Privacy Policy

Last updated: July 20, 2026

1. Introduction

LiftBase (hereinafter "the Service"), published by OCLKA, is committed to protecting the privacy of its users. This privacy policy (hereinafter "the Policy") describes how OCLKA collects, uses, shares, and protects the personal data of users of the Service.

By using the Service, you consent to the collection and processing of your personal data as described in this Policy.

2. Data collected

2.1 Data provided by the user

When creating an account and using the Service, OCLKA may collect the following data:

  • Account credentials: email address, username.
  • Training data: routines, custom exercises, training history, preferences.
  • Profile information: weight, height, goals, experience level (if the user chooses to provide them).

2.2 Automatically collected data

  • Technical data: IP address, browser type, operating system, pages visited, session duration.
  • Cookies and similar technologies: session identifiers, language preferences, analytics data.

2.3 Data collected via third-party providers

When authenticating via OAuth providers (Google, GitHub, etc.), OCLKA may receive identification data provided by the third party, such as email address and username.

3. Processing purposes

Personal data is collected and processed for the following purposes:

  • Service provision: account creation and management, display and storage of training data.
  • Authentication and security: user identity verification, prevention of unauthorized access.
  • Service improvement: usage analysis, bug identification, development of new features.
  • Communication: sending verification emails, account notifications, responding to support requests.
  • Legal compliance: compliance with applicable legal and regulatory obligations.

4. Legal basis for processing

The processing of personal data is based on the following legal grounds, in accordance with the GDPR:

  • Contract performance: provision of the Service requested by the user (Article 6.1.b GDPR).
  • Consent: for non-essential cookies and optional profile data (Article 6.1.a GDPR).
  • Legitimate interest: Service improvement, security, fraud prevention (Article 6.1.f GDPR).
  • Legal obligation: compliance with applicable legal obligations (Article 6.1.c GDPR).

5. Data retention

Personal data is retained for the period necessary to provide the Service:

  • Account data: retained as long as the account is active, deleted within 30 days of deletion request.
  • Training data: retained as long as the account is active, deleted with the account.
  • Technical data: retained for a maximum of 13 months.
  • Audit logs: retained for 12 months in accordance with legal obligations.

6. Data sharing

OCLKA does not sell or rent users' personal data. Data may be shared with the following providers, strictly to the extent necessary:

  • Infrastructure providers: hosting (Vercel), database, storage.
  • Authentication providers: Google, GitHub (for OAuth).
  • Analytics providers: Sentry (error tracking), Arcjet (abuse protection).
  • Email providers: transactional email service (OTP verification).

These providers process data in accordance with their own privacy policies and strictly within the scope of their mission for OCLKA.

7. Transfers outside the EU

Some data may be processed by providers located outside the European Union. In such cases, OCLKA ensures that appropriate safeguards are in place, such as the standard contractual clauses adopted by the European Commission, to ensure an adequate level of protection for personal data.

8. Security

OCLKA implements appropriate technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction:

  • Data encryption in transit (HTTPS/TLS).
  • Secure authentication (OTP, OAuth).
  • Restricted data access based on the principle of least privilege.
  • Access monitoring and auditing.
  • Regular backups.

9. Cookies

The Service uses cookies for the following purposes:

  • Essential cookies: necessary for the Service to function (session, authentication).
  • Preference cookies: language, theme.
  • Analytics cookies: audience measurement, performance (if the user has given consent).

The user can manage their cookie preferences through their browser settings or via the consent banner displayed on first visit.

10. User rights

In accordance with the GDPR, the user has the following rights:

  • Right of access: obtain a copy of the personal data held by OCLKA.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure: request deletion of their account and data.
  • Right to restrict processing: request temporary suspension of processing.
  • Right to data portability: receive their data in a structured, machine-readable format.
  • Right to object: object to the processing of their data for legitimate reasons.
  • Right to withdraw consent: at any time, for processing based on consent.

To exercise these rights, the user may contact OCLKA at the address indicated in section 12.

11. Changes to the Policy

OCLKA reserves the right to modify this Policy at any time. Changes take effect upon publication on the Service. It is the user's responsibility to regularly consult the Policy to stay informed of any changes.

12. Contact

For any questions regarding this Privacy Policy or to exercise your rights, you may contact OCLKA: