Privacy Policy

CaliCam is an iPhone and Android fitness app and website operated by its independent creator in Italy. This policy explains what information CaliCam collects, how it is used, and the choices available to you.

CaliCam was previously published as Strikt. It is the same app and service, with the same operator, accounts and data; only the name and the website address (now getcalicam.com) changed.

Information We Collect

If you joined CaliCam's website launch waitlist before the public App Store release, we collected the email address you submitted, submission time, browser locale, landing-page path, referring website domain, form placement, and any campaign labels included in the link you followed: utm_source, utm_medium, utm_campaign, utm_content, and utm_term. That launch waitlist is closed. Legacy records may retain both first and most recent source attribution. The Android preview waitlist is separate and described below.

In the app, CaliCam may collect account identifiers, profile information, fitness and workout results, health readings you choose to connect (see Health Data below), product interaction events, crash data, diagnostic logs, user-submitted feedback, community product ideas, votes and moderation reports, and media you choose to upload, such as avatars or share images.

The CaliCam Weekly Newsletter

If you subscribe, we use your email address to send the CaliCam Weekly: a weekly editorial email with guides, small experiments, community questions, and product news. We record your preferred language, request, confirmation time, consent wording version, and subscription status separately from app accounts and the former launch waitlist. Subscription is optional and based on your consent. We send a confirmation email first; you join the list only after confirming your address.

Firebase stores subscription records and Resend delivers emails. To prevent misuse, we keep short-lived, keyed hashes of network addresses and request counters; these are not used for advertising. Unconfirmed requests are removed after seven days during daily cleanup, and network rate-limit records expire after one day and are removed during daily cleanup.

You can leave through the unsubscribe link in an email or by writing to privacy@strikt.fit. Unsubscribing removes your email from our subscriber record immediately and stops future newsletter sends. We retain a keyed suppression record without your email for up to 90 days plus the daily cleanup interval. Delivery records may remain with Resend under its retention practices. Withdrawal does not affect earlier lawful processing or your app account. Newsletter replies stay private; we ask before quoting or identifying you in a story.

Android Preview Waitlist

If you join the Android preview waitlist, we record your email address, whether you prefer Telegram or Discord for the testers group, your website language, the time you joined, and that you joined from getcalicam.com/android. We use them only to invite you to the Android preview and its testers group and to contact you about the preview. The waitlist is separate from app accounts, the newsletter and the former launch waitlist; joining it does not subscribe you to the newsletter.

Firebase stores waitlist entries. To prevent misuse, we keep short-lived, keyed hashes of network addresses and request counters; network rate-limit records expire after one day and are removed during daily cleanup. You can ask us to remove your entry at any time by writing to privacy@strikt.fit.

Website Analytics And Your Choice

Optional website statistics are off unless you allow them. CaliCam uses its own Firebase service in Frankfurt to measure visits, public pages read, active reading time, scroll depth, referring domains, campaign labels, approximate country, device category, website language, clicks toward the app, and newsletter and Android waitlist signups. The approximate country is provided by the website host; we do not request your precise location. An App Store or Google Play click does not tell us whether you installed the app or created an account.

With your statistics consent, we also count video starts, when playback reaches the end, and changes of movement in the phone setup guide. Reaching the end does not prove the entire video was watched.

We do not record screens or form contents, identify website visitors by email, or connect visits to app accounts, newsletter addresses or waitlist entries. Statistics exclude full URLs, arbitrary query parameters, invitation codes, and confirmation tokens. A random identifier groups pages within a browser session and is stored in first-party session storage. Sessions restart after 30 minutes without updates, four hours, or 30 pages. Raw IP addresses are not stored in the analytics records; a temporary keyed identifier is used to limit excessive requests. Do Not Track is respected.

Your analytics choice is stored as a first-party browser preference for up to six months so that the website can remember it. Refusing analytics does not limit the website or your access to the App Store or Google Play.

Website Language

We use your browser’s language preference on the homepage and remember a language you choose in a first-party cookie for up to one year. This preference is used only to display the website in your chosen language and does not enable analytics or advertising.

Camera And Motion Data

CaliCam uses the device camera to count reps and provide movement feedback. In the public app, pose detection and rep counting run on device, on iPhone and on Android. Movement diagnostics do not upload raw camera frames, recorded video, or audio. Share movement diagnostics is on by default and you can turn it off at any time in Settings. While it is on, CaliCam may upload a short-lived, pixel-free trace covering camera setup and each camera-tracked set, uploaded when the set ends, containing 2D and 3D pose landmarks (body joint positions), joint confidence, derived angles, and tracker decisions. The trace file contains no account identifier and is kept in a separate storage bucket, linked to your account solely so support can explain missed or incorrect reps and improve tracker reliability. It is not used for advertising or to train AI models and is deleted within seven days; turning sharing off deletes the traces still held. During a live race with video enabled, your camera is additionally streamed to your opponent as described below.

Coach Lens may temporarily record an audio-free replay of a camera-tracked exercise block on your device to provide post-set feedback. Those clips are never uploaded and are removed by the app as part of its temporary-file cleanup.

These statements describe movement diagnostics and Coach Lens. Replays and the restricted real-time AI coach pilot have separate data flows, described below.

Health Data

On Android, if you choose to connect Health Connect, CaliCam asks Android for your permission to read your sleep, heart rate, heart rate variability, resting heart rate, steps, exercise sessions, active calories, and weight. You can allow only some of them and withdraw access at any time in Health Connect or in Android settings. CaliCam only reads this data; it never writes anything to Health Connect.

CaliCam uses this data only to compute your in-app Energy score and to show the sleep, workouts, and activity behind it. The readings are processed on your device and are not uploaded to CaliCam's servers; the resulting Energy score is stored on your device. CaliCam does not use Health Connect data for advertising, does not sell it, and does not transfer it to anyone except as necessary to provide this feature or to comply with the law. No one at CaliCam reads it unless you give your consent, it is needed for security purposes, or the law requires it. CaliCam's use of information received from Health Connect follows the Health Connect permissions policy, including its limited-use requirements.

On iPhone, if you choose to connect Apple Health, CaliCam asks for your permission to read your sleep, heart rate, heart rate variability, resting heart rate, workouts, steps, active energy, weight, height, waist circumference, and VO2 max. You can allow only some of them and change access at any time in the Health app or in iOS Settings.

CaliCam uses this data only to compute your Energy score and to size your training in the app. The readings are processed on your device and are not uploaded to CaliCam's servers. If you allow it, CaliCam also writes each recorded set to Apple Health as a workout with its estimated active calories; it writes nothing else, and you can revoke that permission at any time. CaliCam does not use Apple Health data for advertising and does not sell or share it.

On both platforms, product analytics receive only whether connecting succeeded, never the readings themselves.

Restricted Real-Time AI Coach Pilot

The real-time AI coach is an internal pilot restricted to authorized administrator accounts. It is not available to general App Store or Google Play users. When an authorized pilot user activates it, the app sends microphone audio and limited context such as age range, experience level, and preferred coaching style to Google's Gemini API (Google LLC). During camera-tracked sets, it also sends sampled camera images and selected facts from the on-device tracker. The service returns spoken feedback; the on-device tracker, not the AI coach, decides which repetitions count.

Movement diagnostics, Coach Lens, Replays, and live race video are separate features. Their settings do not authorize this AI processing. Before making the real-time coach available to other athletes, CaliCam will update this policy and ask for separate consent for the camera, microphone, and coaching context used by the feature.

Replays

Replays are off until you turn them on in the app, and they are available only to athletes aged 18 or over. You can turn them off at any time in Settings, Data & privacy.

