Tekio
FR Download

Privacy Policy

Tekio app · Last updated: 30 October 2026

This policy explains what data Tekio (“the app”) processes, for what purpose, and what your rights are. It is written in plain language: Tekio is designed to keep your training data on your device, to copy it to our servers only if you create an account to back it up, and to collect only what is strictly necessary.

In short. No account is required. Without an account, your workouts, history, programs and profile stay locally on your iPhone. If you create an account (with Apple, Google or an email address), a backup of your data is kept on our servers in Europe so you can get it back on another iPhone; you can delete that account at any time. What you send to your AI coach, however, does leave your device: the details are in section 2. We use no advertising and no advertising tracking; usage measurement in the app is anonymous and can be turned off in the settings. Our subscription statistics come from Apple’s notifications and from the app, without your name or email address (section 2). We never sell your data.

1. Data controller

The data controller is Tekio — Nicolas Brecqueville, established in France. For any question about your data, contact: [email protected].

2. Data processed

  • Anonymous technical identifier. The app works without an account: without one, no email address, no name, no password. An anonymous technical identifier is created through Firebase Authentication (Google) on first launch, before you do anything in the app. It is used only to secure access to the AI coach, verify your subscription and enforce usage limits. We do not attach your name, your email address or your training data to it; it is, however, associated with your subscription status and with the transaction identifier provided by Apple, both described below.
  • Training data. Workouts, exercises, loads, repetitions, perceived effort (RPE), goals, body measurements and body tracking, nutrition guidance, as well as your profile (weight, age, sex, experience level). This data is stored locally on your device; it is hosted on our servers only if you create an account (see “Account and backup”). Some of it is sent to the AI coach when you use it (see below).
  • Health (HealthKit). If you allow it, the app reads certain health data (sleep, weight and body fat percentage) to compute your recovery indicators and track your body; if you turn on Nutrition import, it also reads your intake (calories, protein, carbohydrates, fat) and your energy expenditure. The app does not read your heart rate history from Health. It writes to the Health app only if you turn on “Save my workouts” in Settings → Apple Health (open Settings from the profile icon on the Home screen), an option that is off by default: each workout you finish is then saved there with its duration and, on iOS 26 and later, the active energy burned and the heart rate measured during the workout by a wearable device. This data is stored locally (and in your backup if you have an account) and, like your training data, may be included in the context sent to the AI coach when you use it, if you choose to include it: this sharing is optional (“Include my health data”, offered when you enable the Assistant). You can turn it off or back on whenever you want, with the “Share my sleep, weight and measurements” toggle in Settings → Assistant → Included data: it covers your sleep, your weight, your body measurements and your nutrition data, as well as the health part of the Memory (see “AI coach”), and the coach keeps working from your workouts. Your health data is never used for advertising or marketing purposes, nor shared with a third party for such purposes, in accordance with Apple’s HealthKit rules.
  • Photos. Photos you attach to a workout or to your progress tracking are saved on your device. If you have an account, they are part of your backup (body photos only if you leave that setting on, which is the default). They do not otherwise leave your iPhone, except the ones you choose yourself to attach to a request to Tekio AI (an attachment in the conversation, or Compare → Analyze with Tekio, which attaches two body photos): they are then sent to OpenAI for that request, with the same retention as the rest of the request (30 days at most, see “AI coach”). Scanning a nutrition label and estimating a meal from a photo happen on your iPhone: the photo is neither sent nor kept.
  • Account and backup (optional). If you create an account, you sign in with Apple, with Google or with an email address and a password, to back up your data and get it back on another iPhone. Before signing in, the app asks for your explicit consent. Firebase Authentication (Google) then stores your email address (or Apple’s private relay address), the identifier provided by Apple or Google or, for email sign-in, your password in hashed form, and, where applicable, your name. A complete copy of your Tekio data is then sent automatically at useful moments (end of a workout, app going to the background, changes): workouts and history, programs and routines, goals, nutrition log, measurements and body tracking, including what the app imported from Apple Health, workout photos and, if you leave it on, body photos, profile and settings, coach conversations, memory and creations. This backup is stored with Google Cloud in the European Union (region europe-west1, Belgium). A technical record with no training or health data (dates, file sizes and fingerprints, anonymous identifier of the device that backs up, date and version of your consent) is kept in Firebase Firestore. Only one iPhone backs up at a time: signing in on a new iPhone hands that role over to it.
