Privacy Policy - Sculpt - Face Yoga & Exercises
Last updated: October 15, 2026
1. Introduction
EasyTech Agency ("we," "our," or "us") operates the Sculpt - Face Yoga & Exercises mobile application (the "Service" or "App"). This page explains what the App does with your information.
Sculpt is a daily face and neck routine with a guided coach, for adults. It is a wellness routine, not medical advice. Your plan, your answers, your practice history and your safety choices stay on your device. The App has no account and no server of our own that stores your content. What leaves your device is limited to what is listed in section 3.
2. What stays on your device
The following is stored on your device only and is not sent to us or to any provider listed on this page:
- Your onboarding answers: the first name you enter (optional), the goals and moments you pick, how you said you feel on camera, your routine time and session length, your coach and your reminder time
- Your health and safety answers: the “Anything we should avoid?” list (for example jaw, neck, injections, recent surgery, pregnancy) and any dates you give with it, your daily checks and any time you tapped that something hurts. They are used only on your device to leave out moves that may not suit you
- Your practice history, programs, favorites, streaks, glow days and sticker sheet
- Your settings (coach, voice, music, sound, haptics, reminders)
- Your birth year is used once to check that you are 18 or over and is not kept. The App keeps only that you are an adult (or, if you are not, that Sculpt is not available to you)
The App does not use your camera, microphone, photo library, location, contacts or Health data, and does not ask permission for them. The coach you see is an illustration drawn in the App, not an image of you. The coach voices and the session music are audio files inside the App and are not streamed.
3. What we send, and when
3.1 Always (once you have confirmed you are an adult)
Purchases and subscriptions go through Apple (iPhone) or Google Play (Android) and RevenueCat (see section 4). This is the only network activity the App needs to work. Before you confirm your age, nothing is started.
3.2 Only if you allowed it: usage statistics
During setup the App asks you to choose “Allow” or “Only what's needed”. If you allow it, anonymous usage events are sent to PostHog (see section 5). If you choose “Only what's needed”, no usage statistics are sent. You can change this at any time in Settings → Privacy.
3.3 Only if you allowed it: ad measurement
If you allow ad measurement, the App fetches a small configuration from our own server (a Google Cloud service in Europe, shared by several of our apps) telling it which ad networks to start, then reports a few conversion events to TikTok and Meta (see section 6). This request carries the name of the App (“sculpt”) and, as with any network request, your IP address; we do not link it to any content from your practice. If you choose “Only what's needed”, this request is not made and the ad networks are not started.
3.4 Notifications, widgets, session controls and sharing
- Reminders (your daily reminder, the optional notes in your first two weeks and the free-trial reminder) are scheduled and delivered locally by your device. We do not operate a push-notification server.
- On iPhone, the home and lock-screen widgets and the session Live Activity are fed by data the App writes on your device (shared with the widget through an Apple App Group). On Android, the home screen widget is fed by data the App writes on your device, and while a session runs the App shows an ongoing notification with Pause and Resume. That notification comes from a foreground service of the media playback type, which only keeps the guided audio and the session timer running when the screen is off. It starts when you start a session and stops when the session ends. Nothing in the widgets, the Live Activity or the notification is sent anywhere.
- Share cards (for example your week strip) are images the App creates on your device. They leave your device only if you choose to share one through the system share sheet, and then they go where you send them.
4. Subscriptions and payments
In-app purchases and subscriptions are managed by RevenueCat, a third-party service. RevenueCat receives an anonymous identifier generated for your installation and your purchase history, so that Sculpt Pro can be unlocked and restored. Payment details are handled directly by Apple (iPhone) or by Google Play (Android) and are never seen by us. See the RevenueCat Privacy Policy.
5. Analytics
If you allowed usage statistics, we use PostHog (our project is hosted in the EU) to count how the App is used. The App sends product events such as the onboarding step reached, the coach you selected, whether a session was started, completed or left early and for how long, paywall views, trial starts and purchases (plan and price), reminder permission results, and whether a share was completed. Events carry coarse identifiers only (step names, coach and program ids, minutes, plan names), together with the App version and the operating system version (iOS or Android).
On Android, if you allowed usage statistics, the App may also read the Google Play Install Referrer once after installation (the campaign link that led to the install, if any, and the click and install times) and send it as a single event. The events are tied to the same anonymous RevenueCat identifier, and RevenueCat is given the PostHog identifier, so that subscription outcomes can be matched to the same install. There is no email, name or account. PostHog also receives your IP address with each request, as any server does. Your first name, your safety and health answers, the avoid list, how you said you feel, whether something hurt, your goals and moments, and any text you type are never sent to analytics. The App enforces this with a fixed list of allowed event fields. See the PostHog Privacy Policy.
