Solstice Calisthenics Privacy Policy

Effective date: July 9, 2026

Solstice Calisthenics ("Solstice," "we," "us," or "our") provides the Solstice Calisthenics app, website, and related services (the "Service"). This Privacy Policy explains what information we process, why we process it, where it is stored, when it is disclosed, and the choices and rights available to you.

Solstice Calisthenics is the operator and data controller responsible for the Service. Privacy questions and requests can be sent to SolsticeCalisthenics@gmail.com.

1. Scope

This Policy applies to the Solstice Calisthenics Android app, web app, website, account services, public profiles, cloud save, and support communications. It does not apply to third-party apps or websites you choose to use.

2. Information We Process

The Service can be used without an account. Most workout information is stored locally on your device unless you choose to create an account and use cloud or public-profile features.

A. Account and authentication information

If you create an account or sign in, we process:

• Email address
• Firebase user ID and related account identifiers
• Authentication provider, such as email/password or Google Sign-In
• Email-verification and sign-in status
• Account creation and last sign-in information made available by Firebase Authentication

Passwords are handled by Firebase Authentication. Solstice does not store your plaintext password.

B. Profile and public-profile information

Depending on the features and settings you use, we may process:

• Display name, username, bio, country selection, and optional profile avatar
• Skill-tree goal, featured completions, and current focus nodes
• Public-profile visibility choices
• Level, XP, streak, and skill-tree summaries selected for public display
• Official, moderator, or tester status, if assigned
• Social-media and website links for eligible official accounts
• Previous usernames and temporary username redirects

If you enable a public profile, the fields you choose to publish can be viewed by other users who find your profile. Usernames are public-facing identifiers.

C. Workout, fitness, and potentially sensitive health information

The app may process information you enter or generate, including:

• Workout history, active sessions, sets, repetitions, duration, resistance, assistance, and exercise notes
• Deleted workout records retained locally for recovery
• Routines, plans, schedules, custom exercises, and equipment presets
• Bodyweight, height, body measurements, and measurement history
• Injury, illness, recovery dates, status markers, and notes
• Reminder settings and training preferences
• Skills, assessments, pinned skills, completion dates, XP, levels, streaks, achievements, quests, virtual currency, inventory, and related progress

Body measurements, injury information, illness information, and some workout records may be considered health or sensitive information under applicable law. You are not required to enter this information. It remains on your device unless you enable or initiate a feature that uploads it, such as cloud save.

D. App settings, backup, and technical information

We may process:

• App preferences, tutorial status, feature settings, notification preferences, and locally scheduled reminders
• Backup, export, restore, and synchronization status and timestamps
• Local automatic backup files and temporary export or sharing files
• Basic technical, security, connection, device, app, IP-address, and service-log information that Firebase, Google, hosting providers, or operating-system services process as necessary to provide authentication, cloud save, security, support, file, notification, or sharing features

Solstice does not currently include a third-party advertising SDK or a dedicated analytics or crash-reporting SDK.

E. Content you choose to share

If you use a share action, the app may create text or images containing workout, profile, progress, username, or achievement information. Sharing occurs only when you initiate it. The destination app or service then processes the content under its own policies. Copies you export, post, record, stream, or share outside Solstice are outside our control.

F. Support, feedback, and moderation

If you contact us or use the external feedback form, we may process your email address, messages, attachments, form responses, and information you choose to include. Google Forms terms apply when you use that form.

When profile text is checked for inappropriate language, the relevant text may be sent over HTTPS to PurgoMalum. Solstice uses the returned result to accept or reject the text and does not intentionally use it for advertising or profiling. PurgoMalum processes requests under its own practices.

3. How We Collect Information

We collect information:

• Directly from you when you enter it, create an account, contact us, or choose settings
• Automatically from your use of app features, such as workout and progression records
• From Google or Firebase when you authenticate or use cloud services
• From your device when you select an image, export a file, share content, or enable notifications

We do not access precise GPS location, contacts, microphone recordings, or advertising identifiers as part of the current Service.

4. Why We Use Information

We use information to:

• Provide workout logging, planning, charts, progression, reminders, and personalization
• Create, authenticate, secure, and administer accounts
• Synchronize profiles and provide optional cloud backup and restore
• Publish and locate public profiles when enabled
• Enforce username uniqueness and moderate public-facing profile text
• Generate exports and content you ask to share
• Provide support, investigate errors, prevent abuse, and protect the Service
• Comply with legal obligations and enforce our Terms of Service

We do not use health or fitness information for advertising, marketing profiles, data brokerage, credit, insurance eligibility, or employment decisions.

5. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar law applies, we rely on:

• Contract and requested steps: to provide the account and app features you request
• Consent: for optional public-profile publication and, where required, health or other sensitive information that you voluntarily enter and choose to upload; you may withdraw consent by disabling the feature or deleting the information
• Legitimate interests: to secure, maintain, troubleshoot, and improve the Service, prevent abuse, and respond to support requests, provided those interests are not overridden by your rights
• Legal obligation: to comply with applicable law or valid legal process

Providing account information is necessary to create an account. Other profile, health, fitness, and public-profile fields are optional, although declining them may prevent the related feature from working.

6. Local Storage and Cloud Collection

Information kept only in local app storage is processed on your device and is not collected by Solstice. It becomes cloud-collected information if you choose to upload it through cloud save, profile synchronization, public-profile publication, support, or another network feature.

