backups are protected by the destination you choose. No system can guarantee absolute security; keep your device and exported files protected and up to date.

9. Children

StormLift is intended only for people aged 18 and over and is not directed to children. Do not use the app if you are under 18.

10. Health and safety

StormLift provides general fitness planning and tracking. It is not a medical device; it does not diagnose, treat, cure or prevent disease; and it does not replace qualified healthcare advice. Consult a qualified healthcare professional before starting or changing exercise if you have an injury, symptoms, pregnancy or a health concern.

11. Website cookies

This static legal page does not intentionally set advertising or analytics cookies. The hosting provider may process ordinary request logs as described in its own terms.

12. Changes

Material changes will be reflected by a new version and effective date. Where required, StormLift will present an updated in-app notice before continued use.