Calmset is developed and published by HekaPhysio. This policy
explains what data the app handles, how it is stored, and your rights regarding
that data.
Calmset is an offline-first application. It does not require
user accounts, has no cloud sync, and stores all personal data locally on your
device in a SQLite database. We cannot access, read, or retrieve your local data.
Calmset is available on iOS, Android, and Apple Watch
(bundle ID: com.gymtimer.app).
Data We Collect
All of the following data is stored exclusively on your device.
None of it is transmitted to our servers.
Timer state — remaining seconds, timer state, current
set index. Retained only until the session ends.
Training presets — built-in and user-created presets.
Retained until you delete them.
Session history — timestamps, training mode, number of
sets, rest duration, and completion percentage. Auto-purged after
365 days.
Install ID — a randomly generated UUID created by the
app. It is not linked to your Apple ID, Google account, or any personal
identifier. Retained until you uninstall or reset the app.
Notification settings — your notification preferences.
Retained until you change them.
Theme & language preferences — retained until you
change them.
Third-Party Services
Calmset uses the following third-party service:
RevenueCat — used solely for in-app purchase validation.
RevenueCat receives an anonymous app user ID and transaction receipts. It does
not receive your name, email, or any other personal information. See the
RevenueCat Privacy Policy for details on how they handle data.
Planned Features NOT YET ACTIVE
The following features are planned for future releases. They are not currently
active in the app. This section will be updated before each feature launches.
HealthKit / Health Connect integration — will share
derived workout summaries only (no raw health samples). Requires explicit user
opt-in. Data retained locally for 365 days.
Crash diagnostics — will collect stack traces, app
version, and OS version to help us fix bugs. Retained for 30 days.
Product analytics — will collect anonymized usage events
(e.g., feature adoption, session counts) with no personal identifiers. Retained
for 180 days.
Data We Don't Collect
Calmset does not collect, store, or transmit any of the
following — now or in any planned update:
Name, email address, phone number, date of birth, or mailing address
Contacts or address book data
Photos, camera, or microphone access
GPS or location data
Device advertising identifiers (IDFA / AAID)
IMEI, device serial number, or hardware identifiers
Clipboard contents
Raw health samples (heart rate, steps, etc.)
Your Rights
Because Calmset stores data locally on your device and does not maintain
user accounts or a cloud backend, your rights are straightforward:
Access & deletion of local data — uninstalling the
app permanently deletes all locally stored data. You can also delete individual
presets and history within the app.
RevenueCat data deletion — to request deletion of
purchase data held by RevenueCat, email us at
info@heka.rehab and we will
process the request on your behalf.
No data sold — we do not sell, rent, or share your data
with third parties for advertising or marketing purposes. This applies under
both the GDPR and the CCPA.
Children's Privacy
Calmset is not designed for or directed at children under the age of 13. We do
not knowingly collect personal information from children. If you believe a child
under 13 has provided us with data, please contact us at
info@heka.rehab and we will take
steps to address the situation.
Changes to This Policy
We may update this privacy policy from time to time. When we make material
changes, we will update the effective date at the top of this page. We encourage
you to review this policy periodically.
Contact Us
If you have any questions or concerns about this privacy policy, please contact
us: