TempoTempo Privacy Policy
Last updated: 12 November 2026
Tempo is a running coaching app. It builds a training plan, adjusts it every week and comments on your runs. This page explains which data Tempo uses, why, who receives it, for how long, and how to exercise your rights.
Tempo is in closed beta, by invitation, and reserved for adults. The French version of this policy is the reference version.
1. Who is responsible for your data
The data controller is Bruno Sader, sole trader ("entrepreneur individuel", trading as "Sader Bruno Company"), 5 rue Alfred Roll, 75017 Paris, France, company number (SIREN) 984 595 116.
For any question or request about your data: brunosader@hotmail.com
2. Data Tempo uses
Your account
- Your e-mail address and password (stored hashed; Tempo never sees it in clear).
- The first name you choose to display, your profile photo if you add one, and your friend code.
Your runner profile
- Your level, weekly volume, running days, past race results, other regular sports.
- If you provide them: year of birth, sex, weight, height, maximum and resting heart rate.
- The city you choose for the weather, and the city of your trips or your race. Tempo does not use your phone's GPS to locate you.
Your training
- Your goal, your plan, your planned sessions and the changes you make to them.
- Your imported runs: date, duration, distance, elevation gain, pace, heart rate, cadence, lap times, and the GPS route when the source provides it.
- What you report after a session: perceived effort, how you felt, free notes, any pain and where.
- The constraints you report: holidays, travel, illness, injury.
Your conversations
- Your messages to the coach and its replies.
- The feedback you send from the "Feedback" screen, with the app version.
Technical data
- A log of calls to artificial intelligence (task, model, volume, cost, duration), without the content of the exchange.
Health data. Heart rate, pain, illness, injury, weight and what you write about your condition are health data within the meaning of Article 9 GDPR. Tempo only processes them with your explicit consent.
You are never required to provide health data. Without your runs and your level, however, Tempo cannot build a plan.
Tempo shows no advertising, does not sell or rent any data, and uses no advertising or audience-measurement trackers. This website sets no tracking cookies.
3. Where your runs come from
- Apple Health (iPhone) or Health Connect (Android), if you allow it on your phone. Tempo only reads your workouts, with their heart rate and route. Tempo writes nothing to Apple Health or Health Connect and never uses this data for advertising or commercial profiling.
- A file (FIT, GPX or TCX) that you import yourself.
- Manual entry.
- Garmin Connect, if you connect your account (section 7).
4. Why, and on which legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating your account, signing you in, securing access | Account | Performance of the contract (Art. 6(1)(b)) |
| Building and adjusting your plan | Profile, training, constraints | Performance of the contract; explicit consent for health data (Art. 9(2)(a)) |
| Analysing your sessions, writing the message of the day, answering in the coach, using artificial intelligence | Training, feelings, messages | Explicit consent (Art. 6(1)(a) and 9(2)(a)) |
| Showing the weather for your session | City | Performance of the contract |
| Friends features (section 6) | First name, photo, summary of your week | Performance of the contract, at your initiative |
| Receiving your Garmin activities and sending your sessions to your watch | Section 7 | Explicit consent |
| Sending account e-mails (confirmation, password) | Performance of the contract | |
| Fixing bugs, tracking costs, reading your feedback | Technical log, feedback | Legitimate interest (Art. 6(1)(f)) |
| Answering your rights requests and keeping proof of them | E-mail, request | Legal obligation (Art. 6(1)(c)) |
Tempo makes no fully automated decision that has a legal effect on you or affects you in a similar way. The plan is a proposal that you remain free to follow or not.
5. Artificial intelligence
Tempo uses artificial intelligence models from Anthropic (Claude Haiku) to:
- choose the sessions of your coming weeks, within the limits set by Tempo's safety rules;
- write the comment on a finished session;
- write the message of the day;
- answer your questions in the coach and propose plan changes, which you accept or decline.
What is sent. What the answer needs: your plan, your recent runs (date, distance, duration, pace, heart rate, lap times), how you felt, the fact that a pain was reported, your constraints, the weather in your city, and your messages to the coach. Tempo does not attach your name or e-mail address. Avoid writing in the coach anything you do not want processed.
What Anthropic does with it. Anthropic processes this data as a processor, only to produce the answer. Its commercial terms prohibit it from training its models on this data. It deletes it within 30 days, except content flagged as breaching its usage policy, which it keeps longer for its own safety purposes. The data is stored in the United States.
What Tempo does not do. Tempo does not train any model with your data. Tempo makes no diagnosis and gives no medical advice: when a pain is reported, the coach is designed to suggest rest and a health professional.
Your consent. This processing relies on your explicit consent. You can withdraw it at any time by writing to brunosader@hotmail.com. Without it, the AI-built plan, session analysis and coach cannot work.
6. What your friends see
You add a friend by entering their code; the friendship then works both ways. Your friends see:
- your first name and photo;
- your race or goal, and its date;
- your kilometres done and planned this week, the number of weeks held in a row, and the share of your sessions done last week;
- your planned sessions for the next two weeks (day, type, title, distance, duration, done or not).
Your friends never see your heart rate, pains, feelings, notes, coach messages or routes.
When you take part in a group session, the other participants see your first name and photo, even if they are not your friends.
Your profile photo is stored at a public address: anyone who has the link can see it.
To remove a friend, write to brunosader@hotmail.com.
7. Connecting to Garmin Connect
Connecting Garmin is optional and done from your profile, on Garmin's own authorisation page. Tempo never sees your Garmin password.
What Tempo sends to Garmin. Your planned sessions (title, steps, durations or distances, target paces), so that they appear in your Garmin Connect calendar and on your watch. Garmin then processes them as a controller under its own policy: https://www.garmin.com/privacy/connect. Do not upload to your Garmin account data you are not allowed to put there.
What Tempo receives from Garmin. The activities recorded by your watch after you connect (date, duration, distance, pace, heart rate, laps, route, device model). They are used like your other runs.
Artificial intelligence transparency statement. Data received from Garmin is processed by the artificial intelligence systems described in section 5 (Anthropic's Claude models), for the sole purpose of analysing your sessions, adjusting your plan and answering you in the coach. It is not used to train any model. This processing only starts after your explicit consent, asked when you connect your Garmin account. You can withdraw this consent at any time by disconnecting Garmin from your profile: Tempo then stops receiving your Garmin data, and you can ask for the data already received to be deleted. This statement is updated when the law or Garmin's policies change.
Data that comes from a Garmin device is labelled as such in the app.
8. Who receives your data
Tempo uses the following providers. They act as processors, on instruction and under contract.
| Provider | Role | Data | Place of processing | Safeguard for transfers outside the EU |
|---|---|---|---|---|
| Supabase Pte. Ltd (Singapore) | Hosting of the database, accounts, photos and server code | All app data | European Union (Paris region) for the database, accounts and files. Technical support may access it from abroad | Standard contractual clauses |
| Anthropic Ireland Ltd (Ireland) | Artificial intelligence | Section 5 | United States | Standard contractual clauses |
| Apple Inc. (WeatherKit) | Weather forecast | Your city's coordinates, rounded to about one kilometre. The request is sent by Tempo's server, without your identity | United States | No data that identifies you is transferred |
| OpenStreetMap Foundation (Nominatim) and komoot GmbH (Photon) | City search | The text you type in the search, sent by Tempo's server; as a last resort, directly by your phone, with your IP address | United Kingdom, Netherlands, Germany | EU country or country recognised as adequate |
| Plus Five Five, Inc. (Resend) | Sending account e-mails | Your e-mail address and the content of the e-mail, kept 30 days | United States | EU-US Data Privacy Framework and standard contractual clauses |
| 650 Industries, Inc. (Expo) | Delivering app updates | Phone operating system, app version, random installation identifier. No training data | United States | EU-US Data Privacy Framework |
| Vercel Inc. | Hosting of this website | Connection data for the website (IP address) | United States | EU-US Data Privacy Framework |
Garmin, if you connect your account, receives your sessions as a separate controller (section 7).
Apple and Google distribute the app (TestFlight, App Store, Google Play) under their own policies.
Your data is not passed to anyone else, unless the law or a court order requires it.
9. How long
| Data | Duration |
|---|---|
| Account, profile, plan, runs, feelings, coach messages | As long as your account exists |
| After a deletion request | Erased within 30 days at most |
| Inactive account | Deleted after 24 months without signing in, after a warning e-mail sent 30 days before |
| Data received from Garmin | As long as Garmin is connected; deleted on request after disconnection |
| Feedback sent from the "Feedback" screen | 24 months |
| Technical AI call log | 24 months, with no link to you once your account is deleted |
| Data sent to Anthropic | 30 days at Anthropic (see section 5) |
| Account e-mails at Resend | 30 days |
| Proof of your consent and of your rights requests | 5 years |
10. Your rights
At any time you can:
- access your data and receive a copy;
- have it corrected;
- have it deleted;
- receive your data in a reusable format (portability);
- restrict its use or object to processing based on legitimate interest;
- withdraw your consent, without affecting what was done before;
- give instructions about what happens to your data after your death.
How. During the beta, export and deletion are not yet available inside the app: these requests are made by e-mail to brunosader@hotmail.com, from your account's address. You get an answer within one month at most. It is free.
Apple Health and Health Connect permissions are withdrawn in your phone's settings.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr, 3 place de Fontenoy, 75007 Paris, France.
11. Security
- Each user can only access their own data, through rules enforced at database level.
- Traffic is encrypted (TLS) and data is encrypted at rest by the hosting provider (AES-256).
- Provider keys stay on the server, never in the app.
- If a data breach puts you at risk, the CNIL is notified within 72 hours and you are informed without delay.
No system is infallible. Choose a password you use nowhere else.
12. Age
Tempo is reserved for people aged 18 or over. If we learn that an account belongs to a minor, it is deleted.
13. Changes
If this policy changes significantly, you are told in the app or by e-mail at least 15 days before. New consent is asked when the law requires it.