Privacy Policy

1. Who is responsible for your data

The data controller is D-Corp Studio, a French SASU with a share capital of €100, registered in Paris under number 104 179 403, 138 avenue Victor Hugo, 75016 Paris, France. D-Corp Studio publishes calisthenics-corner.com and the Calisthenics Corner app (see our Legal Notice).

For any privacy question: contact@callisthenie-corner.fr.

2. The short version

• The app requires no account and no email.
• Your profile (first name, age, weight, height, equipment, physical limitations, reported pain) and your workout history stay on your phone. They are never sent to anyone.
• We measure how the website and the app are used with pseudonymized data. No ads, no data sales. In the app, you can turn this off in Settings.
• Your subscription is handled by Apple on iPhone and by Google Play on Android. We never see your payment details.
• This website does not set analytics or advertising cookies.
• We do not sell or share your personal information for targeted advertising.

3. The website

Analytics

This website uses Umami, an analytics tool we host ourselves in Germany (Hetzner). Umami uses no cookies. It counts page views, approximate country, device type, browser and referring site. IP addresses are not stored and these statistics are shared with no one.

We also use Microsoft Clarity (Microsoft Ireland Operations Ltd) to understand how pages are used: heatmaps and anonymized session replays, in cookieless mode. Form fields are masked. This data is only used to improve the website. Microsoft may process it on its servers in the United States: that transfer is covered by the European Commission's Standard Contractual Clauses. Microsoft's privacy statement: privacy.microsoft.com.

Legal basis: our legitimate interest in measuring traffic and improving the website.

Server logs

Like any web server, ours keeps technical logs of the requests it receives: IP address, date and time, page requested, browser. These logs are only used to keep the website secure and to diagnose incidents, and they are deleted after 30 days. Legal basis: our legitimate interest in the security of the website.

Third-party services

• Affiliate links: when you click a link to a partner, the partner's site knows you came from us so it can credit us with a possible commission. What happens on their site is governed by their own privacy policy.

Android waitlist

Until the app launched on Android (October 2026), the website offered a form to be notified of that launch. The only data collected was your email address.

It is stored in Listmonk, a tool we host ourselves in Germany (Hetzner). Emails are delivered by Brevo (Sendinblue SAS, France), which uses your address only to deliver the messages.

Your address is only used to tell you about the app (Android launch, updates). Legal basis: your consent, given when you submit the form. You can unsubscribe in one click from any email, and your address is then deleted.

Launch offer

The website offers a launch offer: a code that unlocks the app for one month, free of charge (an App Store code on iPhone, a Google Play code on Android). You get it in one tap, without giving your email address or any other personal information.

We record the code handed out, the date, the platform (iPhone or Android), the language of the page and of your browser, and the source that brought you to the offer (for example a button on this website or a link shared elsewhere). Your code is also kept in your browser's local storage, so that the same device gets the same code again instead of a new one. The offer does not record your name, your email address, your device or your IP address.

This data is used to hand out the codes, to stay within the daily limit and to understand where the offer is used. It is stored in a database we host ourselves in Germany (Hetzner).

The offer is protected against bots by Cloudflare Turnstile (Cloudflare, Inc., United States), loaded only when you open the offer. To tell people from bots, Turnstile receives your IP address and technical details about your browser. Cloudflare uses them for this security check only, not for advertising. To limit abuse, our server also counts the codes handed out per connection during the day, using a scrambled version of the IP address that is kept in memory only and discarded every day.

Legal basis: our legitimate interest in running the offer and protecting it against abuse.

Until October 23, 2026, the offer asked for an email address, a level and, optionally, whether you are a man or a woman, and sent follow-up emails through Listmonk and Brevo (Sendinblue SAS, France). If you claimed a code that way, you can unsubscribe in one click from any of those emails: your email address and your answers are then deleted. We keep only an irreversible fingerprint of the address, so that the same address cannot claim a second code.

4. The app

The app is available on iPhone (App Store) and on Android (Google Play). Unless stated otherwise, what follows applies to both.

What stays on your phone

The app works without an account and without any server of ours. Everything you enter is stored only on your device:

• your profile: first name, age, sex, weight, height, equipment, training days, physical limitations;
• pain you report at the end of a workout (body areas);
• your workout history and progress.

This information is used to adapt your workouts. It is never sent to us or to any third party. If you delete the app, it is deleted with it.

App analytics (TelemetryDeck)

To understand how the app is used and improve it (for example, to see where people drop off during onboarding), we use TelemetryDeck (TelemetryDeck GmbH, Germany). Data is processed within the European Union.

