Your data, on your phone.

The short version

• No account is needed. You can use Tempovi without signing up for anything. An account is only needed if you want a human coach to follow your training — and you can delete it in the app at any time.
• Apple Health data is read and analysed on your device. It isn’t uploaded anywhere unless you use one of the optional features described below.
• No analytics, no advertising, no tracking — not in the app, not on this website. This site sets no cookies.
• AI is optional and asks first. If you add your own API key, Tempovi asks for your explicit permission — naming the provider and what it will receive — before anything is sent. Nothing goes to an AI provider without a key and that permission.
• We never sell your data or use it for advertising.

What Tempovi reads from Apple Health

With your permission, Tempovi reads data such as workouts and routes, heart rate, heart-rate variability, resting heart rate, respiratory rate, blood oxygen, sleep, wrist temperature, VO₂ max, energy burned, steps, running power, cadence and running form, body weight and — only if you open Biology — body composition, blood pressure and blood glucose. You choose exactly which types to allow in the Health permission sheet, and you can change that at any time in the Health app.

Tempovi writes to Apple Health only when you record a workout (runs and strength sessions, including the route for outdoor runs) or when you explicitly tap Write to Apple Health after importing lab results.

Data from Apple Health is never used for advertising or marketing, and is never sold.

What’s stored on your iPhone

Your settings, plans, food log, strength log, notes, timeline and calculated scores are stored in the app’s private storage on your iPhone. API keys and sign-in tokens are kept in the iOS Keychain. Deleting the app deletes this data. If you make a backup from Settings › Data & Privacy, that file is yours — it may contain your API keys, so keep it somewhere safe.

When something leaves your phone

Only the features below talk to the internet, and only when you use them.

AI features (optional, with your own key)

The coach chat, run reviews, coach’s notes, the weekly report, food photo recognition, lab-report PDF import and marker analysis use a large language model. They only work after you add your own API key for a provider such as Anthropic, OpenAI, DeepSeek, Z.ai (GLM), Moonshot (Kimi) or another OpenAI-compatible service. When you use them, Tempovi first asks for your explicit permission for that provider: the consent screen names the company, where it is based and what it will receive. You can withdraw it at any time in Settings; the AI features then stop. With your permission, Tempovi sends the provider the context a request needs — for example your training load, recent runs, recovery and sleep summaries, your coaching notes, your approximate location name and local time, the photo or document you chose, and your message. The request goes directly from your phone to that provider and is covered by their privacy policy and data-use terms. Some providers you can choose are based outside the EU — Anthropic, OpenAI and Groq in the United States; DeepSeek, Z.ai (Zhipu) and Moonshot AI in China — so your request is processed there. Pick the provider you are comfortable with; Tempovi itself never receives these requests.

Weather

To find the best time to run and to note the conditions of past runs, the app sends your approximate location (rounded coordinates) to Open-Meteo, a free weather service — also to look up the temperature of older runs that have none recorded. No account or identifier is sent. Location access is “while using the app” and you can turn it off in iOS Settings.

Food lookups

When you scan a barcode or search online, the barcode or search text is sent to Open Food Facts. Typing what you ate in plain words is matched against a food table on your phone and needs no connection.

Routes and maps

Route generation uses openrouteservice with a free key you add yourself; it receives the start point, distance and destination of the route you ask for. Place search uses Photon, maps are drawn with OpenTopoMap tiles, and voice navigation looks up junctions along your route from OpenStreetMap (Overpass API).

Other optional integrations

• Voice input — if you add a transcription key and give permission for that service (OpenAI or Groq, both in the United States), your recorded question is sent there to be turned into text.
• Flight lookup — if you add an AeroDataBox key, the flight number and date you enter are sent to look up times.
• Exercise pictures — some strength exercises show reference images or video links loaded from public sources (GitHub, YouTube).
• Google Drive / Google Sheets — only if you paste a link to import a lab spreadsheet; Tempovi downloads that file.

Working with a human coach (optional, needs an account)

If you create an account under Cloud & Human Coach, Tempovi stores data on its own server so a coach can follow your training. By creating the account and turning on sync you give explicit consent to this. The server runs on Cloudflare (Workers and D1 database, hosted in Western Europe), which processes the data on our behalf. It stores:

• Your account: email address, optional name, role (athlete or coach), sign-up date and your password in hashed form (PBKDF2-SHA256 with a random salt — we can’t read it).
• Your runs: one record per run in the history the app has loaded — date, duration, distance, calories, heart rate, pace, power, cadence, km splits, intervals and segments, temperature and any notes you wrote. No GPS route.
• Daily summaries: per day, recovery, strain, fitness/fatigue/form, sleep minutes, heart-rate variability and resting heart rate.
• Plans your coach prescribed, and the coach links between you.
• Security data: hashed sign-in tokens (kept up to 60 days) and, to block password guessing, the IP address and email of sign-in attempts for a short time.

Who can see it: only you and a coach you link with. A coach can link only by entering an invite code you created and gave them (codes expire after 15 minutes). A linked coach sees your name and email, your recent runs including notes, about a month of daily summaries and the plans. You can unlink a coach at any time.

How long: as long as your account exists. Delete account on the account screen permanently deletes your account and all of its server data — runs, summaries, plans, coach links and sign-in tokens — immediately. Data on your phone and in Apple Health is not affected. If you can no longer sign in, email us and we will delete it for you.

The server sends no email, and Tempovi keeps no access logs.

Diagnostics you send us

Tempovi has no crash reporting or telemetry. If you contact support and choose to share a diagnostics export, it contains app settings and calculated values with API keys and tokens removed. We use it only to fix your problem and delete it when we’re done.

This website

tempovi.com is a static site hosted by Netlify. It sets no cookies and uses no analytics; like any web host, Netlify processes your IP address to deliver the pages.

Children

Tempovi is not directed at children under 16.

Not medical advice

Tempovi is a training and wellness app, not a medical device. It doesn’t diagnose or treat any condition. Scores, “your body may be fighting something” hints, lab flags and AI answers are estimates. Talk to a doctor about symptoms, medication or lab results.

Who is responsible

Tempovi is developed by Geert Steyaert, Belgium, who is the data controller for the coach-account data and support emails described here. Contact: support@tempovi.com.

Legal basis

Health and fitness data is special-category data under the GDPR. Tempovi processes it on our server only with your explicit consent (creating a coach account and turning on sync), and sends it to an AI provider only with your explicit consent for that provider. You can withdraw consent at any time — by deleting your account, withdrawing AI consent in Settings, or signing out — without affecting processing that happened before.

Your rights

Data on your device is in your hands: view it in the app, export it, change Health permissions, or delete the app. For data we hold (a coach account and support emails) you have the right to access, correct, export and delete it, to restrict or object to processing, and to withdraw consent. Email us and we’ll respond within a month. You can also lodge a complaint with your data-protection authority — in Belgium, the Data Protection Authority (GBA/APD).

Changes

If this policy changes, we’ll update it here and change the date at the top.

Contact

Questions about privacy: support@tempovi.com