With Replays on, CaliCam records a video of each camera-tracked set (workouts, movement breaks, bot duels, friend races and ranked races), without audio, together with the tracker’s own record of that set (the pose points and the repetition count). A small “REC” mark is on screen while a set is being recorded. A set you pause, skip or discard is not kept. The video and the tracker record are uploaded to CaliCam’s cloud storage in the European Union and then removed from your phone.

Who can watch a replay: only you, in your profile in the app. This includes friend races and ranked races: you see your own side of the race, and your opponent never sees your video, nor you theirs. Replays are never public and are never used for advertising.

We do not sell these videos and we do not share them with third parties for their own purposes. Our cloud provider stores them on our behalf.

Turning Replays off stops recording at once and removes recordings still waiting on your phone. Your replays stay in your profile until you delete them: one at a time from the replay, or all at once in Settings, Data & privacy, Replays. Deleting a replay removes it from our servers. Deleting your account deletes all your recordings.

Other people: record yourself only. If someone else is in the frame, make sure they agree, or turn Replays off.

Live Race Video

During head-to-head races athletes aged 18 or over can choose to share live video with their opponent. The live call is shown only to your opponent for the duration of the race and is never recorded by CaliCam. If you have turned Replays on, your own phone separately saves its own camera picture of the race; see Replays. Live video flows only when both athletes have it enabled, and you can pause or turn it off at any time, including mid-race, from Settings or the race screen.

To establish the direct connection, connection setup data (including device network addresses) is exchanged through our infrastructure, readable only by the two race participants, and deleted after the race.

For safety, both athletes complete a short check-in after every race with video. Reports of inappropriate behavior result in the reported athlete being blocked from matching with the reporter and can suspend the reported athlete's access to video features. Reports are stored for moderation and abuse-prevention purposes and are not visible to the reported athlete.

How We Use Information

We use information to provide the app, manage accounts, maintain any necessary legacy waitlist records, show training history and social features, process subscriptions, prevent abuse, diagnose issues, improve product quality, measure the aggregate effectiveness of acquisition campaigns, and communicate about service updates.

Ideas And Community Feedback

CaliCam Lab lets signed-in athletes submit product ideas and vote on published requests. Ideas are reviewed before publication. Published cards do not display an author name, handle, avatar, or account identifier, but CaliCam keeps the submitting account identifier privately so it can enforce one vote per account, rate limits, blocking, moderation, and account deletion.

Reports and blocks are private. Other athletes do not see who reported or blocked a post. Do not include names, contact details, links, health information, or other personal information in an idea. Private bug reports, screenshots, and diagnostic logs use a separate support system and are never turned into community posts.

Service Providers

CaliCam uses Firebase for authentication, database, storage, functions, and legacy waitlist records; RevenueCat for subscription entitlement management; Apple services for App Store purchases and Sign in with Apple on iPhone; Google services for Google Play purchases (Google Play Billing), Google Sign-In, Play Integrity and Firebase App Check to protect our servers, and Firebase Cloud Messaging for push notifications on Android; Resend for transactional, newsletter, and prior waitlist emails; and PostHog for app product analytics and, where enabled, crash reporting; and OpenAI only when you ask support to analyze a minimized diagnostic summary. Firebase also stores movement-diagnostic traces, while sharing is on, for no more than seven days. If you ask support to investigate a specific set, CaliCam may use OpenAI business services to process that support request and review a minimized diagnostic summary under CaliCam's instructions. The summary excludes raw pose landmarks, camera frames, video, audio, email addresses and internal account identifiers; contact details you include in the support request may be processed only to handle that request. These data are not used to train AI models. In the app, Usage Sharing is enabled by default on new installations and can be disabled persistently in Settings. Consent-gated website statistics are processed separately through CaliCam’s Firebase service in Frankfurt. The website does not send statistics, browser exceptions, or diagnostic logs to PostHog.

Google Cloud Storage stores Replay recordings on our behalf in europe-west3 (Frankfurt, European Union).

The restricted real-time AI coach pilot uses Google's Gemini API (Google LLC) as an external AI processor for the images, audio, tracker facts, and limited context described above. This pilot is not part of the public App Store or Google Play releases.

