Liftspoon privacy policy

Last updated: 2026-10-22

Liftspoon (https://liftspoon.com) is a calm workout and meal log. Carlos Valdez runs it as an individual ("I", "me"). Liftspoon is in alpha and is free while the alpha lasts. The alpha is open only to people 18 and older who live in the United States, outside Washington State.

The short version: your notes are yours. I store what you need for your log and nothing more. There are no ads, no trackers and no analytics scripts, and I never sell your data or share it for advertising. You can export everything or delete your account at any time.

What you log is wellness data, not medical records

You write what you did and what you ate, in your own words. That's self-logged wellness data. It isn't a medical record, and Liftspoon isn't a healthcare provider. There are no fields for diagnoses, conditions or medications. But it's a free-text log, so you can type anything. Please leave out things you wouldn't want stored, such as medical details about you or anyone else.

Some laws treat fitness and diet notes as health-related data, so I handle them with care: I use them only to run your log, I send them only to the services listed below, and I don't sell them or use them for ads. You agree to this, and to the services below, when you sign up.

What I collect

Your phone number, to sign you in and to text with you. There are no passwords: you sign in with a code texted to you. Liftspoon doesn't ask for your email address.
Your log: workout and meal notes, comments (yours, or ones Liftspoon adds), meal numbers (kcal and protein), and labels such as muscle groups, session type, meal slot and rough kcal and protein ranges.
Your texts: what you text Liftspoon and what it texts you are kept in your log, with a link to each photo you send. Liftspoon doesn't keep the photos themselves.
Sign-in data: your sessions and sign-in tokens, each with the IP address and browser it started from.
Your time zone, so entries land on the right day, and the date you accepted the terms and this policy.
The waitlist: if you sign up while Liftspoon is letting people in a few at a time, your account and number wait on a list until you're let in.
Invite requests made before sign-up moved to phone numbers: the email, the optional note, and who invited you. No new ones are taken.
Activity events, to learn whether the alpha works: when you sign in, when you add an entry, meal or comment, and where it came from (the page, or a text). I also keep the time you were last active.
Feedback: what you tell Liftspoon about the app itself (an idea, or something broken), with your last few texts and replies when it came by text, so I can see what you meant.
Sign-up attempts: When you ask for a sign-in code, Liftspoon records your number, your IP address (an IPv6 address only by its network, the first half), your number's block (the area code and the next three digits) and when the code was sent and checked. They limit how many codes go to one number, IP address or block, so nobody can make Liftspoon text codes to a run of numbers.
Technical data: your IP address is used to limit abuse, and Liftspoon stores it only with your sessions and in the sign-up attempt records above. The hosting provider's proxy may keep standard request logs for a short time.

Why I use it

To run your log: save your notes, show them to you, and label them so the Stats page works.
To text with you: log what you send and reply to it.
To sign you in and keep your account secure.
To manage the waitlist and who's let in.
To understand, in aggregate, whether people keep using Liftspoon, and to fix problems.

I don't use your data for ads, I don't build profiles to sell, and I don't make automated decisions about you.

Texts from Liftspoon

When you sign up, you agree that Liftspoon may text the number you gave: your sign-in codes, a welcome when you're let in, replies to what you text, and messages about your log. Reply STOP at any time and Liftspoon stops texting you; reply START to come back, or HELP for help. Message and data rates may apply.

Nutrition numbers are estimates

Calories and protein are either numbers you gave (marked "exact") or estimates (always marked as estimates, often as a range). Estimates are rough. Liftspoon never calls food good or bad and doesn't give medical or nutrition advice.

Who receives your data

I use a few services to run Liftspoon. Each one gets only what it needs:

exe.dev hosts the server and database.
Prelude sends your sign-in codes and checks the one you type. With your phone number, it receives your IP address, your browser's user agent, whether the number already has a Liftspoon account, and that the request came from the website, which it uses to stop fraud (such as codes texted to numbers nobody asked for).
Sendblue carries the texts between you and Liftspoon, over iMessage or SMS. It receives your phone number and the texts and photos sent each way.
TypeSafe labels each entry you log (muscle groups, session type, meal slot, rough kcal and protein ranges). The text of the entry is sent to it, and nothing else about you.
Cloudflare provides DNS, and Turnstile, a check on the sign-up page that you're a person and not a bot. Turnstile runs in your browser on that page and sends Cloudflare technical details such as your IP address and browser; Liftspoon's server then sends Cloudflare the check's result and your IP address to confirm it. Your log doesn't pass through Cloudflare.
Anthropic (Claude) reads what you text Liftspoon, the photos you send, your recent texts and the parts of your log it needs, to reply and to log what you send. It also reads a note you choose to import (pasted, or from a file) to split it into dated entries. The text of that note is sent to it, and nothing else about you. Liftspoon keeps only the entries you confirm, not the note itself. It also reads the calorie and protein numbers written in a meal you log, like "110 calories", so they show as exact: only meals TypeSafe says state such a number are sent, and only their text.

I may also disclose data if the law requires it. If Liftspoon is ever sold or handed over, I'll tell you first and you can delete your account before anything moves.

How long I keep it

Your log, texts included, and your account stay until you delete them.
Activity events are deleted after 12 months, and all of yours when you delete your account.
Feedback is deleted after 12 months, and all of yours when you delete your account.
Invite requests are deleted 12 months after they're made, or when you delete your account.
Sign-up attempt records are kept 7 days: older ones are deleted whenever a code is asked for.
Nightly backups keep copies for up to 7 days, then they're deleted.

Export and delete

Export: download your whole log as JSON or Markdown at any time from the log page.
Delete: choose "Delete account" at the top of your log page. It offers the export first, then deletes your log (texts included), your phone number and account, sessions, sign-in tokens and activity events right away, and signs you out. Copies in backups disappear within 7 days. To come back, you'd sign up again. You can also email support@liftspoon.com and I'll delete your account and confirm.

You can also ask me what I hold about you, or to correct it, by emailing the same address.

Security

Connections use HTTPS. Sign-in codes expire quickly and work once. Access to the server is limited to me. No system is perfect, and I'll tell you promptly if something goes wrong that affects your data.

Your rights

Wherever you live in the US, you can access, correct, export and delete your data, whether or not a law requires me to offer it.

Age and location

The alpha is for people 18 and older who live in the United States, outside Washington State. If you think someone younger, or outside the alpha, has signed up, email me and I'll delete the account.

Changes

If I change this policy, I'll update the date above. For a meaningful change, I'll text you before it takes effect.

Contact

Carlos Valdez, support@liftspoon.com