Legal
Privacy Policy
Last updated: June 11, 2026
1. Overview
This Privacy Policy describes how CalisthenicsMaster ("we", "us") collects, uses, and protects information you provide when using our app and services.
2. User Accounts
To use the app you create an account with an email and password (or sign in with Google). We store your email, an optional display name, and an account identifier so we can authenticate you and sync your data across devices.
3. Email Collection
We collect your email address solely to authenticate your account, send essential service messages (e.g., password reset, receipts), and — if you opt in — occasional product updates. We do not sell your email to third parties.
4. Progress Tracking
The app stores your training data: completed skills, goals, challenges, streaks, and achievements. This data is tied to your account so your progress persists across devices and sessions.
5. Cloud Storage
Your account and progress data are stored on managed cloud infrastructure (Lovable Cloud / Supabase, hosted in the EU). Data is transmitted over TLS and stored in a managed PostgreSQL database with row-level security policies.
6. Subscription Payments
Subscriptions are processed by Stripe. We do not store your full payment card details on our servers. Stripe receives the data necessary to process payments and is itself a PCI-DSS compliant processor. We store a customer reference and the status of your subscription so we can grant access to premium features.
7. Data Security
We use industry-standard safeguards including TLS in transit, encryption at rest, hashed credentials, row-level security, and least-privilege server functions. No system is perfectly secure; please use a strong, unique password.
8. Your Rights (GDPR)
You have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us using the details below.
9. Data Retention
We retain your data for as long as your account exists. If you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., tax records of past payments).
10. Contact
Questions about this policy? See our Impressum / Contact page.