Privacy Policy - Calisthenics

Last updated: November 12, 2026

1. Introduction

EasyTech Agency (EASYTECH SASU, 2 rue de la Libération, 74000 Annecy, France; "we," "our," or "us") operates the Calisthenics mobile application (the "App"). This page explains what the App does with your data.

Calisthenics has no account and no sign-in, and it does not use the camera. Your map, your goals and your sessions are saved on your phone. The App does send usage events, subscription information and, after Apple's tracking prompt, advertising events, as described below.

2. Data saved on your device

The following data is saved on your phone, in the App. It is not sent to us or to any provider listed on this page:

• Your map: the skills you marked as unlocked and the levels you reached
• Your goals and their order
• Your session log, the holds and reps you log, and your bests
• Your weekly plan settings (sessions per week, session length) and your equipment
• Your answers to the first-run questions and your settings (sound, haptics)

The App does not connect to Apple Health or Health Connect, and does not ask for your location, your contacts, your microphone or your photo library. It does not use the camera.

2.1 Notifications

If you start a free trial and allow notifications, the App schedules one local notification on your phone to remind you before the trial ends. The App does not use remote push notifications.

2.2 Sharing, exports and links

• The level card you can share is an image created on your phone. It leaves it only if you share it through the system share sheet.
• The "Watch" links in a skill guide open reference videos outside the App, in YouTube or Safari. The App embeds no player. What you do there is covered by the privacy policy of that service.

3. Anonymous identifier

The App has no account: we do not ask for your name, your email address or a password. To make subscriptions and analytics work, the App creates an anonymous identifier for your installation, using the anonymous sign-in of Google Firebase Authentication. This identifier is given to RevenueCat and to PostHog (sections 4 and 5). Firebase receives the identifier and, as with any network request, your IP address and basic technical information about the device; its SDK may also send its own diagnostic data. The identifier is kept in the protected storage of your phone (the keychain) and may still be there if you reinstall the App. See the Firebase privacy information.

4. Subscriptions and payments

Subscriptions are billed by Apple. We use RevenueCat to manage subscriptions and to check that you have access to the paid features. RevenueCat receives the anonymous identifier, your subscription status and purchase history, and the App Store information needed to validate a purchase. We never receive or store your payment card or Apple Account details.

See the RevenueCat Privacy Policy.

5. Product analytics

We use PostHog to understand how the App is used. The App sends events such as: which first-run steps are opened and the choices you make there (goal, difficulties and equipment), whether the subscription screen is shown and whether a purchase is made (plan, product, amount and currency), the goals you set, remove or reach (with the name of the skill, its tier and how many goals you have), that a skill was unlocked and its tier, that a level was reached, that a session was completed (how many blocks it had and your total number of sessions), and that the level card was turned over or shared. Each event carries the anonymous identifier, the name and version of the App, and basic device information (device model, iOS version, language and region, screen size). PostHog also receives your IP address with each request, as any server does. The data is processed on PostHog's servers in the European Union.

Never sent to analytics: your hold times, rep counts, bests, logged values or any body measure. The App does not use session recording, automatic capture of screens or taps, or surveys.

Because the goal events name the skill you chose as a goal, and the progress events carry the tier and level you reached, these events say something about your training. Apple and Google classify this as fitness information. It is sent to PostHog only, for analytics, tied to the anonymous identifier. It is never sent to Meta or TikTok.

See the PostHog Privacy Policy.

6. Advertising attribution (App Tracking Transparency)

The App contains the TikTok Business SDK and the Meta SDK, which help us measure which of our own advertisements led people to install the App and to subscribe. The App itself shows no advertising. These are tracking SDKs as defined by Apple, and they are governed by Apple's App Tracking Transparency framework.

• The App explains this on a screen of its own and then shows Apple's tracking prompt once, after the first-run questions. Neither SDK runs before you have answered the prompt.
• If you allow tracking, Apple's advertising identifier (IDFA) is read and may be shared with TikTok and Meta, together with your IP address and conversion events: that the App was opened, that you finished the first-run questions, that you started a free trial and that you subscribed (with the amount, the currency and the product for the last two).
• If you do not allow tracking, the advertising identifier is not read. The two SDKs then run in a limited mode, without the advertising identifier and with Meta's advertiser tracking setting off: the same conversion events are reported for aggregated measurement only, including through Apple's SKAdNetwork.
• These events never contain your hold times, rep counts, bests, logged values or any body measure.
• Once you have answered the prompt, the App fetches a configuration from our own server that tells it whether and how to run attribution. This request carries the name of the App and no personal data other than what any network request carries (your IP address). When advertising measurement is not configured on our server, neither SDK starts.
• The Meta SDK may also send its own crash and diagnostic reports, which are not linked to you.
• You can change your decision at any time in iOS Settings → Privacy & Security → Tracking → Calisthenics.

See the TikTok Privacy Policy and the Meta Privacy Policy.

7. Service providers and sharing

We do not sell your personal data. We share it only with:

• Apple (App Store) and RevenueCat, to run subscriptions
• Google Firebase Authentication, to create the anonymous identifier
• PostHog, for product analytics (EU)
• TikTok and Meta, for advertising attribution, after Apple's tracking prompt and as described in section 6
• Authorities, when the law requires it

Some of these providers may process data outside the European Economic Area. In that case the transfer relies on the safeguards required by law, such as standard contractual clauses.

8. Legal bases (GDPR)

• Contract: the anonymous identifier and the subscription status, which the App needs to give you access to what you bought.
• Consent: the advertising identifier and tracking for advertising attribution (Apple's tracking prompt) and notifications. You can withdraw consent at any time in your device settings.
• Legitimate interests: understanding how the App is used in order to improve it, measuring the results of our advertising in aggregate, and keeping the service reliable. You can object by writing to us (section 11).

9. Retention

• Data on your device: kept until you delete it or uninstall the App.
• Anonymous identifier, analytics and purchase records at Firebase, PostHog and RevenueCat: kept for as long as needed for these purposes, and deleted on request (section 10).
• Data received by TikTok and Meta: kept according to their own policies.

10. Delete your data

Calisthenics has no account, so there is no account to delete. Your data is deleted in two ways:

• Data on your phone. Uninstalling the App deletes everything it saved on your phone. Deleting the App does not cancel a subscription (see the Terms of Use).
• Data tied to your anonymous identifier. To have the records held by Firebase, RevenueCat, PostHog or our advertising partners deleted, write to contact@easytech-agency.net with the name of the App (Calisthenics). Because there is no account, we may ask for something that lets us find your record, such as an App Store order number. We act on the request within 30 days.

11. Your rights

If you are in the European Union, the United Kingdom or Switzerland you have the right to access, correct, delete and port your data, to object to or restrict its processing, and to withdraw your consent at any time. Contact us to use these rights. You can also lodge a complaint with your supervisory authority (CNIL in France).

12. Data security

The data saved on your phone is protected by your device's built-in security. Data sent to our providers travels over encrypted connections. Subscription data is secured by Apple and RevenueCat.

13. Children's privacy

The App is not directed to children under 13 (or under 16 in countries of the European Union where that is the age of digital consent). We do not knowingly collect personal information from children. If you believe a child has used the App and data was collected, please contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy. The date at the top shows the last change. Material changes will be announced in the App or in its release notes.

15. Contact

If you have any questions about this Privacy Policy, contact us at:
contact@easytech-agency.net