Privacy policy

1. Controller and contact

The person responsible for this website and the processing described here is:

You can contact me by email or post with privacy questions or to exercise your rights.

2. Training, starting-routine assistant and local history

No account is required. Current timer progress and answers in the starting-routine assistant are processed only in your browser’s working memory and are discarded when you reload or leave the app. These may include optional information about symptoms and surgery. The application code does not send these answers to me, a server or an AI service. The assistant uses fixed decision rules.

LiftLetGo stores your selected routine, custom timer settings, sound preference, history-storage choice and details of fully completed sessions in localStorage. A history entry contains the completion time, routine name, number of repetitions and guided time. Up to 100 entries are stored. Sessions ended early are not saved. You can stop new entries without deleting existing ones.

This data remains only in this browser on this device. It is not sent to me or the hosting server and does not sync across browsers or devices. You can export it to a local JSON backup and import it after reviewing a summary. The file contains local settings and history, but no assistant answers or safety confirmation. Treat it like other personal data on your device.

Local data remains until you remove it in the app or delete the website’s browser data. Private browsing, browser settings or automatic cleanup may remove it sooner. There is still no server-side training history. Optional sound cues are generated on your device; the app does not request microphone, camera or location access.

3. Website requests and hosting

Page requests transmit technical information to the hosting infrastructure, including your IP address, request time, requested address, browser and device information, a referring page where supplied, and technical status or error data. This is needed to deliver content, investigate errors and prevent abuse. The legal basis is Article 6(1)(f) GDPR: my legitimate interest in a secure, reliable website.

LiftLetGo uses OpenAI’s ChatGPT Sites with Cloudflare infrastructure. The Sites Data Processing Addendum governs processing on behalf of the operator and designates OpenAI Ireland Limited for EEA data. Recipients include hosting and security providers and their sub-processors. Processing outside the EEA, including the United States, is possible. The terms provide for EU standard contractual clauses or adequacy decisions for these transfers. You may also contact me for information about these safeguards.

Technical logs support operation, troubleshooting and security. Retention depends on their purpose and the hosting provider’s rules; public Sites documentation does not specify a fixed period applicable to all access logs for this website. Specific records may need to be retained to investigate security incidents or meet legal obligations. On request, I will clarify the retention applicable to your data with the provider.

4. Security cookies and services

Cloudflare sets the __cf_bm cookie to detect automated traffic and protect the website. It contains encrypted bot-detection information and, according to the provider, expires after 30 minutes of inactivity. See Cloudflare’s cookie information.

This security cookie supports protected operation (section 25(2)(2) of Germany’s TDDDG); associated personal-data processing is based on Article 6(1)(f) GDPR. The application includes no advertising or analytics tools and sets no marketing cookies. Fonts come from your device; there are no embedded external videos, maps or social-media widgets.

After a successful first visit, a service worker stores public pages and application files in the browser cache so they can open offline. API, authentication, query and personal responses are not cached. You can remove this cache through your browser’s website-data settings. The code contains dormant groundwork for possible future push notifications. LiftLetGo currently does not ask for notification permission, create a push subscription or send push messages.

5. Contact by email or post

If you contact me, I process your sender and contact details, message content and related communication data to respond. Email service providers involved in delivery receive email data. The legal basis is my legitimate interest in handling enquiries (Article 6(1)(f) GDPR), or Article 6(1)(b) GDPR for enquiries related to a contract.

Forward Email is used for the domain’s incoming email. It processes messages for delivery and spam protection. Processing outside the EEA is possible; the provider’s Data Processing Agreement provides for standard contractual clauses for these transfers. Its privacy policy explains processing and service-specific retention periods.

Please do not send medical records or other sensitive health information. This website does not provide medical advice by email. Correspondence is deleted once your enquiry is resolved, unless statutory retention duties or necessary retention for establishing or defending legal claims apply.

6. External links

Sources and further information are ordinary links. Opening one takes you to another website, whose operator’s privacy information then applies. That website receives the technical data normally involved in a page request.

7. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). Where processing relies on consent, you may withdraw it for the future.

Right to object: You may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). Please use the contact details above.

You may complain to a data protection authority, particularly where you live or work or where an alleged infringement occurred. In Berlin: the Berlin Commissioner for Data Protection and Freedom of Information.

8. Voluntary use and changes

You are not required to create an account or contact me. The website cannot be delivered without the necessary technical request data. There are no automated decisions producing legal or similarly significant effects and no advertising profiling. The local starting-routine assistant provides non-binding guidance.

This policy describes the current version of LiftLetGo. It will be updated if the website’s features or service providers change.