Privacy Policy

The short version

Your coach decides what is held about you. Tempo runs the software that holds it. Where your organisation uses Tempo's AI coach with no human coach, “your coach” means Tempo.
Health information — injuries, wellness, physio reports — is only stored and used if you switch it on yourself. You can switch it back off at any time.
We do not sell your data, we do not advertise, and there are no tracking cookies in Tempo.
You can download everything we hold about you, or delete your account, from your own profile page.

Who we are, and who decides what

Tempo is operated by CEPP SARL, registered in Lebanon at Jal el Dib Main Road, Matn, Lebanon.

If you are in the EU or the EEA: we are appointing a representative there under Article 27 of the GDPR, so you have someone to write to inside the EU. Their name and address will be published here as Not yet filled in: [EU REPRESENTATIVE]as soon as that is signed. Until then, write to us directly at the address above — it changes none of your rights, and you can always go straight to your national data protection authority.

If you are an athlete:your coach is the one who decides what is collected about you and why — they are the “controller”. We hold and process it for them, on their instructions, as their “processor”. So questions about why your coach asked for something go to your coach; questions about how the software handles it come to us. The rules we work under for your coach are in the Data Processing Agreement.

Where your organisation uses Tempo's AI coach with no human coach, “your coach” means Tempo.

If you are a coach:for your own account and billing details, and for the information we use to keep the AI working properly, we are the controller. For your athletes' data, you are.

What we collect, and why

Account details

Your name, email address, and whether you are a coach or an athlete. For athletes, also date of birth, sex and your main sport, because training targets depend on them. Needed to run your account.

Your answers at sign-up

The onboarding questionnaire your coach set: goals, history, availability, equipment, and anything else they ask. This is how your coach starts working with you.

Training

Planned sessions, completed activities, distance, duration, power, heart rate, pace, effort ratings, strength sets, thresholds, races and personal bests, plus the training load we calculate from them.

Wellness

Sleep, resting heart rate, heart-rate variability and weight, if you connect a wearable or an intervals.icu account. This is health data, so it is only collected with your consent.

Health documents

Physio reports and other files, if you or your coach upload them. Stored in a private file store, never a public link. Nothing is stored until you have given the separate health-documents consent.

Messages

Your conversations with your coach in the app, and your conversations with the coaching AI. Kept so you both have the record, and so the AI can follow the thread.

Billing

What you were charged, for which month, whether it was paid, and the payment reference. Never your card number— card details are entered on the payment provider's own page and never touch Tempo.

Connection keys

If you link intervals.icu, we store the key that lets us sync. It is encrypted before it is written down.

Consent records

Which permission you gave, when, and when you withdrew it. We are required to be able to show this.

Technical

A login session cookie so you stay signed in, and error logs. Our error logs are built to record only where something broke — never message text, never health data, never file contents.

Where your organisation uses Tempo's AI coach with no human coach, “your coach” means Tempo.

No tracking. Tempo loads no analytics, no advertising pixels and no third-party trackers. The only cookies are the ones that keep you signed in, so there is no cookie banner to click through.

Our legal reasons for using it

To run the service

Contract. Without your account details, training data and messages there is no product.

Health data — wellness, injuries, documents

Your explicit consent, and nothing else. Each type is a separate switch in your profile. Withdraw it and we stop — that does not undo what was lawfully done before you withdrew.

Sending your AI chats for review

Your explicit consentfor athletes. For a coach's own general AI chats, their acceptance of the Terms.

Billing and records

Contract, and our legal duty to keep financial records.

Keeping the service safe and working

Our legitimate interest in a product that is secure and gives correct answers, balanced against your privacy — which is why our logs carry no personal content at all.

What the AI sees

Tempo's AI runs on models we pay for at Anthropic and OpenAI, reached through Vercel's AI Gateway using our own keys. When you ask the AI something, what goes out is your question, the recent conversation, your training numbers, and relevant passages from your coach's own methodology documents.

Injuries and wellness can only reach an AI provider when two things are both true: you have given the health-and-AI consent, and we have switched that channel on for the provider. It ships switched off.
Physio and other health documents are read by the AI only on request, only when your health consent is active, and every single read is written to an access log. If that log entry cannot be written, the document is not read.
The AI providers we use never train on this data; requests may be retained briefly under their standard security policies.

We also use Voyage AIto turn text into numbers so the AI can find the right passage in your coach's documents. What is sent there is your coach's documents and the search text for the turn — which is the message you just typed. Health documents are never sent to it.

Reviewing AI conversations to fix wrong or unsafe answers is covered in the Terms of Service. In short: your data is never used to train an AI model, and your messages with your coach are never part of it.

Who else sees your data

We do not sell your data and we do not share it for advertising. We use a small set of companies to run the product. Each one only gets what it needs for its job.

Supabase

The database, the login system and the private file storage. It holds essentially everything.

Vercel

Hosts the app and runs the scheduled jobs. All AI requests also pass through Vercel's AI Gateway on their way to the model.

Anthropic and OpenAI

The AI models themselves. One is active at a time. What reaches them is described above.

Voyage AI

Turns your coach's documents and your search text into numbers so the right passage can be found.

Resend

Sends invoice emails. It sees the recipient address and the invoice content.

Tap Payments and Stripe

Take card payments, whichever one your coach uses. They see your name, your email and the amount. Card numbers are entered on their page and never reach Tempo.

Expo

Delivers notifications to the phone app and its updates. It sees your phone's notification address, the text of the notification, and an install number used to check for app updates.

Sentry

Receives crash reports from the phone app: what broke, the device and app version, and your account number. No training or health data.

intervals.icu

Only if you connect it. We read your activities and wellness from your own account, and we push planned workouts back to it so they reach your watch.

We may also share data where the law requires it, or to protect someone from serious harm.

Being straight about the paperwork. These companies process data on our behalf, and the law expects us to have a written data-processing agreement with each of them. That work is part of finalising the operator details at the top of this page and is not complete. In particular, we have notsigned a zero-retention agreement with either AI provider — they run under their ordinary commercial terms.

Where your data goes

The companies above operate internationally, so your data will be processed outside the country you live in, and outside the EU. We are not going to name a hosting region here until we have checked and can commit to it — a privacy policy that guesses at that is worse than one that says nothing.

The safeguards for these transfers are being put in place alongside the operator details. If you need to know exactly where something sits before then, ask and we will tell you what we actually know.

How long we keep it

While your account is open

We keep your training history, messages, consents and billing records, because that is the product.

After an account is closed

30 days, then permanent deletion — so a closure by mistake can be undone.

Health documents on closure

Deleted immediately. They do not sit in the 30-day window.

If you delete your own account

Immediately and permanently, all of it, with no 30-day hold and no way back. See below.

Financial records

Kept for as long as tax and accounting law requires, even after the rest is gone.

Consent and health-access records

Kept while the account exists, because they are the evidence that we did the right thing.

Your rights, and the buttons that do them

You have the right to get a copy of your data, correct it, delete it, restrict or object to how it is used, and take it elsewhere. Two of those are a button in the app rather than an email to anyone:

Download a copy.Athlete profile → “Download your data”. You get a JSON file with your profile, consents, intake answers, thresholds, billing and your full message history with both your coach and the assistant. Health documents are listed but their file contents are not included — ask if you want the files themselves.
Delete your account.Athlete profile → “Delete my account”. This removes your account and everything attached to it, including your health documents, at once. It cannot be undone.
Change your mind about anything. Every consent you gave is a switch in your profile: health documents, AI processing, wearable sync, health-and-AI, and reviewing your AI chats. Turning one off stops that use from then on.

Coaches. An assistant coach can delete their own account from the account page. A head coach who owns the team first hands ownership to another coach from their account settings, then deletes their account the same way. A head coach with nobody to hand the team to can delete the whole organisation instead, which removes their own account with it.

For anything that is not a button, write to Karl.Zard@tempoai.fit. We answer within one month. If you are an athlete, your coach decides some of this, so we may need to pass your request to them — we will tell you if we do.

How it is protected

One team can never see another team's data. The database enforces this itself, on every table, on every query — not just in the app code.
Every uploaded file lives in a private store. There are no public file links; the app hands out short-lived signed ones.
Keys we have to store for you — your intervals.icu key, your coach's payment key — are encrypted before they are written down, each with its own random value.
Every time the AI reads one of your health documents, that read is logged. If the log cannot be written, the document is not read.
Our error logs record where something broke and nothing else — no message text, no health data, no file contents. This is enforced in code, not by habit.

No system is perfect. We do not hold a security certification today, and we are not going to imply one.

Age

Tempo is for people aged 16 and over. If you believe someone under 16 has an account, tell us at Karl.Zard@tempoai.fit and we will remove it.

Changes to this policy

When we change this policy in a way that matters we bump the version at the top, and coaches are asked in the app to accept the new one. If a change means we need a new permission from you, we will ask for it separately rather than assume it.

Contact and complaints

Write to Karl.Zard@tempoai.fit, or to CEPP SARL, Jal el Dib Main Road, Matn, Lebanon.

If you are in the EU or the UK and you think we have handled your data badly, you can complain to your national data protection authority. You do not have to talk to us first, though we would rather you did — it is usually faster.