Local JSON backups are not encrypted by Solstice. Store exported backups securely because they may contain account, workout, body, injury, illness, and profile information.

7. Disclosure of Information

We may disclose information:

• To Firebase Authentication and Google Cloud Firestore for account, profile, public-profile, and cloud-save functions
• To Google Sign-In when you choose Google authentication
• To PurgoMalum to check selected profile text
• To Google Forms when you choose to use the feedback form
• To platform services, operating-system features, and destination apps when you initiate file selection, export, notification, or sharing functions
• To other users and the public when you enable a public profile or intentionally publish or share content
• To professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish and defend legal claims
• In connection with a merger, acquisition, financing, reorganization, or transfer of the Service, subject to applicable notice and data-protection requirements

Service providers may process limited technical information, such as IP addresses and security logs, as necessary to deliver their services.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not track users across unrelated apps or websites for advertising.

8. Public Information

Public-profile information is available to other users and may be copied or captured by them. Turning off your public profile removes it from normal in-app discovery after synchronization, but it cannot erase copies that other people made outside the Service. Do not publish information you want to keep private.

9. Retention

We retain information only for as long as reasonably needed:

• Local app data remains until you delete it, clear app data, uninstall the app, or your device removes it
• Local automatic backups remain according to your selected retention setting or until deleted
• Exported files remain wherever you saved or shared them until you or the recipient deletes them
• Account, profile, and cloud-save data generally remains until you delete the relevant data or account
• Username redirects may normally remain for up to 31 days after a username change; account deletion removes redirects the Service can identify as yours
• Support and privacy-request records may be retained while handled and afterward where reasonably necessary for security, recordkeeping, disputes, or legal compliance

Deletion from active systems may not immediately remove residual copies from service-provider backup systems. Those copies are isolated, expire according to the provider's backup cycle, and are not used for ordinary product functions. If law requires limited retention, we retain only what is required, for the required period, and restrict its use.

10. Account and Data Deletion

Delete your account in the app through Profile settings > Delete account and all data. After recent authentication, the flow is designed to delete:

• Your Firebase Authentication account
• Your account profile, username claim, and associated username redirects
• Your public profile and public progress record
• Your Firestore cloud save and its app-managed subcollections
• App-managed local data, managed avatar files, and local automatic backups on the device where deletion is performed

You can separately delete only your cloud save or clear only local app data from Settings.

If you cannot access the app, request deletion at https://solsticecalisthenics.com/delete-account/. We may need to verify account control. We aim to complete verified requests within 30 days, or as applicable law requires or permits, and will explain any lawful retention or denial.

Account deletion does not erase files, screenshots, recordings, posts, messages, or backups you exported or shared outside the Service, or information another person independently retained.

11. Your Privacy Rights

Depending on your location, you may have rights to know, access, correct, delete, restrict, object, obtain a portable copy, withdraw consent, appeal, or complain to a privacy authority.

You may edit supported profile fields, control public visibility, export app data, delete cloud data, clear local data, and delete your account in the app. You may also email SolsticeCalisthenics@gmail.com. We may verify your identity and account ownership. We will not discriminate against you for exercising a privacy right. Authorized agents may submit requests where law permits, subject to verification.

Australia

You may request access or correction and complain about our handling of personal information by emailing us. We will acknowledge and investigate complaints within a reasonable period. If you are not satisfied, you may be able to contact the Office of the Australian Information Commissioner.

European Economic Area, United Kingdom, and Switzerland

You may exercise the rights above and complain to your local supervisory authority. The Service does not currently make solely automated decisions that produce legal or similarly significant effects.

United States

Residents of certain states may have rights to know, access, correct, delete, obtain a portable copy, or appeal a denied request. Solstice does not sell personal information, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics beyond requested app features.

12. Security

We use reasonable safeguards appropriate to the Service, including authenticated access controls, Firestore security rules, and encrypted network transport provided by HTTPS and Firebase services. No system is completely secure. You are responsible for securing your device, credentials, and exported backups.

13. International Processing

Solstice and its service providers may process information in Australia, the United States, and other countries where Google and other providers operate. Those countries may have different privacy laws. Where required, transfers use recognized adequacy decisions, contractual safeguards, consent, or another lawful mechanism.

14. Children's Privacy

The Service is a general-audience fitness app and is not directed to children under 13. You must not create an account or send personal information to Solstice if you are under 13.

If you are under the age of legal majority where you live, a parent or guardian must review and agree to the Terms and supervise your use. Where local law requires parental consent for processing, you may use account or cloud features only with that consent.

If we learn that we collected a child's information in violation of law, we will take reasonable steps to delete it. Parents and guardians may contact us.

15. Third-Party Services

The Service may use or link to third-party services including Firebase Authentication, Google Cloud Firestore, Google Sign-In, PurgoMalum, Google Forms, platform notification services, file picker services, and sharing services.

Solstice is not responsible for third-party privacy, security, content, or availability. Review their policies before providing information.

16. Changes to This Policy

We may update this Policy to reflect changes in the Service, law, or our practices. We will change the effective date and provide additional in-app notice when a change is material. Where consent is legally required for a new purpose, we will request it.

17. Contact

Solstice Calisthenics

Email: SolsticeCalisthenics@gmail.com

Account deletion: https://solsticecalisthenics.com/delete-account/