Tempo Training LLC Privacy Policy

Effective Date: 2026-10-15

Last Reviewed: 2026-10-15

Tempo Training LLC ("Tempo Training," "we," "us," or "our") operates the Tempo training platform (the "Service") through our website at jointempo.ai, our iOS app, and the connectors we offer to AI assistants. This Privacy Policy describes what personal information we collect, why, who we share it with, how long we keep it, and the choices you have, including data that arrives from the devices and services you connect.

When you create an account we ask you to accept this policy and, separately, to consent to the processing of your health and fitness data. We record both. Section 12 is written for residents of Washington and other states with consumer health data laws.

1. Information We Collect

1.1 Information You Provide Directly

Account Information: Name, email address, password (stored as a salted hash), the public key of any passkey you register, profile information, and an avatar image if you add one
Profile and Body Metrics: Date of birth, gender, height, weight, body composition (BMI, body fat, body water, bone mass, muscle mass, hydration)
Daily Check-in: Self-reported ratings of how you feel (overall feeling, sickness, fatigue, soreness, stress, motivation), free-form notes, and, if you choose to track your menstrual cycle, the period flow you log each day
Performance Profile: Functional Threshold Power (FTP), maximum and resting heart rate, threshold heart rate, estimated VO2 max, power and heart-rate zone configuration
Nutrition and Fueling Profile: Sweat rate, sweat sodium concentration, tested carbohydrate tolerance, activity factor for energy-expenditure estimation, and any nutrition intake you log
Goals, Plans, Events, and Notes: Training goals, training plans, scheduled and completed workouts, events and races (including location, date, distance, target intensity, and result status), and calendar notes
Teams: The name, logo, and description of any team you create, the posts and comments you write in a team, and the workouts you choose to share with it (see Section 4.3)
Payment Information: On the web, billing details are collected and processed by Stripe; on iOS, purchases are made through Apple In-App Purchase. We receive subscription status and transaction identifiers, never your full card number.
Communications: Messages, feedback, support requests, and the optional exit survey you can fill in when deleting your account
How You Found Us: The referring page and any campaign tags in the link you used when you signed up

1.2 Information from Devices and Services You Connect

When you authorize a connection to a third-party service ("Integrations"), including Wahoo, Garmin, Strava, Withings, WHOOP, Hammerhead, and TrainerRoad, and when you allow the iOS app to read from Apple Health, we may receive:

Workout and Activity Data: Duration, distance, elevation, speed, cadence, power, heart rate, training load, Intensity, Norm Power, variability index, left-right balance, GPS routes and polylines, the gear used, and raw activity files (e.g., FIT files)
Cardiovascular and Recovery Data: Resting heart rate, heart rate variability (HRV/RMSSD), heart rate recovery, vagal rebound
Thermoregulation Data: Core body temperature, skin temperature, heat strain index, and ambient temperature distributions (where supported by your device, e.g., CORE sensor)
Wellness and Sleep Data: Sleep stage breakdowns (deep, REM, core, awake), recovery scores, stress levels
Body Composition: Weight, body fat, hydration, and related metrics from connected scales
Apple Health (iOS): Heart rate, sleep, body composition, and fitness measurements you grant access to; with your permission the app can also write workouts back to Apple Health
Device Information: Device identifiers, device names, and technical data necessary for synchronization
Profile Data: Basic profile information from connected services

We collect only the information provided through each Integration's API and specifically authorized by you under that Integration's scopes or Apple Health permissions.

1.3 Automatically Collected Information

Usage Data: Which features you use and when, recorded in our own server logs
Device Information: IP address, browser type, operating system, and app version
Push Notification Tokens: Device push tokens (iOS and web), device type, app version, and OS version, used solely to deliver notifications you have enabled
Log Data: Server logs and error reports
Cookies and Local Storage: As described in our Cookie Policy

We do not use third-party analytics or advertising trackers. For details on the cookies and browser storage we use, see our Cookie Policy.

1.4 Health and Biometric Data

Tempo collects and processes sensitive health and fitness data. This includes, but is not limited to: heart rate and HRV, training and power metrics, sleep patterns, recovery and readiness scores, body composition, core/skin temperature and heat strain, nutrition profile data, and, if you choose to track it, menstrual cycle data (the period flow you log and the cycle day we derive from it). This information is treated as sensitive personal information ("special category" data under GDPR Article 9) and is processed on the basis of your explicit consent, which we ask for and record when you create your account (or, for accounts created before we asked, the first time you sign in afterwards).

You can withdraw this consent at any time by deleting your account in Settings or by emailing privacy@jointempo.ai. Because the Service exists to analyze this data, we cannot provide it without that consent.

We are not a covered entity under HIPAA. We apply administrative, technical, and physical safeguards consistent with GDPR and CCPA/CPRA standards.

2. How We Use Your Information

2.1 Primary Service Functions

Personalized Training: Generate customized training plans, workouts, and recommendations
Performance Analytics: Calculate fitness metrics, trends, and performance insights, including power-duration curves and time-in-zone distributions
Recovery Optimization: Provide recovery and readiness recommendations based on wellness, HRV, and sleep data
Fueling Recommendations: Generate hydration, sodium, and carbohydrate guidance based on your nutrition profile and workout demands
Progress Tracking: Monitor and display your fitness journey, goals, and achievements
Teams: Show your shared workouts, posts, and comments to the members of teams you join

2.2 Service Operations

Account Management: Maintain your account and provide customer support
Communication: Send service-related email and push notifications, and marketing email only while your marketing setting is on (see Section 6.3)
Service Improvement: Analyze how features are used, in aggregate, to improve them
Fraud Prevention: Use bot- and abuse-detection signals (e.g., Cloudflare Turnstile during sign-up) to protect the Service
Legal Compliance: Comply with legal obligations and protect our rights

We do not use your health or fitness data for advertising, and we do not sell it or share it for any commercial purpose unrelated to providing the Service.

2.3 Automated Decision-Making and Profiling

We use automated systems to analyze your fitness, training, and wellness data to generate personalized training, recovery, and fueling recommendations. These analyses do not produce legal or similarly significant effects. You may contact us to obtain more information or to request human review of any recommendation.

2.4 AI Assistants You Connect

Tempo offers a connector (an MCP server) that lets you use an AI assistant of your choice, such as Claude or ChatGPT, with your Tempo data. Nothing is shared with an assistant until you connect it yourself, either by signing in on Tempo's consent page when the assistant asks, or by creating an API key in Settings and giving it to the assistant. Once connected:

The assistant can read your profile, workouts, fitness metrics, wellness and nutrition data, events, notes, and training plan, and can create, change, or delete planned workouts, events, and notes on your behalf.
The data the assistant reads is sent to the assistant's provider (for example Anthropic or OpenAI) and handled under that provider's own terms and privacy policy, which we do not control. Review them before you connect.
Tempo records only the fact of each request the assistant makes (which tool, when, and whether it succeeded), never its content, so we can monitor the connector's health and usage.
You can disconnect at any time by removing the connector in the assistant, by revoking the API key in Settings, or by deleting your account.

Tempo's own in-app AI analysis is currently disabled. If we enable it, it would send the relevant portions of your training and wellness data to OpenRouter, Inc., which routes requests to the model we select (currently Anthropic's Claude family), for inference only and under terms that prohibit training on your data. We will update this policy before any such feature is turned on.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area and the United Kingdom, our legal bases for processing are:

Consent: For health data (recorded when you create your account) and for marketing communications (recorded when you opt in)
Contract Performance: To provide the Service you signed up for, including Teams and the connectors you enable
Legitimate Interest: For service improvement, security, and fraud prevention
Legal Obligation: To comply with applicable laws, including tax and accounting rules for billing records

4. Data Sharing and Disclosure

4.1 We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties, and we do not share it for targeted advertising.

4.2 Service Providers

We share information with the providers that run parts of the Service for us, under contracts that limit them to that purpose:

Render (application hosting and database, United States)
Amazon Web Services (storage of uploaded activity files, avatars, and team logos)
Twilio SendGrid (transactional and marketing email delivery)
Cloudflare (DNS, content delivery, and the Turnstile bot check at sign-up)
Stripe (web subscriptions and payment) and Apple (iOS in-app purchases)
OpenStreetMap Foundation (when you type an event location we look it up through Nominatim, and route maps load tiles from openstreetmap.org, which receives your IP address and the map area shown)
Google Fonts (the web app loads its typeface from Google, which receives your IP address when the page loads)
AI assistant providers you connect, as described in Section 2.4, only on your action

4.3 Other Tempo Users (Teams)

Teams are optional. When you join one, its members can see your name, your posts and comments, and the workouts you share with that team. Sharing of new completed cycling and running workouts is on by default for each team you join and can be turned off per team; a shared workout shows its title, the day it took place, the metrics you selected, and a route with its start and end trimmed. Your workout's start time, your other workouts, and your wellness data are never shared. Team admins can remove content, and if you leave a team your shares and join announcement are removed while your posts and comments stay unless you choose to delete them when leaving.

4.4 Legal Requirements and Business Transfers

Legal Requirements: When required by law, court order, or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, or asset sale, with notice to you

4.5 Data Processing Locations

Your data is stored and processed in the United States and in other countries where our service providers operate. For transfers out of the EEA and UK we rely on Standard Contractual Clauses approved by the European Commission or other lawful mechanisms.

5. Data Security and Retention

5.1 Security Measures

Encryption in transit (TLS) and at rest in our hosted database and file storage
Passwords stored only as salted bcrypt hashes; passkeys supported as a password-free alternative
Session cookies that JavaScript cannot read (HttpOnly, Secure, SameSite)
Access controls so that every request is scoped to the signed-in account
Automated dependency and code review, and a public vulnerability disclosure program (see our Security page)

No method of electronic storage or transmission is completely secure. Use a strong, unique password or a passkey, and tell us at security@jointempo.ai if you believe your account has been accessed without your permission.

5.2 Data Retention

While your account is active: We keep your data so the Service can analyze your history.
When you delete your account: Your account and all data linked to it are removed from our live database immediately, your uploaded files are deleted and your Integration tokens revoked shortly after, and a Stripe subscription is cancelled. An Apple subscription cannot be cancelled by us: cancel it in your Apple ID subscription settings before deleting, or it keeps renewing. Database backups that still contain the data expire within 30 days.
Billing records: Kept for as long as tax and accounting law requires, in Stripe's and Apple's systems.
Exit survey: The reasons and comments you give when deleting your account are kept without your name or email.
Server logs: Kept for a short period for security and debugging, then deleted.

5.3 Data Breach Notification

In the event of a data breach involving your personal data, we will notify affected users and regulators as required by law. We maintain incident response procedures to ensure timely and appropriate action.

6. Your Rights and Choices

6.1 Account Controls

Access and Portability: Email privacy@jointempo.ai for a copy of your personal data in a machine-readable format. Individual workouts can also be exported as GPX files in the app.
Correction: Update your profile, body metrics, and preferences in Settings, or ask us to correct anything you cannot edit yourself.
Deletion: Delete your account in Settings → Account Management, or email us. This removes your data as described in Section 5.2; if you subscribed through Apple, cancel that subscription in your Apple ID settings first.
Withdraw Consent: Withdraw health-data consent by deleting your account; withdraw marketing consent with the toggle in Settings or the unsubscribe link in any marketing email.
Objection and Restriction: Email us to object to or restrict a specific use of your data.