  • AI coach (Tekio AI). When you use the coach, the data needed for your request is sent, through our relay server, to the AI model provider (OpenAI) to generate the answer: your question and the conversation messages, the photos and files (images, PDF, text) you attach to your request, your profile and relevant training indicators, the content of Tekio AI’s Memory (what you enter there: injuries or limitations, equipment, training days, goal, favorite or avoided exercises, response style, time per session; and the notes you have confirmed), the notes you attach to your workouts, and, if you chose to include your health data, depending on the topic, your body measurements, your nutrition guidance or your recovery indicators derived from HealthKit. Before the first transfer, the app shows you this data and its recipient, with a link to this policy: no request is sent until you choose “Enable Assistant”. This data is then only sent when you ask the coach something. The Memory is sent with every request, except notes marked “Needs review”. If you do not include your health data, the Memory only sends your time per session and the items you classified as “Preference, no health information”, never your injuries or limitations. You can edit, classify or delete each item, or erase everything, from Settings → Assistant → Memory. You can withdraw your consent at any time from Settings → Assistant → Included data → Withdraw permission: no new data is then sent, while your local history stays on your iPhone. OpenAI does not use your data to train its models; requests may be retained for a maximum of 30 days for security purposes (abuse detection), then deleted.
  • Coach usage counter. To enforce usage limits by day and by period, our server records, in a Firebase Firestore database, a counter attached to the transaction identifier provided by Apple for your subscription (and, failing that, to your technical identifier): the date and usage volume for the current day, the current minute and its request count, the start and usage volume of the current period, a cumulative number of requests and the date you first used the coach. This counter contains neither the content of your conversations, nor your training or health data.
  • Subscriptions. Purchases and subscriptions are handled by Apple (App Store): we never receive your payment data. Your subscription status (plan and expiry date) and the transaction identifier provided by Apple are associated with your technical identifier, in order to unlock the corresponding features and to count your coach usage. That transaction identifier comes from your Apple account and stays the same across your devices. The purchase receipt signed by Apple goes through our server to be verified there; it contains no payment data. Apple also notifies our server of each step of your subscription (trial, renewal, cancellation, expiry, refund): we use these notifications to remove access to a refunded subscription and for the subscription statistics described below.
  • Subscription statistics. For each notification from Apple, our server sends:
    • to TelemetryDeck (Germany), an anonymous event: the kind of step (trial started, renewal turned off, first payment after the trial, expiry, refund…), the plan (monthly or yearly) and whether it happens during the trial. It contains no identifier, no price and no country: all these events share the same fixed identifier and are only used for overall counts;
    • to RevenueCat (United States), the notification as signed by Apple: product, dates, transaction identifier, offer (free trial or not), price, currency and storefront country. It contains neither your name, nor your email address, nor your Tekio technical identifier, nor any payment data. RevenueCat turns it into our subscription dashboards (subscribers, trials, conversions, cancellations, revenue).
    This information comes from Apple’s servers, not from your iPhone: the Settings → Anonymous analytics switch does not stop it. It is never used for advertising.
  • Subscription statistics sent by the app. When it opens, the app checks in with RevenueCat and sends it your subscription purchases, with an identifier drawn at random on your iPhone and specific to this installation. It is linked neither to your Tekio account, nor to your name, nor to your email address; it also travels with your purchases at Apple, so that RevenueCat ties each one to this installation. Each request also carries the identifier iOS assigns to our apps on your iPhone, the iPhone model, the iOS and app versions, the language, the storefront country and, like any connection, your IP address. RevenueCat turns this into the number of new installations and how many go on to a trial, then a subscription. The Usage statistics switch in Settings → Anonymous analytics stops these requests: purchases immediately, the rest from the next launch. They are never used for advertising.
  • Diagnostics. Technical logs are generated locally, on your device, for the proper operation of the app. They do not leave it, except in the crash reports described below.
  • Crash reports. When the app crashes, freezes or hits a serious error (a damaged file, for example), a technical report is sent to Sentry, which hosts it in the European Union: the call stack, the screen on display, the iPhone model, the iOS and app versions and a random installation identifier. It contains neither your name, nor your email address, nor your IP address, nor your training, health or conversation data. You can turn these reports off in Settings → Anonymous analytics.
  • Anonymous usage statistics. To know which screens are used, how long people stay on them and at which step onboarding is abandoned, the app sends events to TelemetryDeck (Germany): the screen on display and its duration, key actions (workout started or finished, offer viewed, purchase), the iPhone model, the versions, the language, the accessibility settings and, only once at the end of sign-up, the sex chosen for your body (male or female), to know the share of each. The installation identifier is hashed on your iPhone before anything is sent: statistics stay aggregated and are never linked to your account. They contain neither your other answers, nor your measurements, nor your health or conversation data and are only used to improve Tekio, never for advertising. You can turn them off in Settings → Anonymous analytics.
  • Server logs. At every exchange with the coach, our relay server records, at Google Cloud, the date, your technical identifier, your subscription identifier, the AI model called and the volume consumed. The content of your conversations does not appear in them. These logs serve security, troubleshooting and cost monitoring.

