Tempo privacy policy

Controller

Tempo is developed and operated by YOHAN BAILLET, Swiss sole proprietorship, UID CHE-439.205.176, Route de Mex 1, c/o SDJ fiduciaire Sàrl, 1036 Sullens, Switzerland. Privacy contact: yohanbaillet@gmail.com.

Workout data on your device

Workout names, distances, target times and paces, repetitions, recovery periods, favourites, drafts and settings are stored locally on your device. Creating an account does not currently back up or synchronise these workouts. No GPS recording, advertising SDK, audience analytics or remote crash reporting is included. The watch preview is a simulation.

Optional Tempo account

The iOS prototype offers email/password and Google sign-in through Supabase Auth. Supabase processes your email, account identifier, authentication credentials and session information to create and secure your account. If you choose Google, Google supplies basic identity information such as your email, name and profile image to Supabase. We do not receive your Google password or request access to Gmail, contacts or Drive. Authentication requests also involve technical connection and security logs.

You can use the local guest mode without creating an account. Account data is retained while your account exists. You may request deletion, correction or a copy of your account data at the contact address below; signing out alone does not delete an account.

Sharing and local deletion

The share action sends a text summary to the app or recipient you choose. Their policies apply. Local workouts remain until you delete them. Clearing app storage or uninstalling removes local workouts; copies already shared are not removed. There is currently no cloud workout backup to restore.

If you contact us

Your email address, message and attachments are used to answer your enquiry and manage the relationship. The contact mailbox uses Google Gmail. Please avoid sending unnecessary health information.

Correspondence is retained for as long as needed to handle the request and any follow-up, or to comply with applicable legal recordkeeping and resolve disputes. Irrelevant correspondence can be deleted on request, subject to those obligations.

Google may process correspondence outside Switzerland, including in the United States, under its privacy policy and applicable international transfer frameworks. We do not sell your data or use your messages for advertising.

Garmin connection in development

Our developer programme access is approved. The connection is being implemented and is not yet available in the released prototype. The following describes the intended processing when this optional feature becomes available.

After you authorise Tempo on Garmin, our backend will receive a Garmin API user identifier, permissions and access/refresh tokens. These are associated with your Tempo account solely to operate your connection. When you request a transfer, Supabase will process the workout name, steps, distances, times, target paces and chosen schedule date and send them to Garmin Connect. Transfer identifiers and status will help prevent duplicates and display the result. We request only the Training API; no recorded activity history, GPS tracks, heart rate or other health metrics are requested.

Supabase is the backend hosting and authentication provider processing this connection data on our behalf. Garmin receives the workouts you choose to transfer. Vercel hosts this public website and branding image but is not the workout-transfer backend. Google provides optional identity sign-in and our contact mailbox; Tempo does not send Garmin workouts or Garmin tokens to Google. No other integration, analytics or AI vendor is used to process Garmin data. We do not sell personal or Garmin data, share it for advertising, or use it to train, evaluate or improve AI models.

Connection tokens will be retained only while needed for the authorised connection. You can withdraw Garmin permissions in Garmin Connect at any time. A Tempo disconnection control and deletion handling will be implemented before enabling the feature. You can also contact us to request removal of connection data, transfer records or your account. Workouts already sent to Garmin remain in Garmin Connect until deleted there. A local deletion does not silently delete a Garmin copy.

Information submitted to Tempo is submitted to YOHAN BAILLET, not to Garmin. Garmin is not responsible for Tempo’s handling of that information. Garmin operates its own service under its Garmin Connect privacy policy.

Hosting, recipients and international processing

Our Supabase database project is located in the EU (Ireland). Supabase Pte. Ltd. and its infrastructure subprocessors provide authentication, database and server functions. Edge delivery, support and technical operations may involve processing outside that region, including the United States; this is not a promise of EU-only processing. See Supabase’s privacy information, data processing addendum and transfer safeguards.

Google and Garmin may process information internationally under their linked policies. Website hosting by Vercel is described in our website privacy policy. Technical logs and provider backups follow the applicable service retention cycles; deletion from active systems may not immediately remove residual backups. We do not maintain a separate advertising or analytics database.

Purposes and legal grounds

We process information to provide requested account and workout-transfer functions, secure the service and answer support requests. Where the GDPR applies, the grounds are performance of the requested service, legitimate interests in security and support, and legal obligations where applicable. Optional Garmin access depends on your authorisation, which you may withdraw without affecting earlier lawful processing.

Website and your rights

Reading this page involves the hosting described in our website privacy policy. Data held only on your phone cannot be accessed by us; we can explain how to remove it.

Your rights

Contact yohanbaillet@gmail.com to request information about personal data held about you, correction, deletion or restriction, as provided by applicable law. Where applicable, you may also object, withdraw consent or request portability. We may need proportionate information to verify your identity. Access requests are normally answered within 30 days; we will explain any necessary extension.

You may contact the Swiss Federal Data Protection and Information Commissioner or the competent authority in your country. Mandatory statutory rights remain unaffected.