Privacy Policy

Tekio app · Last updated: 30 August 2026

This policy explains what data Tekio (“the app”) processes, for what purpose, and what your rights are. It is written in plain language: Tekio is designed to keep your training data on your device and to collect only what is strictly necessary.

1. Data controller

The data controller is Tekio — Nicolas Brecqueville, established in France. For any question about your data, contact: [email protected].

2. Data processed

• Anonymous technical identifier. The app requires no account creation: no email address, no name, no password. An anonymous technical identifier is created through Firebase Authentication (Google) on first launch, before you do anything in the app. It is used only to secure access to the AI coach, verify your subscription and enforce usage limits. We do not attach your name, your email address or your training data to it; it is, however, associated with your subscription status and with the transaction identifier provided by Apple, both described below.
• Training data. Workouts, exercises, loads, repetitions, perceived effort (RPE), goals, body measurements and body tracking, nutrition guidance, as well as your profile (weight, age, sex, experience level). This data is stored locally on your device: it is not hosted on our servers. Some of it is sent to the AI coach when you use it (see below).
• Health (HealthKit). If you allow it, the app reads certain health data (sleep, weight and body fat percentage) to compute your recovery indicators and track your body. The app does not read your heart rate and never writes to the Health app. This data is stored locally and, like your training data, may be included in the context sent to the AI coach when you use it. You can switch that off whenever you want, with the toggle in Profile → Settings → AI coach → Data used by the coach: it covers your sleep, your weight and your body measurements, not the rest of what you type into the app, and the coach keeps working from your workouts. It is never used for advertising or marketing purposes, nor shared with a third party for such purposes, in accordance with Apple’s HealthKit rules.
• Photos. Photos you attach to a workout or to your progress tracking are saved on your device only. They are not transmitted to our servers, to the AI coach, or to any third party.
• AI coach. When you use the coach, the data needed for your request is sent, through our relay server, to the AI model provider (OpenAI) to generate the answer: your question and the conversation messages, your relevant training indicators, what you wrote yourself in “What your AI coach knows about you” (injuries or limitations, equipment, schedule constraints, free-form notes), the notes you attach to your workouts, and depending on the topic, your body measurements, your nutrition guidance or your recovery indicators derived from HealthKit. Before the first transfer, the app shows you these categories, the recipient and the possible retention period: no request is sent until you choose “Allow the coach”. This data is then only sent when you ask the coach something. What you wrote in “What your AI coach knows about you” is sent at every conversation, including when you have switched off the sharing of your health data: that text is what keeps the coach from suggesting a movement you must avoid. You can edit it, delete each line or erase everything from that screen (Profile → Settings → AI coach → What your AI coach knows about you). You can withdraw your consent at any time from Profile → Settings → AI coach → Data used by the coach → Withdraw permission: no new data is then sent, while your local history stays on your iPhone. OpenAI does not use your data to train its models; requests may be retained for a maximum of 30 days for security purposes (abuse detection), then deleted.
• Coach usage counter. To enforce usage limits by day and by period, our server records, in a Firebase Firestore database, a counter attached to the transaction identifier provided by Apple for your subscription (and, failing that, to your technical identifier): the date and usage volume for the current day, the current minute and its request count, the start and usage volume of the current period, a cumulative number of requests and the date you first used the coach. This counter contains neither the content of your conversations, nor your training or health data.
• Subscriptions. Purchases and subscriptions are handled by Apple (App Store): we never receive your payment data. Your subscription status (plan and expiry date) and the transaction identifier provided by Apple are associated with your technical identifier, in order to unlock the corresponding features and to count your coach usage. That transaction identifier comes from your Apple account and stays the same across your devices. The purchase receipt signed by Apple goes through our server to be verified there; it contains no payment data.
• Diagnostics. Technical logs are generated locally, on your device, for the proper operation of the app. They do not leave it.
• Server logs. At every exchange with the coach, our relay server records, at Google Cloud, the date, your technical identifier, your subscription identifier, the AI model called and the volume consumed. The content of your conversations does not appear in them. These logs serve security, troubleshooting and cost monitoring.