Advertising Attribution

If we run app-install advertising campaigns, install attribution uses Apple's privacy-preserving SKAdNetwork and the Meta (Facebook) SDK, which may log app install and app launch events to Meta. Advertiser-ID collection is disabled, and CaliCam does not track you across other companies' apps or websites without your permission. The Android app does not use the Android advertising ID.

Legal Bases

Where GDPR applies, legacy waitlist information was processed to take the steps you requested and send the launch notice you asked for. We rely on our legitimate interests to measure aggregate campaign effectiveness using bounded campaign labels and reduced source information, without unique recipient tags. Optional website analytics and non-essential access to browser information are based on your consent. We also process information where necessary to perform our contract with you, comply with legal obligations, and pursue legitimate interests such as security, fraud prevention, service diagnostics, and product improvement, after considering your rights and interests.

Replays (recording, storage and playback of your set videos): your consent, which you can withdraw at any time in Settings.

Android preview waitlist: to take the steps you asked for, inviting you to the preview and its testers group.

Movement diagnostics: our legitimate interest in making rep counting reliable and in explaining missed reps. You can opt out at any time in Settings, which deletes the traces.

Health Connect and Apple Health readings: your consent, given in the Android or iPhone permission screen, which you can withdraw at any time in Health Connect, the Health app, or your phone settings.

Retention

Legacy waitlist records are kept only as long as needed to handle delivery, support, security, and legal needs related to the requested launch notice. We periodically review and delete records that are no longer needed, and you may ask us to delete yours sooner. Consent-gated website session statistics are kept for 90 days and then removed during daily cleanup. The first-party preference that remembers your analytics choice is kept for up to six months.

Account data is kept while your account is active or as needed for legal, security, and operational purposes. Movement-diagnostic traces are deleted within seven days and are also deleted when you turn sharing off or delete your account. Other diagnostic data is kept for a limited period and pruned when no longer needed. Deleting your account removes product ideas you authored and your account-level votes, reports, blocks, and rate-limit records from CaliCam systems, subject to limited legal or security retention where required.

Replay videos and their tracker records: kept until you delete them in the app or delete your account.

Android preview waitlist entries: kept until the Android preview ends, or sooner if you ask us to delete yours.

Health Connect and Apple Health readings are not kept on CaliCam's servers. The Energy score computed from them stays on your device until you clear the app's data or uninstall it.

Your Choices

You can accept or refuse optional website analytics when asked. You can later change or withdraw that choice at any time through the Cookie settings control on the website. Withdrawal stops future website analytics events and clears the website's local analytics state; it does not affect processing that was lawful before withdrawal. You can use the website and follow App Store and Google Play links even if you refuse analytics.

You can request access, correction, deletion, restriction, or export of personal information, and you can object to processing based on legitimate interests, by contacting us. In the app, you can delete your account from settings, which starts deletion of account data handled by CaliCam systems. You can turn Usage Sharing off persistently in Settings at any time; doing so stops future app product-analytics and consent-aware diagnostic events and clears the active analytics runtime on that device. Movement diagnostics use a separate choice. You can enable or disable Share movement diagnostics in Settings; disabling it stops new traces and requests deletion of retained traces. You can turn either choice back on later.

If you are in the EU or EEA, you also have the right to lodge a complaint with your data protection authority — in Italy, the Garante per la Protezione dei Dati Personali.

Children

CaliCam is not intended for children under 13, or under the minimum age required in your jurisdiction. Do not use CaliCam if you are not old enough to consent to this policy. Live race video is limited to athletes aged 18 or over; profiles under 18 have it locked off and race on the skeleton view.

Replays and live race video are available only to athletes aged 18 or over.

International Transfers

Website statistics are hosted in Frankfurt through Google Firebase. Other providers may process data in countries other than your own. When required, we rely on appropriate safeguards for international transfers.

Contact

For privacy questions or requests, contact privacy@strikt.fit.