Last updated 13 September 2026.
Questlift keeps your training on your phone. Two features send anything anywhere, both are off until you turn them on, and this page says exactly what each one does.
Every session, every set, your baseline, your streak, your quests, your gear and every health reading are stored in a database on your device. With no account, there is no server holding any of it.
If you turn it on, a copy of that database is encrypted on your phone with a key derived from a recovery code we never receive, and the encrypted bytes are stored on our server. We cannot read them. Nobody who works on this app can read them.
That is a property of how it is built rather than a promise: the key never leaves your device. The other side of it is that if you lose your recovery code, the backup cannot be opened by anyone, including us, and there is no reset.
Health readings from Health Connect or a connected wearable are included by default. Settings has a switch to leave them out, and turning it off and backing up again replaces the stored copy with one that does not contain them.
If you add friends, we keep a small record that we can read — because your friends' phones have to be shown it. It is exactly this and nothing else:
| Kept | Not kept |
|---|---|
|
Your display name Your character and what it is wearing Your current streak (a number of days) The date you last trained Which quests you have finished |
Anything from Health Connect or a wearable Heart rate, HRV, sleep, steps, calories Your weight or any body measurement Any set, rep, load, duration or session count Any time of day |
None of it is visible to anyone until both of you have accepted, and you can hide your streak while staying on the screen.
A wave sends a friend one of five fixed phrases. You cannot type a message, so nothing you write is ever delivered to another person. We store who waved at whom, which phrase, and when; waves are deleted when a friendship ends.
There is no password. You give an email address and we send a six-digit code. We store your address so you can sign in again, and the code itself is stored only as a hash and only for ten minutes.
Worth being clear about: your inbox is what protects your account. Your recovery code is what protects your backup, and it never reaches us. Someone with access to your email could see your friends list; they could not open your backup.
| Who | What they handle |
|---|---|
| Cloudflare | Hosting, the database, and storage of the encrypted backups |
| Resend | Sending the sign-in code to your email address |
| Google (Firebase) | Delivering wave notifications to Android phones |
The coach review feature, if you switch it on, sends the day's picture to an AI provider you choose using an account and key you set up. It goes from your phone to them; we are not in the path and hold no key.
This app is intended for adults. It is not directed at children.