Lifted Privacy Policy

Effective date: 9 September 2026 Publisher: Frederick Lawson (individual developer), Bermuda Contact: sailmaster.dev@gmail.com

Lifted is a race timer, sailing tracker, and race replay app for Apple Watch and iPhone. The short version: no advertising, nothing sold or shared with anyone, and heart rate never recorded.

What has changed: your races are now kept in your own Lifted account, and Lifted asks you to sign in before you use it. A full copy of every race is also held on your iPhone, so replays open on the water with no signal, and the same races appear on this website. The section "Your account and your races" below sets out exactly what is stored and what is not.

What the app uses, and where it goes

Location

Lifted uses precise GPS to show speed over ground, course over ground, VMG, and distance to the start line. On Apple Watch this runs while the race's workout session is active. On iPhone, a standalone race keeps using location in the background while the race is running, so the timer, route, and instruments keep working with the phone locked or in a pocket. Location is used in four ways:

1. On your watch or iPhone, to drive the live race dashboard. These readings are held in memory and cleared when the race ends.
2. In your Lifted account, as the recorded route stored with the race, and in the copy of that race held on your iPhone. See "Your account and your races".
3. In the Apple Health copy of the race, as the GPS route attached to the Sailing workout (see Health & Fitness below). That copy stays on your device, under your control.
4. In weather requests. To fetch the wind, the app sends your coordinates to a weather provider. Open-Meteo is the primary live provider, on both the watch and the iPhone. Apple Weather (WeatherKit) is used on iPhone only — as the live fallback when Open-Meteo cannot be reached, and to fill in the wind for older races recorded without it. A race recorded without wind may also have it filled in from Open-Meteo's historical archive; that request carries the race's recorded location and time, not your live position. Each request contains coordinates and — as with any internet request — an IP address. It carries no name, account, or device identifier. We never receive or store your location from these requests. See "Third-party services" for their policies.

Health & Fitness

Each race is saved to Apple Health as a Sailing workout (its duration, GPS route, and the wind recorded during the race) so it appears in the Fitness app with a map. Both the Apple Watch and the iPhone can record a race, so each asks once, at first launch, for permission to add Sailing workouts and their routes — that is what saves the race. Lifted does not ask for permission to read your Health data, and your race history and replays do not come from Apple Health: they come from your Lifted account. (Apple always lets an app read back the workouts it saved itself, and Lifted uses that only to check which of its own recordings still need to reach your account.)

The route and speed that Lifted itself recorded during a race are also stored in your Lifted account, described below. Lifted reads no other Health data, and it never records heart rate or any other biometric — so nothing else from Health is ever stored or uploaded. We never use health or fitness data — or any other data — for advertising, marketing, or data mining, and we never share or sell it to third parties for advertising, marketing, data mining, or any other purpose.

Your account and your races

Your account is created when you first sign in. The app asks you to sign in before you use it — with Apple, or with a 6-digit code sent to your email address — and that first sign-in is what creates the account. The app never creates an account on its own, and nothing about you is stored before you sign in.

You can give your account a name. This website's account menu lets you set a display name. It is optional and starts empty, and if you signed in with Apple and chose to share your name, that is what it starts from. The name is not private: it is what other sailors see beside a race you have shared, in a race's seen-by list, and on an event page, in place of the email address those pages otherwise fall back to (see "Sharing a race"). You can change it or clear it whenever you like, and clearing it restores the email fallback.

You can add the boats you race in. Each one holds a name and, if you give one, a class — "Rebel", "RS21". The app also keeps your boat's tacking angle against it, learned from how you sail, so the wind model starts from your own boat's number rather than a generic one. You can mark one as your default, and new races are then recorded in that boat; setting a default for the first time also fills it in on the races you have already recorded. You can change the boat on any race. Your boats are private to you: no other user sees them at all, and a race you share does not show which boat it was sailed in. The two people who run Lifted can see the boat on a race, as described under "Support and debugging". Removing a boat archives it rather than deleting it, so races already sailed in it keep the name.

Your account also records when you last opened the iPhone app. It is one date, written by the app as it launches. It is what stops this website showing you an App Store prompt you do not need.

Every race you record is stored in that account. Your race history and every replay are read back from it, and there is no way to turn this off. A stored race contains:

• the GPS positions recorded during the race, each with its speed, heading, and timestamp;
• the wind readings for the race;
• the race name, its start and finish times, and the start line coordinates;
• each boat's colour and start time;
• which of your boats it was sailed in, if you have added any (below).

That is the whole of it. No heart rate, no other Health data, no contact details, nothing about you as a person.

Where it is stored. In a database hosted for us by Supabase, in their Canada (Central) region. A full copy of each race is also kept inside the app's own storage on your iPhone, so History and replays work with no signal; that copy goes when you delete the app. The Sailing workout copy in Apple Health is separate again, on your own devices and under your control.

Who can read it. Your races are private to your account, enforced in the database itself with row-level security, so no other user can browse them. There are two deliberate exceptions, and both are yours to make: sharing a race's link lets other signed-in users open that race, and picking somebody as crew on a race lets them open it. Both are described under "Sharing a race". We do not claim end-to-end encryption: the data is not encrypted in a way that locks us out, so as the operator of the database we are technically able to read it. We do not do so except where it is necessary to run or repair the service.

Support and debugging. Two named people run Lifted. They can see a list of every account — the email address it was created with, the display name set on it if there is one, the dates it was opened and last signed in to, and how many races it holds. They can also see a list of every race: the account it belongs to, the race's name, the boat it was sailed in, when it started and how long it ran, and its headline figures — distance sailed, top speed and average wind. Those two lists are what let them answer a support question and repair a fault. Neither one includes the recorded track, and they do not open a race except where a fault makes it necessary.

Signing in. Lifted asks you to sign in before you use it, because your races live in your account rather than only on the handset in your pocket. Signing in with Apple, or with a code sent to your email address, creates your account the first time and signs you back in to the same one after that. It is also what lets this website show you the races your watch and iPhone have stored. Signing in with Apple gives us the identifier Apple issues for Lifted and an email address — which is Apple's private relay address if you chose to hide yours.

We are told when an account is opened. Lifted is run by two people, and a new account sends them a phone alert carrying the email address it was created with and which sign-in method was used. It goes through Pushover, listed under "Third-party services". It happens once, when the account is created, and nothing you do afterwards sends another.

Deleting the app does not delete the account. The session is held in the device Keychain, which survives deleting the app, so reinstalling recovers the same account and the same races. To remove the account, use the in-app deletion described under "Retention and deletion".

Sharing a race

Sharing is off for every race until you share it: tapping Share on a race marks that race as shared and hands you a link to its page on this website. Anyone who has the link and signs in to a Lifted account — any Lifted account — can open that race: its route, speeds, wind, and start line. So that messaging apps can show a link preview, some of a shared race is readable without signing in: its name, start date, headline figures (distance, duration, top speed, average wind), and a simplified outline of the course, coloured by boat speed, used to draw the preview picture. Everything else — the full replay, exact positions and timestamps — stays behind sign-in. Choosing Stop sharing on the race turns the link off again — after that it stops working for everyone, and nothing about the race appears in previews — though anyone you added to that race's crew still sees it, as described below. We never see who you share a link with.

When someone signs in and opens a race you have shared, we record which account opened it and when, and we show that to you, the race's owner, as a list of account names on the race's page — or, where an account has no name set, the part of its email address before the @ sign, never the whole address. Turning the link off stops new viewers, but keeps the record of accounts that already opened it. Opening your own race records nothing.

Someone who opens a race you have shared can also keep it in their own race list on this website. While the race stays shared, it appears in their list with its name, date, headline figures, an outline of the course, and your account name — or your email address, if your account has no name set. Stop sharing removes it from their list straight away, and sharing again puts it back — unless you added them to that race's crew, in which case it stays. They can also remove it themselves at any time.

You can also group races into a named event (a regatta, say) and share the whole event with one link. An event is a label, not a way of sharing: adding a race to an event does not make it readable by anybody. Signed in, someone with the event link sees the races in it that you have shared, plus any of their own, and for each they see the name of the sailor who added it — or, where that account has no name set, the part of their email address before the @ sign, never the whole address. Without an account they see the event's name, its dates, how many shared races it holds, the total distance, and for each of those races its name, its start time and a small outline of its track, coloured by boat speed — though no sailor names or email addresses. A race can be in one event at a time.

You can keep a list of the people you sail with — your crew — by email address, on your profile. That list is private to you and shows those people nothing on its own. On any race you have recorded you can then pick which of them was aboard, and that is what lets them open it: the race, its full replay, and everything else on its page, whether or not you have shared it. We email the address each time you add it to a race, naming you and the race, and linking to it. If the address has no Lifted account, that email invites them to create one, which means adding crew tells you whether an address is already registered with us. A race's page lists who was aboard to everyone who can open it: you, as the sailor who recorded the race, and then the crew you picked — each shown by account name or, where an account has no name set, the part of its email address before the @ sign, never the whole address. Crew also see your account name, or your email address if your account has no name set, on the race in their own race list. We record when crew open a race, as we do for a shared link, and you see that record once the race is shared. Taking them off a race, removing them from your crew list, or their choosing to leave, ends their access straight away; removing them from the list ends it for every race at once. Stopping sharing a race does not end it: crew see a race because they were aboard, not because of the link.

A race's page in the app can also export the race as a ZIP archive containing the GPS route, timestamps, speed, the wind series, and the start line. iOS sends it only to the person, app, or destination you choose in the share sheet. We never receive a copy, and anything you have already sent must be deleted from wherever you sent it.

Purchases

Lifted offers an annual subscription. Payment is handled entirely by Apple through the App Store: we never see your payment details. The purchase is tagged with your account identifier so the app knows what you are entitled to. You can manage or cancel the subscription in your App Store account settings. Apple's handling of your purchase is covered by Apple's Privacy Policy.

Settings

A handful of preferences — such as your countdown duration, chosen wind engine, display options, and the last screen you used — are stored locally on the device. Deleting the app deletes them.

What we don't do

• No crash-reporting or advertising SDKs
• No tracking across apps or websites, no fingerprinting
• No selling of data, and none shared for advertising or marketing — nothing is collected to sell
• No heart rate or biometrics, ever

Third-party services

Service	What it receives	Why
Open-Meteo	Coordinates, IP address	Live wind on the watch and iPhone, and historical wind for races recorded without it — Open-Meteo terms
Apple Weather (WeatherKit)	Coordinates, IP address	iPhone live fallback, and past wind for replays of older races — Apple Weather legal
Supabase	Your account identifier and the races in your account	Race storage and sign-in — Supabase privacy
Apple App Store	Your purchase, handled by Apple	Subscription billing — Apple privacy
OpenFreeMap	Map-tile requests from your browser: the map area on screen and your IP address	Drawing the map behind each race on this website — OpenFreeMap
Vercel	IP address and request logs, for this website only	Website hosting — Vercel privacy
Resend	The email address you add as crew, with your name and the race's name	Sending the crew email — Resend privacy
Pushover	The email address a new account signed up with, and the sign-in method used	Telling us an account has been opened — Pushover privacy

This website

Signing in here sets an authentication session cookie, and that is what keeps you signed in. A few others remember how you have set the site up: whether the sidebar is open, which colouring you last chose for a race track, and whether you have dismissed the App Store banner. Each holds a preference and nothing else — no identifier, and nothing that follows you to another site. The site is hosted by Vercel, which logs requests and IP addresses as any web host does.

The race map. Each race page draws its map with tiles from OpenFreeMap. As with any web map, your browser asks OpenFreeMap for the tiles covering the area on screen, so those requests carry that map area and your IP address — never your account or the recorded track itself, which your browser draws on top of the tiles.

The waitlist is gone. Before Lifted reached the App Store, this site offered a waitlist. That is over: the form has been removed, so has the way it saved an address, and every address it had collected has been deleted. We hold none of them, and this site now collects no email address other than the one you sign in with.

Retention and deletion

The races in your account are kept until you delete your account.

• Your account and every race in it: in the iPhone app, go to Settings ▸ Account and use Delete Account & Data. This deletes the account, and every race backed up to it goes with it. If you had signed in with Apple, your Apple sign-in for Lifted is revoked at the same time. The app then returns to the sign-in screen; signing in again starts a fresh, empty account.
• Deleting individual races is not offered yet. Today it is all or nothing.
• Waitlist emails: already deleted. The waitlist is closed and nothing remains of it.
• Saved races in Apple Health: these are separate from your Lifted account and stay under your control — delete them in the Apple Health app.
• The copy of your races held on your iPhone, and your settings: delete the app from your devices.
• Weather requests: processed transiently by the providers above to answer the request, per their policies.

If you have any privacy question or request, email sailmaster.dev@gmail.com and we will respond as soon as we can. For anything else, the support page is the place to start.

Children

Lifted is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

If the app's data practices change, this policy will be updated first and the new version posted at liftedsailing.app/privacy with a new effective date before the change ships.

Contact

Frederick Lawson Bermuda sailmaster.dev@gmail.com