Tempo

Privacy Policy

What Tempo collects about you, why, who else gets to see it, how long we keep it, and how you get a copy or delete it.

Version 2026-07-30

We are still finalising who operates Tempo

The company name, registered address, contact address for data requests and the country whose law applies are not settled yet. Everywhere one of them belongs, this document shows a marker like Not yet filled in: [LEGAL ENTITY NAME] instead of a guess. Everything else here describes what Tempo actually does today. If you need any of the missing details before they are published, ask your Tempo contact.

The short version

  • Your coach decides what is held about you. Tempo runs the software that holds it.
  • Health information — injuries, wellness, physio reports, blood tests, DNA — is only stored and used if you switch it on yourself. You can switch it back off at any time.
  • What is in a blood test or a DNA report is never sent to an AI. Not with your consent, not with a setting on. The app cuts it off before it can leave.
  • We do not sell your data, we do not advertise, and there are no tracking cookies in Tempo.
  • You can download everything we hold about you, or delete your account, from your own profile page.

Who we are, and who decides what

Tempo is operated by Not yet filled in: [LEGAL ENTITY NAME], registered in Not yet filled in: [COUNTRY OF REGISTRATION] at Not yet filled in: [REGISTERED ADDRESS].

If you are an athlete:your coach is the one who decides what is collected about you and why — they are the “controller”. We hold and process it for them, on their instructions, as their “processor”. So questions about why your coach asked for something go to your coach; questions about how the software handles it come to us. The rules we work under for your coach are in the Data Processing Agreement.

If you are a coach:for your own account and billing details, and for the information we use to keep the AI working properly, we are the controller. For your athletes' data, you are.

What we collect, and why

Account details
Your name, email address, and whether you are a coach or an athlete. For athletes, also date of birth, sex and your main sport, because training targets depend on them. Needed to run your account.
Your answers at sign-up
The onboarding questionnaire your coach set: goals, history, availability, equipment, and anything else they ask. This is how your coach starts working with you.
Training
Planned sessions, completed activities, distance, duration, power, heart rate, pace, effort ratings, strength sets, thresholds, races and personal bests, plus the training load we calculate from them.
Wellness
Sleep, resting heart rate, heart-rate variability and weight, if you connect a wearable or an intervals.icu account. This is health data, so it is only collected with your consent.
Health documents
Physio reports, blood panels, DNA results and other files, if you or your coach upload them. Stored in a private file store, never a public link. Nothing is stored until you have given the separate health-documents consent.
Messages
Your conversations with your coach in the app, and your conversations with the coaching AI. Kept so you both have the record, and so the AI can follow the thread.
Billing
What you were charged, for which month, whether it was paid, and the payment reference. Never your card number— card details are entered on the payment provider's own page and never touch Tempo.
Connection keys
If you link intervals.icu, we store the key that lets us sync. It is encrypted before it is written down.
Consent records
Which permission you gave, when, and when you withdrew it. We are required to be able to show this.
Technical
A login session cookie so you stay signed in, and error logs. Our error logs are built to record only where something broke — never message text, never health data, never file contents.

No tracking. Tempo loads no analytics, no advertising pixels and no third-party trackers. The only cookies are the ones that keep you signed in, so there is no cookie banner to click through.

Our legal reasons for using it

To run the service
Contract. Without your account details, training data and messages there is no product.
Health data — wellness, injuries, documents
Your explicit consent, and nothing else. Each type is a separate switch in your profile. Withdraw it and we stop — that does not undo what was lawfully done before you withdrew.
Sending your AI chats for review
Your explicit consentfor athletes. For a coach's own general AI chats, their acceptance of the Terms.
Billing and records
Contract, and our legal duty to keep financial records.
Keeping the service safe and working
Our legitimate interest in a product that is secure and gives correct answers, balanced against your privacy — which is why our logs carry no personal content at all.

What the AI sees

Tempo's AI runs on models we pay for at Anthropic and OpenAI, reached through Vercel's AI Gateway using our own keys. When you ask the AI something, what goes out is your question, the recent conversation, your training numbers, and relevant passages from your coach's own methodology documents.

  • Blood tests and DNA never leave.Their contents are cut off in our code before any AI provider can see them — regardless of consent and regardless of any setting. This is deliberate and it is enforced twice over. You and your coach can still read those documents in the app.
  • Injuries and wellness can only reach an AI provider when two things are both true: you have given the health-and-AI consent, and we have switched that channel on for the provider. It ships switched off.
  • Physio and other health documents are read by the AI only on request, only when your health consent is active, and every single read is written to an access log. If that log entry cannot be written, the document is not read.
  • The AI providers we use never train on this data; requests may be retained briefly under their standard security policies.

We also use Voyage AIto turn text into numbers so the AI can find the right passage in your coach's documents. What is sent there is your coach's documents and the search text for the turn — which is the message you just typed. Health documents are never sent to it.

Reviewing AI conversations to fix wrong or unsafe answers is covered in the Terms of Service. In short: your data is never used to train an AI model, and your messages with your coach are never part of it.

Who else sees your data

We do not sell your data and we do not share it for advertising. We use a small set of companies to run the product. Each one only gets what it needs for its job.

Supabase
The database, the login system and the private file storage. It holds essentially everything.
Vercel
Hosts the app and runs the scheduled jobs. All AI requests also pass through Vercel's AI Gateway on their way to the model.
Anthropic and OpenAI
The AI models themselves. One is active at a time. What reaches them is described above.
Voyage AI
Turns your coach's documents and your search text into numbers so the right passage can be found.
Resend
Sends invoice emails. It sees the recipient address and the invoice content.
Tap Payments
Takes card payments. It sees your name, your email and the amount. Card numbers are entered on Tap's page and never reach Tempo.
intervals.icu
Only if you connect it. We read your activities and wellness from your own account, and we push planned workouts back to it so they reach your watch.

We may also share data where the law requires it, or to protect someone from serious harm.

Being straight about the paperwork. These companies process data on our behalf, and the law expects us to have a written data-processing agreement with each of them. That work is part of finalising the operator details at the top of this page and is not complete. In particular, we have notsigned a zero-retention agreement with either AI provider — they run under their ordinary commercial terms. That is exactly why blood-test and DNA content is never sent to them at all.

Where your data goes

The companies above operate internationally, so your data will be processed outside the country you live in, and outside the EU. We are not going to name a hosting region here until we have checked and can commit to it — a privacy policy that guesses at that is worse than one that says nothing.

The safeguards for these transfers are being put in place alongside the operator details. If you need to know exactly where something sits before then, ask and we will tell you what we actually know.

How long we keep it

While your account is open
We keep your training history, messages, consents and billing records, because that is the product.
After an account is closed
30 days, then permanent deletion — so a closure by mistake can be undone.
Health documents on closure
Deleted immediately. They do not sit in the 30-day window.
If you delete your own account
Immediately and permanently, all of it, with no 30-day hold and no way back. See below.
Financial records
Kept for as long as tax and accounting law requires, even after the rest is gone.
Consent and health-access records
Kept while the account exists, because they are the evidence that we did the right thing.

Your rights, and the buttons that do them

You have the right to get a copy of your data, correct it, delete it, restrict or object to how it is used, and take it elsewhere. Two of those are a button in the app rather than an email to anyone:

  • Download a copy.Athlete profile → “Download your data”. You get a JSON file with your profile, consents, intake answers, thresholds, billing and your full message history with both your coach and the assistant. Health documents are listed but their file contents are not included — ask if you want the files themselves.
  • Delete your account.Athlete profile → “Delete my account”. This removes your account and everything attached to it, including your health documents, at once. It cannot be undone.
  • Change your mind about anything. Every consent you gave is a switch in your profile: health documents, AI processing, wearable sync, health-and-AI, and reviewing your AI chats. Turning one off stops that use from then on.

Coaches: this is not equal yet.An assistant coach can delete their own account from the account page. A head coach who owns the team cannot — the app tells them to transfer ownership first, and that control has not been built. Until it is, a head coach who wants their account erased has to ask us, and we do it by hand. We are telling you rather than pretending the button works.

For anything that is not a button, write to Not yet filled in: [CONTACT EMAIL]. We answer within one month. If you are an athlete, your coach decides some of this, so we may need to pass your request to them — we will tell you if we do.

How it is protected

  • One team can never see another team's data. The database enforces this itself, on every table, on every query — not just in the app code.
  • Every uploaded file lives in a private store. There are no public file links; the app hands out short-lived signed ones.
  • Keys we have to store for you — your intervals.icu key, your coach's payment key — are encrypted before they are written down, each with its own random value.
  • Every time the AI reads one of your health documents, that read is logged. If the log cannot be written, the document is not read.
  • Our error logs record where something broke and nothing else — no message text, no health data, no file contents. This is enforced in code, not by habit.

No system is perfect. We do not hold a security certification today, and we are not going to imply one.

Age

Tempo is for people aged 16 and over. If you believe someone under 16 has an account, tell us at Not yet filled in: [CONTACT EMAIL] and we will remove it.

Changes to this policy

When we change this policy in a way that matters we bump the version at the top, and coaches are asked in the app to accept the new one. If a change means we need a new permission from you, we will ask for it separately rather than assume it.

Contact and complaints

Write to Not yet filled in: [CONTACT EMAIL], or to Not yet filled in: [REGISTERED ADDRESS]. Until those are published, use your Tempo contact.

If you are in the EU or the UK and you think we have handled your data badly, you can complain to your national data protection authority. You do not have to talk to us first, though we would rather you did — it is usually faster.

← Back to Tempo