6. Advertising attribution (App Tracking Transparency and the Android advertising ID)
Sculpt uses the TikTok Business SDK and the Meta SDK to measure which advertising helps people discover the App. On iPhone these are tracking SDKs as defined by Apple, governed by Apple's App Tracking Transparency framework. On Android they use the advertising ID of your device. On both, they start only if you answered “Allow” during setup and only when the ad networks are enabled in our server configuration.
- On iPhone, the App explains this and then shows Apple's tracking permission prompt. If you decline, no Apple advertising identifier is shared. On Android, which has no such system prompt, the App shows its own screen asking whether Sculpt may use your Android advertising ID. If you tap “Not now”, the ad SDKs are not started and no advertising ID is shared. The App declares the advertising ID permission (com.google.android.gms.permission.AD_ID) and does not read the ID before you tap “Allow”.
- If you allow tracking (iPhone) or tap “Allow” (Android), the advertising identifier may be shared with TikTok and Meta together with conversion events: finishing the onboarding, starting a trial and subscribing (with the plan, price, currency and transaction id for the last two). The SDKs may also report their own standard signals, such as app installs and opens. Your practice, answers and safety choices are never part of these events.
- You can change your decision at any time in iOS Settings → Privacy & Security → Tracking → Sculpt, or on Android by deleting or resetting your advertising ID in Settings → Privacy → Ads, and the ad measurement choice in Settings → Privacy inside the App. A change to the in-App choice applies fully the next time you open the App.
See the TikTok Privacy Policy and the Meta Privacy Policy.
7. Health and safety answers
Sculpt asks what you would like it to avoid (for example jaw pain, neck problems, injections, recent surgery or pregnancy) so that it can leave out moves that may not suit you. These answers are about your health, so we are explicit: they are stored on your device only. They are never sent to us, to analytics, to the ad networks or to any other provider. Sculpt is a wellness routine and does not diagnose, treat or give medical advice; if you have pain, an injury or a medical condition, check with your doctor first.
8. Data sharing and security
We do not sell your personal information. We share data only with the service providers described above (Apple or Google Play, RevenueCat, and, if you allowed them, PostHog, TikTok and Meta), with your consent, to comply with a legal obligation, or to protect our rights or your safety. Traffic to these services is encrypted. Your plan, answers and history are protected by your device's built-in security. If device backups are on, the App's data may be included in your backup, which Apple (iCloud or iTunes) or Google (Android Auto Backup, stored in your Google account) controls. On Android, the backup covers your plan, onboarding answers, practice history, settings and the few small markers described in section 9. Your safety and health answers (the avoid list, your dates and any time you tapped that something hurts) are never part of the Android backup or of a device-to-device transfer: after a restore, the App asks them again. Some providers are based outside the European Union or process data outside it, for example in the United States; their own policies describe the safeguards they use.
9. Your rights and deleting your data
- Access: everything you entered is on your device and visible in the App. Settings → Care → “What leaves your phone” summarises section 3.
- Delete: Settings → Privacy has a “Delete my data” option that erases your plan, answers (including your safety answers), sticker sheet and history from the device, cancels the reminders the App scheduled, stops any session notification, refreshes the widget so that it shows nothing of your history, and resets the anonymous analytics identity on the device. It keeps your two privacy choices and does not cancel your subscription (manage it in your Apple ID settings on iPhone, or in Google Play under Payments & subscriptions on Android; you can restore it later). If you used an earlier version of Sculpt and kept private progress photos, this version does not upload them; they remain on your device until you uninstall the App. A few small markers (for example that the free first session was used, and which purchases were already reported) stay in your device's keychain on iPhone, which also survives uninstalling, and in a small preferences file on Android, which may be restored from your Google backup. They contain no personal information. Uninstalling the App removes everything else stored on the device. The App has no account, so there is no account to delete.
- Data held by providers: RevenueCat and PostHog identify you only by anonymous identifiers, and there is no account. To have your records deleted, write to us at the address below; we may ask for something that lets us find your record, such as an Apple or Google Play order number, and we will forward the request to the provider. Resetting through “Delete my data” starts a new analytics identity but does not by itself erase past events held by PostHog. We keep analytics and purchase records only as long as needed to run and improve the App, or until you ask us to delete them.
- Withdraw consent at any time: turn off “Anonymous usage statistics” or “Ad measurement” in Settings → Privacy, and tracking in iOS Settings or the advertising ID in Android Settings.
- Object to processing, or ask a question, by writing to us.
- Lodge a complaint with a supervisory authority (CNIL in France).
10. Children's Privacy
Sculpt is for adults aged 18 and over. The App asks for your birth year before anything else is set up. If you are under 18, the App does not set up a plan and starts no purchases, analytics or ad measurement, and we do not knowingly collect personal information from anyone under 18. If you believe a child has used the App, please contact us immediately.
11. Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. Changes will take effect upon publication. We encourage you to review this page periodically.
12. Contact
If you have any questions about this Privacy Policy, contact us at:
contact@easytech-agency.net