Privacy Policy

TempoRun Ltd is a company registered in Ireland and is the controller of your personal data. This policy explains how we collect, use, store and protect your information when you use the TempoRun app.

This policy complies with the GDPR (General Data Protection Regulation — EU 2016/679), Irish data protection legislation, and the LGPD (Lei Geral de Proteção de Dados — Law 13.709/2018) for Brazilian users.

Data you provide

• Name and email address (on account creation)
• Date of birth, sex, weight and height (athlete profile)
• Injury history and health conditions (for plan personalisation)
• Payment data — processed directly by Stripe; we never store card details

Data generated by app use

• Logged runs: distance, time, pace, heart rate, cadence
• GPS location during runs (only while the app is active)
• Generated training plans and workout progress
• AI Coach interactions and conversation history
• Videos submitted for biomechanical analysis

Data from external integrations

• Strava activities (when you connect your account)
• Garmin activities (when you connect your account)

Technical data

• Device type and operating system
• Usage logs for diagnostics and service improvement

• Provide and personalise the service (training plans, AI Coach, biomechanical analysis)
• Process payments and manage your subscription
• Send training and account notifications
• Improve AI algorithms and service quality
• Comply with legal obligations

Your data may be shared only with the following partners, strictly necessary for the service:

• Supabase — database and authentication (EU servers)
• Stripe — payment processing (PCI DSS)
• Anthropic — AI processing for Coach Tempo and training plans
• Vercel — app hosting
• Strava / Garmin — only when you voluntarily connect

All partners are subject to data processing agreements compatible with the GDPR.

• Data stored on servers in the European Union
• Communications encrypted via HTTPS/TLS
• Passwords never stored — authentication via OTP, Google or Strava
• Data access restricted to authorised team members

Data retention

• Account data: retained while the account is active
• After account deletion: data removed within 30 days
• Tax/financial data: retained for the legally required period (7 years)
• Biomechanical analysis videos: deleted after processing

To exercise any right, contact privacy@temporun.run. Response within 30 days (GDPR) or 15 business days (LGPD).

You can also delete your account directly at Settings → Account → Delete account.

TempoRun uses only essential cookies for session management and authentication. We do not use tracking or advertising cookies.

• Session: keep you authenticated
• Preferences: local app settings

TempoRun is intended for users aged 16 or older. We do not knowingly collect data from users under 16. If we identify such an account without proper consent, the data will be removed immediately.

Material changes will be communicated by email or in-app with 30 days' notice. Continued use after that period implies acceptance of the new terms.

Data protection authorities

• Ireland / EU: Data Protection Commission (DPC)
• Brazil: Autoridade Nacional de Proteção de Dados (ANPD)