Effective date: 28 July 2026
The short version: Ascent works without an account — you get an anonymous ID. We store your scores and training progress, measure how the app is used, and process subscriptions through Apple. We don't collect your name, email, contacts, photos or precise location, we don't track you across other apps or websites, and we never sell your data.
Ascent is operated by Benjamin Bayel ("we", "us"), the data controller for the processing described here. Contact: benjamin.bayel@gmail.com.
What we don't collect: name, email (unless you contact us), contacts, photos, precise location, or health data. The advertising identifier (IDFA) is collected only if you allow it in Apple's tracking permission prompt — see section 4.
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Provide the app: scores, progress, sync | Anonymous ID, assessment & training data | Performance of a contract (Art. 6(1)(b)) |
| Manage subscriptions and entitlements | Subscription data | Performance of a contract (Art. 6(1)(b)) |
| Understand and improve the app | Usage analytics | Consent (Art. 6(1)(a)) — asked in-app in the EU/EEA/UK; withdraw anytime in Settings |
| Advertising attribution | Advertising identifier (IDFA) | Consent (Art. 6(1)(a)) — Apple's App Tracking Transparency prompt; withdraw anytime in iOS Settings → Tracking |
| Security, fraud and abuse prevention | Technical logs | Legitimate interest (Art. 6(1)(f)) |
When you open the app, Apple's App Tracking Transparency prompt asks whether Ascent may use your device's advertising identifier (IDFA). If you allow it, we use the IDFA solely for advertising attribution — knowing which ad campaign brought you to the app and crediting purchases to it — through our processor Amplitude (legal basis: consent, GDPR Art. 6(1)(a)). If you decline, the IDFA is never read, and nothing changes: no feature is limited, the app never asks again, and you can change your mind anytime in iOS Settings → Privacy & Security → Tracking. We show no third-party ads in the app either way.
| Processor | Role | Privacy policy |
|---|---|---|
| Supabase | Database & anonymous authentication | supabase.com/privacy |
| Adapty | Subscription management | adapty.io/privacy |
| Amplitude | Product analytics | amplitude.com/privacy |
| Apple | Payments & App Store | apple.com/legal/privacy |
Some processors store data outside the EEA (notably in the United States). Where they do, transfers are protected by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
We keep your data while you use the app. If you delete your data (below), it is erased from our systems within 30 days and from backups within 90 days. Analytics data is retained for a maximum of 24 months.
Under the GDPR you can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; where processing is based on consent you can withdraw it at any time (in the app: Settings → Analytics). Email benjamin.bayel@gmail.com and we will respond within 30 days. You can also lodge a complaint with your supervisory authority — in France, the CNIL (cnil.fr).
Use Settings → Delete my data in the app to erase your profile, scores and training history, or email us. Because accounts are anonymous, deletion requests made outside the app may require information that lets us locate your records (for example a support ID shown in Settings).
Ascent is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has used the app, contact us and we will delete the data.
If we make material changes to this policy, we will update the date above and notify you in the app before the changes take effect.