Privacy Policy

1. Overview

This Privacy Policy explains how Lambly („the App“, „we“) handles your data. We built Lambly to keep your data on your device as much as possible – there is no backend server that stores your personal training or health data.

2. Data Controller

Luis Fynn Schenk (Lufy Studios)
Alter Hohlweg 5
58285 Gevelsberg
Germany
info@lufystudios.de

3. Data We Collect

• Account data: your name and email address, provided via Sign in with Apple (only if you choose to share them).
• Health & fitness data: with your permission, the App reads steps, heart rate, calories, and sleep data from Apple Health. It does not write data back to Health except where a feature explicitly says so.
• Data you enter directly: workouts, sets/reps, body weight, water intake, meals, sleep quality, habits, calendar events, training plans, and alarms.
• Camera: used only to scan QR/barcodes for the alarm „Wake Verification“ feature and to take body progress photos you choose to add. Photos and scanned codes are stored locally on your device.
• Location: used only while actively tracking a run, to record your route and distance – including while your screen is locked, so tracking isn’t interrupted.
• Notifications: with your permission, the App sends local reminders and alarms. These are created and delivered on your device; no notification content reaches us.
• Purchase data: see section 4.

4. Purchases and Subscriptions

A Lambly Pro subscription is handled entirely by Apple through the App Store. Your payment details – card, billing address, balance – never reach us. They are not even entered in the App, only in Apple’s purchase dialog.

Through Apple’s StoreKit the App only evaluates whether a valid subscription exists for your Apple Account. The receipt Apple issues is checked on the device. No receipt is sent to any server of ours, and we keep no list of subscribers.

The result of that check – Pro yes or no – is stored locally so the widgets know it too. Whether you cancel, restore, or let the subscription lapse, we do not learn directly; the App notices at its next launch.

Apple provides us with sales and revenue figures in App Store Connect. Those reports are aggregated and allow no conclusions about individual people.

5. How Your Data Is Stored

Your data is stored locally on your device. If you turn on iCloud Sync, a copy is additionally stored in your own private iCloud database so it is available on your other devices. That database belongs to your Apple Account: it is not our server, we cannot read it, and Apple’s privacy terms apply to it. You can switch the sync off at any time in your profile. iCloud Sync is free and not part of Lambly Pro.

6. The Friends Feature

This is the one part of Lambly where data leaves your device in a form other people can see. It is entirely optional: if you never add a friend and leave „Share activity with friends“ switched off, nothing described in this section happens.

Every account has a six-character friend code. When sharing is on, the App publishes a small record under that code to a shared iCloud database belonging to the App:

• your display name, your training minutes for the current week, your current streak, and your points total;
• your most recent activity entries (up to 20), such as „trained 45 min“ or „added 30 reps to a challenge“;
• friend requests and challenge invitations you send, which carry your code and display name to the recipient;
• challenges you create, including their title, target, and the progress each participant reports.

Two things about this database you should know. First, anyone who knows a friend code can read the record stored under it – the code is not a secret, only hard to guess. Second, unlike your private data, we as the operator can technically access these records. For both reasons the App publishes as little as possible: no workouts, no meals, no body weight, no photos, no location.

Switching „Share activity with friends“ off deletes your published records rather than merely hiding them. Removing a friend stops your App from reading theirs.

Apart from the above, we do not operate a backend that stores your personal data.

7. How We Use Your Data

We use your data solely to provide the App’s features to you: showing your progress, generating your personalized goals and training plans, and creating the PDF report if you use the Export Data feature. We do not use your data for advertising and we do not use third-party analytics or tracking SDKs.

8. Data Sharing

We do not sell, rent, or share your personal or health data with third parties. The only third party involved in providing the App’s services is Apple (for Sign in with Apple, Apple Health, and App Store subscriptions), governed by Apple’s own privacy policy.

9. Data Retention & Deletion

You can delete individual entries within the App at any time. You can also erase all locally stored data via Settings → Reset App Data, or delete your account entirely via Settings → Delete Account – both actions are permanent and cannot be undone by us, since we don’t keep a separate copy of your data.

10. Your Rights

Depending on your location, you may have rights under data protection law (e.g. the GDPR) including the right to access, correct, delete, or export your data, and to object to certain processing. Since your data lives on your device, you can exercise most of these rights directly in the App (Export Data, Reset App Data, Delete Account). For any other requests, contact us at info@lufystudios.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
(State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Postfach 20 04 44
40102 Düsseldorf
Germany
Telephone: +49 (0)211 / 38424 – 0

11. Children’s Privacy

Lambly is not directed at children under 13 (or the relevant minimum age in your country), and we do not knowingly collect data from children below that age.

12. Security

We rely on Apple’s platform security (e.g. device encryption, Sign in with Apple, HealthKit’s permission system) to protect your data. No method of storage is 100% secure, but keeping data local significantly limits exposure compared to a cloud-hosted service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll update the „Last updated“ date above when we do.

14. Contact

Questions about this Privacy Policy or your data? Contact us at info@lufystudios.de.