Privacy Policy

Bootsurf ("we", "us") operates SynapLift, a strength-training mobile application with workout logging, progress tracking, and AI-powered coaching features. We are established in the Netherlands (KVK: 12345678).

Privacy contact: synaplift@outlook.com

This policy describes how we process personal data when you use the SynapLift mobile app and this website. It is designed to meet GDPR / AVG (EU) transparency requirements and aligns with Apple App Store privacy expectations for health & fitness apps.

Depending on how you use SynapLift, we may process:

• Account data: email address, display name, and sign-in identifiers when you use Sign in with Apple, Google, or email.
• Profile & fitness data: age, weight, height, goals, experience level, training preferences, and workout history (exercises, sets, reps, volume, personal records).
• AI Coach data: text messages you send to the coach and optional photos you attach in chat.
• Subscription status: whether you have SynapLift Pro (billing is handled by Apple or Google; we do not store your payment card details).
• Technical data: app version, device type, and security signals to protect our services.

Health and fitness-related data may qualify as special category data under GDPR Article 9. We process it only with your explicit consent, which you provide by creating an account, entering profile data, and using AI features after reading in-app disclosures.

To provide personalized coaching and physique analysis (including Scan AI and photo messages in AI Coach), SynapLift requires access to your device's camera and photo library when you choose to upload images.

• Image processing: When you upload a physique or workout photo, the image is sent over encrypted connections to a third-party AI provider (Google) solely for real-time coaching or visual analysis.
• No biometric identification: SynapLift does not use your photos for facial recognition, biometric identity verification, or permanent user tracking.
• Data retention & protection: Uploaded images are analyzed to generate your response and are not stored permanently on public-facing servers for advertising purposes. They are not sold to data brokers or used for targeted advertising.
• User control: You can revoke camera or photo-library permissions at any time in your iOS or Android system settings. Without permission, you can still use text-based coaching where available.

Third-party AI (Apple Guideline 5.1.2): Before your content is sent for AI analysis, the SynapLift app shows you an in-app disclosure naming the provider and asking for explicit permission. A general terms checkbox alone is not sufficient — you must consent to AI sharing inside the app.

• Contract: to provide workout logging, sync your data, and operate your account.
• Explicit consent: for health/fitness profile data, AI Coach, and Scan AI image analysis.
• Legitimate interests: security, fraud prevention, and improving app stability (balanced against your rights).
• Legal obligation: where we must retain limited records (e.g. tax-related billing metadata from platforms).

We do not sell your personal data. We use trusted processors:

• Google — secure sign-in, cloud storage, and AI text/vision analysis (processing may occur in the EU or US per Google’s terms).
• Our subscription partner — confirms whether you have SynapLift Pro (Apple and Google handle payment).
• Apple App Store / Google Play — in-app purchases and subscriptions (we do not receive your full card details).

Each processor is bound by contractual data-protection obligations. Links to their policies are available on request.

• Account & workout data: kept while your account is active. You may delete your account in Settings.
• After account deletion: personal data is removed from active systems within a reasonable period; backups may persist for up to 90 days before automatic purge.
• AI images: processed for the request; not retained for marketing or resale.
• Support emails: up to 24 months unless a longer period is required by law.

If you are in the EEA (including the Netherlands), you may:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing.
• Withdraw consent for AI or health data (this may limit features).
• Request data portability where applicable.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

To exercise your rights, email synaplift@outlook.com or delete your account in the app (Settings → Delete account).

You can delete your SynapLift account from Settings → Delete account in the app. This removes your profile and workout data from our active systems and signs you out of linked services.

Important: Deleting your account does not cancel an active SynapLift Pro subscription billed through Apple or Google. Cancel subscriptions in iOS Settings → Apple ID → Subscriptions or Google Play subscription settings.

SynapLift is not intended for users under 18 years of age. We do not knowingly collect data from minors. Contact us if you believe a minor has created an account.

Some processors (e.g. Google) may process data in the United States or other countries. We rely on appropriate safeguards such as Standard Contractual Clauses where required by GDPR.

We use encryption in transit, access controls, and additional checks on AI features. No method of transmission over the internet is 100% secure; we work to protect your data using industry-standard measures.

We may update this policy. Material changes will be reflected on this page with a new "Last updated" date. Continued use of SynapLift after changes constitutes acceptance where permitted by law.

Bootsurf · Netherlands · KVK 12345678
synaplift@outlook.com