What is sent:

• usage events: onboarding steps, workouts started and completed, subscription screen views and dismissals, review prompts;
• your answers about the subscription (on iPhone from version 1.9.1, on Android since the first version): the option you pick in the survey shown when you close the subscription screen, the cancellation reason you select and, if you leave one, the free-text message on the subscription management screen (optional, 500 characters at most). This message is anonymous: do not include any personal information in it;
• deliberately coarse profile attributes: sex, age range (never your exact age), experience level, preferred training frequency and session length, goal, equipment available (yes/no), ability to do pull-ups or dips (yes/no), main obstacle;
• technical details: app version, device model, operating system version (iOS or Android), language and region.

What is never sent: your first name, weight, height, exact age, physical limitations or reported pain.

This data is tied to a pseudonymized identifier: it is hashed on your device, then hashed again by TelemetryDeck. It is not an advertising identifier (neither Apple's IDFA nor the Android advertising ID). Your IP address is not stored and timestamps are rounded to the hour. This data is not used for advertising and is never sold or shared.

Legal basis: our legitimate interest in measuring usage and improving the app. You can turn this off at any time in the app: Settings > About > Anonymous usage statistics. Once it is off, no data is sent to TelemetryDeck from your device. On iPhone, versions before 1.9.1 do not have this setting: in that case, email us at contact@callisthenie-corner.fr.

iPhone versions before 1.9.1 also sent two yes/no flags, "physical limitation declared" and "pain reported after a workout". This is no longer the case since version 1.9.1. Update the app to benefit from it.

Subscription (Apple, Google Play, Superwall)

The app offers a subscription with a free trial. Payment is handled entirely by Apple (App Store) on iPhone and by Google (Google Play) on Android. We have no access to your name, email address or payment details.

The subscription screen is displayed by Superwall (Nest 22, Inc., Delaware, United States). Superwall receives:

• an anonymous identifier specific to the app;
• subscription events: offer displayed, trial started, purchase, renewal, cancellation (through the transactions and notifications sent by Apple or Google Play);
• technical information about the device and the app;
• the mascot you picked (male or female), which personalizes the screen;
• on iPhone, the attribution information described below.

Legal basis: performing your subscription, and our legitimate interest in measuring how our offers perform.

Because Superwall is based in the United States, this data is transferred outside the European Union. The transfer is covered by the European Commission's Standard Contractual Clauses, included in our data processing agreement with Superwall.

Install attribution (Apple)

When you first open the app, it asks Apple (AdServices) whether it was installed after an Apple Search Ads campaign. If so, Apple returns the campaign, ad group and keyword, which are sent to Superwall so we can measure how our campaigns perform.

This Apple mechanism does not use the advertising identifier (IDFA) and cannot track you across other apps or websites, which is why the app does not show the App Tracking Transparency prompt.

On Android, the app uses no install attribution mechanism.

Feedback and cancellation forms (Tally)

The app may invite you to share feedback or tell us why you are cancelling. These forms open in your browser and are hosted by Tally (Tally BV, Belgium, EU).

They include details added automatically to help us understand your answer: context, app version, date, number of workouts completed, subscription type, language. Everything you write is free and optional, including your email if you want a reply.

Legal basis: your consent (you choose to fill in the form).

What the app does not do

• no account, no login, no email requested;
• no ads, no advertising identifier, no cross-app tracking;
• no data sales;
• local notifications only (generated by your phone, not pushed from a server);
• links to Spotify or Deezer open those services, which apply their own policies.

5. Our service providers

6. How long we keep your data

7. Your rights

Under the GDPR, you can ask to access, correct or delete your data, restrict its processing, receive it in a portable format, or object to its processing. Where processing is based on consent, you can withdraw it at any time. If you live in a US state with its own privacy law (such as California), you have similar rights, and we do not sell or share your personal information.

To exercise these rights, email contact@callisthenie-corner.fr. We reply within one month.

Because the app never asks for your identity, we cannot always find the data linked to your device. For a request about the app, please tell us the date of your purchase or trial if you can.

If you believe your rights are not respected, you can file a complaint with the French data protection authority, the CNIL (cnil.fr), or with your local authority.

8. Minors

The website and the app are intended for people aged 18 and over. We do not knowingly collect data about minors.

9. Changes

We may update this policy, for example when the app changes. The date at the top of this page is then updated. If a change is significant, we will let you know on the website or in the app.

10. Contact

contact@callisthenie-corner.fr or our contact page.