About this website: luxwealthgroup.com.au has no forms and sets no cookies. Our web host records technical information such as your IP address when you visit. The policy below explains how we handle it, together with everything about Lux Lift.

Lux Lift — Privacy Policy

Version 1.1 · Effective: 3 October 2026

Who we are

Lux Lift is provided by Lux Wealth Group Pty Ltd (ACN 702 600 682), Wentworth Point NSW 2127 ("we", "us"). We handle your personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Privacy contact: support@luxwealthgroup.com.au

In short

We collect only what the app needs. We never sell your data and never use it for advertising. Your health and training entries go to our cloud database only if you say yes — if you say no, you can use the training features on this device without cloud sync. Our database is in Sydney. Lux Lift is a training log and does not provide medical advice, diagnosis or treatment.

What we collect

• Account: email address, username, password (stored hashed by our login provider) or, if you sign in with Google, your name, email address and Google account identifier; your country (for units and the laws that apply) and units.
• Records of your choices: that you confirmed you are 18 or over, accepted the terms, and said yes or no to health data — each with the date and the version of the text you saw.
• Profile answers: training experience, years lifting, age range, height (optional), goal and target weight.
• Settings: units, app preferences and an optional protein target.
• Training data: your program, workouts, exercises, sets, reps, weights, personal bests and session times.
• Body weight: weigh-ins you enter.
• Workout check-in: three taps at the start of a workout — sleep compared with usual (less / normal / more), energy (low / ok / high), and muscle soreness where you train today (no / a bit / very). We do not ask about pain or injury.
• Feedback and support messages you send us. They may contain health details if you include them.
• Technical: sign-in times, and IP address and browser details recorded by our login and web-hosting providers when you use the site.

We do not collect your precise location, contacts, photos, payment details, or any food log. Body weight, check-in answers, profile answers, your protein target and training data may be health information, which the law treats as sensitive.

Health information — your choice

After your first sign-in we ask whether you agree to us storing your health and training data in our cloud database so it syncs and is backed up. If you say yes, we store it and use it only to run the app for you. If you say no, you can use the training features on this device in local-only mode: the app does not sync your health and training entries to our cloud. Your account, your choice records and technical data are still stored. Information you choose to send us in feedback or a support request may still reach us. You can pause syncing, or withdraw consent (which deletes the cloud copy), at any time in Settings.

How we use it

To run your account; sync and back up your data (if you said yes); show your history, targets and per-lift suggestions; answer your feedback and support requests; keep the service secure and fix problems; and meet our legal obligations. We will ask before using your information for any new purpose.

AI tools

Lux Lift does not send your data to any AI service. If you copy a prompt or your log out of the app and paste it into an AI assistant you use, you are sharing it with that provider under their terms.

Who we share it with

Only service providers that run the app for us, and only for that purpose: Supabase (database, login and backups); Google (only if you choose "Sign in with Google"); our web-hosting provider (technical data only); and Resend, which sends our sign-up confirmation and password-reset emails (your email address and the email, including one-time sign-in links). Our service providers, including tools we use to build and run the app, may process information only as needed to operate the app. We share information with authorities only where the law requires.

Overseas

Your account and app data are stored in Supabase's Sydney data centre. Supabase is a United States company and its staff may access data from outside Australia to operate the service. Google sign-in is handled by Google in the United States and other countries. Our account emails are sent through Resend, a United States company. They are sent from servers that currently appear to be in Japan, and Resend stores email records and logs in the United States. Our web server currently appears to be in Sydney based on its network location (our host has not confirmed its physical location); our hosting provider and its cloud provider are United States companies and may access technical data such as your IP address from overseas.

Security

Data is encrypted in transit. Database rules restrict each person to their own data, and we test those rules. Access by our team and tools is limited to what is needed to run and fix the app.

How long we keep it

While your account is open we keep your data. We delete the live account and app records within 30 days of an account-deletion request. Existing Supabase backups and Supabase platform logs follow their own retention periods of about seven days. Resend keeps its email records and logs for about 30 days. Our web host's technical logs may have a different period; we will state it once confirmed. We keep records of your choices (age, terms, consent) for as long as we need them to show what you agreed to. Feedback is deleted after 12 months. If you have not signed in for 23 months, we email you; if you still have not signed in by 24 months, we delete the account. Local-only data stays on your device until you delete it or sign out — signing out deletes it from the phone, so export it first.

Your rights

You can see and correct your data in the app, export it free as CSV or JSON (Settings), pause cloud sync, withdraw health consent (which deletes the cloud copy), delete your account in Settings → Account, and ask us what we hold. We reply within 30 days, free of charge. If we refuse a request we tell you why and how to complain.

Age

Lux Lift is for people aged 18 and over. We do not knowingly allow anyone under 18 to create an account, and we delete any such account we find.

Data breaches

If a breach is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC) as the law requires.

Complaints and changes

Contact us first; we reply within 30 days. If you are not satisfied you can complain to the OAIC (oaic.gov.au). We post changes here with a new date and tell you in the app before any material change.