6.2 Integration Controls

Disconnect: Remove an Integration in Settings. This stops new syncs and revokes Tempo's access token with that provider; data already imported stays in your account until you delete it or your account.
Apple Health: Change what the iOS app may read or write in the Health app's permissions.

6.3 Communication Preferences

Marketing: Accounts created from 2026-10-15 start with marketing email off unless you opt in at sign-up; accounts created earlier kept the setting they had. Change it at any time in Settings, and every marketing email carries an unsubscribe link.
Push Notifications: Control them in Settings and in your device's notification settings.
Service Email: Account, security, and billing messages are part of running the Service and cannot be opted out of while you have an account.

6.4 Regional Rights

California Residents (CCPA/CPRA): The rights to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising them. We do not sell or share personal information.
EU/UK Residents (GDPR): Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your data protection authority.
Washington, Nevada, and Connecticut Residents: See Section 12 for consumer health data rights.

To exercise any right, email privacy@jointempo.ai from the address on your account, or use the controls in Settings. We respond within 30 days (45 days for consumer health data requests) and may ask you to confirm your identity first.

7. Children's Privacy

Tempo is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information promptly.

8. International Users

If you access our Service from outside the United States, please be aware that your information is transferred to, stored, and processed in the United States, where our servers and central database are located.

9. Third-Party Links and Services

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will:

Post the updated policy on this page with a new effective date
Email you about material changes before they take effect
Ask for your consent again where the law requires it

Your continued use of our Service after the effective date constitutes acceptance of the updated policy.

11. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: privacy@jointempo.ai
Address: Tempo Training LLC, 8 The Green, Ste B, Dover, DE 19901

For EU and UK residents, you also have the right to lodge a complaint with your local data protection authority.

12. Consumer Health Data Privacy (Washington and Similar Laws)

This section applies to "consumer health data" as defined by the Washington My Health My Data Act, Nevada SB 370, the Connecticut Data Privacy Act, and similar laws, and supplements the rest of this policy.

12.1 Categories of Consumer Health Data We Collect

Heart rate, heart rate variability, heart rate recovery, and resting heart rate
Sleep duration and stages, recovery and readiness scores, stress levels
Weight, height, body composition, and body temperature measurements
Exercise and performance data, including power, pace, training load, and VO2 max estimates
Self-reported wellness ratings, including sickness, fatigue, soreness, stress, and motivation
Menstrual cycle data, if you choose to track it
Nutrition, hydration, and sweat profile data
Location data from GPS activity recordings and event locations you enter

12.2 Sources

You provide this data directly, it arrives from the devices and services you connect (Section 1.2, including Apple Health on iOS), or we derive it from that data (for example fitness, fatigue, and readiness scores).

12.3 Purposes

We collect and use consumer health data only to provide the Service you asked for: training analysis and planning, recovery and readiness guidance, fueling recommendations, progress tracking, and the Teams and AI-assistant features you turn on. We do not use it for advertising.

12.4 Sharing

Consumer health data is shared only with the service providers listed in Section 4.2, under contracts that restrict them to processing it for us; with members of a team you join, limited to the workouts you share (Section 4.3); with an AI assistant you connect (Section 2.4); and where the law requires. We do not sell consumer health data and do not share it for targeted advertising.

12.5 Your Rights

You have the right to confirm whether we are collecting, sharing, or selling your consumer health data; to access it, including a list of the third parties we have shared it with; to withdraw your consent; and to have it deleted. To exercise these rights, email privacy@jointempo.ai from the address on your account, or delete your account in Settings. We will verify the request, respond within 45 days, and will not discriminate against you for exercising a right.

If we decline a request, you may appeal by replying to our decision within 30 days and stating that you are appealing. We will respond to the appeal within 45 days. If the appeal is denied, Washington residents may contact the Washington State Attorney General, and residents of other states may contact their state attorney general.

This Privacy Policy was last updated on the Last Reviewed date listed above.