3. Purposes

• Provide the app and compute your indicators (strength, volume, load, freshness, readiness).
• Secure access to the AI coach and verify your subscription, via the anonymous technical identifier.
• Operate the AI coach when you use it.
• Prevent abuse, enforce usage limits and keep the cost of the service under control.

Tekio is a sport and wellbeing app. It is not a medical device: neither the app nor the AI coach makes a diagnosis or provides medical advice.

4. Legal basis (GDPR)

Processing of the anonymous technical identifier and of training data is based on performance of the contract (providing you with the service). Access to HealthKit and use of the AI coach are based on your consent, which you can withdraw at any time: in the system settings for HealthKit, with Profile → Settings → AI coach → Data used by the coach → Withdraw permission for every new transfer to the coach, and with the toggle immediately below it for the sleep, weight and body measurements subset. Usage counting, per-subscription limits and server logs rely on our legitimate interest in preventing abuse, securing the service and keeping its costs under control; you may object by writing to us, on the understanding that the AI coach cannot run without those limits. Refusing sharing with OpenAI disables the coach's answers, but everything else in the app works; refusing HealthKit does not prevent you from entering sleep or weight manually.

5. Processors and sharing

We rely on a limited number of providers, solely for the purposes described above:

• Google — Firebase Authentication: provision of the anonymous technical identifier (no account, no email address collected).
• Google — Firebase Functions, Firestore and Cloud Logging: hosting of the relay server that forwards your requests to the AI coach, storage of the usage counters and server logs. The relay does not retain the content of your conversations.
• OpenAI: generation of the AI coach’s answers (only when you use it).
• Cloudflare: hosting of exercise images and videos (media.tekiosport.com) and of the legal pages. Your IP address is sent to it when a media file loads, as with any website.
• Apple — App Store: processing of purchases and subscriptions. Apple acts here as an independent controller, under its own privacy policy.

We do not sell your data, do not rent it and do not use it for advertising purposes. No third-party tracker is embedded in the app.

6. Transfers outside the European Union

Our relay server is deployed in the United States (Google Cloud region us-central1): everything you send to the coach goes through it. Google and Apple appear on the list of organisations certified under the EU-U.S. Data Privacy Framework. OpenAI publishes data processing terms that include the European Commission’s standard contractual clauses for the relevant transfers. A copy of these safeguards can be requested at [email protected].

7. Retention

• Local data (workouts, history, profile, coach memory): kept on your device as long as the app is installed, or until you use “Erase my data” or uninstall the app.
• Anonymous technical identifier: kept as long as the technical session exists on your device. The subscription status attached to it expires on its own.
• Coach usage counter: on the first request after the day or minute changes, or after the period expires, the relevant values restart from zero for the calculation. Until then, the previous values remain stored. The counting record itself (subscription identifier, cumulative number of requests, date of first use) is kept for as long as the service exists. It contains no training, health or conversation data, and you can ask for it to be deleted at the address given in section 9.
• Server logs: kept for 30 days at Google Cloud, then deleted automatically.
• AI coach requests: processed by the model provider for the time needed to generate the answer, retained for a maximum of 30 days for security purposes, then deleted. Our relay servers do not store the content of your conversations; the coach history lives on your device.

8. Erasing your data

You can erase your data at any time from the app: Profile → Settings → Erase my data. This permanently erases all data stored on your device (workouts, history, profile, coach memory, coach conversations, settings). It is irreversible. It does not touch what lives on our servers, namely the usage counter and the logs described above: for those, write to us and we will delete them. The anonymous technical identifier may remain (it notably allows your subscription to be preserved). Uninstalling the app also deletes all local data.

9. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. Most can be exercised directly in the app (profile editing, “Erase my data”). For any other request, write to [email protected]. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL).

10. Security

Data stored on the device benefits from iOS file protection (encryption at rest). The anonymous technical identifier is kept in your device’s keychain, which is also encrypted.

11. Minors

The app is rated 13+ on the App Store and is not intended for children under 13. We do not knowingly collect data concerning a child under 13. The app does not verify the age of its users: if you are a minor, ask your parents for permission before using it.

12. Changes

This policy may be updated. In case of a significant change, we will inform you in the app. The date of the last update appears at the top of this page.

A question about your data? Write to [email protected].