3. Purposes

  • Provide the app and compute your indicators (strength, volume, load, freshness, readiness).
  • Secure access to the AI coach and verify your subscription, via the anonymous technical identifier.
  • Operate the AI coach when you use it.
  • Prevent abuse, enforce usage limits and keep the cost of the service under control.
  • Measure app usage anonymously and fix its crashes and errors.
  • Track our sales overall: installations, trials, subscriptions, conversions and cancellations.
  • Back up your data and restore it on another iPhone, if you create an account.

Tekio is a sport and wellbeing app. It is not a medical device: neither the app nor the AI coach makes a diagnosis or provides medical advice.

4. Legal basis (GDPR)

Processing of the anonymous technical identifier and of training data is based on performance of the contract (providing you with the service). Access to HealthKit and use of the AI coach are based on your consent, which you can withdraw at any time: in the system settings for HealthKit, with Settings → Assistant → Included data → Withdraw permission for every new transfer to the coach, and with the “Share my sleep, weight and measurements” toggle on the same screen for your health data. Usage counting, per-subscription limits and server logs rely on our legitimate interest in preventing abuse, securing the service and keeping its costs under control; you may object by writing to us, on the understanding that the AI coach cannot run without those limits. Refusing sharing with OpenAI disables the coach's answers, but everything else in the app works; refusing HealthKit does not prevent you from entering sleep or weight manually.

The account backup is based on your explicit consent, collected before you sign in, including for the health-related data it contains. You withdraw it by deleting your account (Settings → Account & backup → Delete account): your backup is then erased. Without an account, nothing is backed up on our servers and the app works fully.

Crash reports and anonymous usage statistics rely on our legitimate interest in fixing errors and improving the app. You can object at any time, separately, in Settings → Anonymous analytics: sending stops immediately and the app works fully.

Subscription statistics rely on our legitimate interest in tracking our sales. Those sent by the app stop with the Usage statistics switch in Settings → Anonymous analytics. For those that come from Apple’s notifications, you object by writing to us at the address given in section 9: we then delete your subscription’s data at RevenueCat and no longer send it there.

5. Processors and sharing

We rely on a limited number of providers, solely for the purposes described above:

  • Google — Firebase Authentication: provision of the anonymous technical identifier and, if you create an account, sign-in with Apple, Google or an email address and a password (account identifier, email address, hashed password for email sign-in, name where applicable).
  • Google — Cloud Storage and Firebase Functions (European Union): storage and transfer of your backup, if you have an account.
  • Apple — Sign in with Apple and Google — Google Sign-In: sign-in to your Tekio account with the identity of your choice.
  • Google — Firebase Functions, Firestore and Cloud Logging: hosting of the relay server that forwards your requests to the AI coach, storage of the usage counters and server logs. The relay does not retain the content of your conversations.
  • OpenAI: generation of the AI coach’s answers (only when you use it).
  • Sentry (Functional Software, Inc.) — data hosted in the European Union: receipt and analysis of crash reports.
  • TelemetryDeck GmbH (Germany): anonymous usage statistics and anonymous subscription counts.
  • RevenueCat, Inc. (United States): subscription statistics drawn from Apple’s notifications and from the app.
  • Cloudflare: hosting of exercise images and videos (media.tekiosport.com) and of the legal pages. Your IP address is sent to it when a media file loads, as with any website.
  • Apple — App Store: processing of purchases and subscriptions. Apple acts here as an independent controller, under its own privacy policy.

We do not sell your data, do not rent it and do not use it for advertising purposes. No advertising tracker is embedded in the app.

6. Transfers outside the European Union

Our relay server is deployed in the United States (Google Cloud region us-central1): everything you send to the coach goes through it. Google and Apple appear on the list of organisations certified under the EU-U.S. Data Privacy Framework. OpenAI publishes data processing terms that include the European Commission’s standard contractual clauses for the relevant transfers. A copy of these safeguards can be requested at [email protected].

Your account backup is stored in and transits through the European Union (Google Cloud region europe-west1). Your account’s technical record and the Firebase Authentication sign-in data are processed in the United States. Crash reports (Sentry) and usage statistics (TelemetryDeck) are stored in the European Union.

RevenueCat processes subscription statistics in the United States. Its data processing agreement includes the European Commission’s standard contractual clauses.

7. Retention

  • Local data (workouts, history, profile, coach memory): kept on your device as long as the app is installed, or until you use “Erase my data” or uninstall the app.
  • Anonymous technical identifier: kept as long as the technical session exists on your device. The subscription status attached to it expires on its own.
  • Coach usage counter: on the first request after the day or minute changes, or after the period expires, the relevant values restart from zero for the calculation. Until then, the previous values remain stored. The counting record itself (subscription identifier, cumulative number of requests, date of first use) is kept for as long as the service exists. It contains no training, health or conversation data, and you can ask for it to be deleted at the address given in section 9.
  • Account and backup: kept as long as your account exists. We keep the last ten backups and the last one of each of the past seven days; older versions are deleted automatically. Deleting your account erases all your backups and your sign-in identity once uploads already in progress have finished. A technical deletion marker is kept to prevent an old request from recreating them: technical identifier, deletion dates and technical counters, with no backup, health data, email address or name.
  • Server logs: kept for 30 days at Google Cloud, then deleted automatically.
  • Crash reports: kept for 30 days at Sentry, then deleted automatically.
  • Usage statistics: kept for at most 24 months at TelemetryDeck, attached only to the hashed identifier.
  • Subscription statistics: the anonymous counts, for at most 24 months at TelemetryDeck; at RevenueCat, for as long as we use that service, and deleted on request for your subscription.
  • AI coach requests: processed by the model provider for the time needed to generate the answer, retained for a maximum of 30 days for security purposes, then deleted. Our relay servers do not store the content of your conversations; the coach history lives on your device.

8. Erasing your data

You can erase your data at any time from the app: Settings → Erase my data. This permanently erases all data stored on your device (workouts, history, profile, coach memory, coach conversations, settings). It is irreversible. It does not touch what lives on our servers, namely the usage counter and the logs described above: for those, write to us and we will delete them, as well as the subscription statistics held at RevenueCat. Crash reports, usage statistics and anonymous subscription counts, which are not linked to your identity, expire on their own after the periods above. The anonymous technical identifier may remain (it notably allows your subscription to be preserved). Uninstalling the app also deletes all local data.

If you have an account, Settings → Account & backup → Delete account deletes your account, all your backups and the data on this iPhone, permanently, after confirmation from the server. Without signing in, Settings → Account & backup → Delete my data deletes the guest identity, its usage counter and the data on this iPhone. The technical marker described in section 7 is retained. A Max subscription must be cancelled separately in your Apple subscriptions; counters tied to that subscription are not erased with the account. “Erase my data” erases this iPhone and signs it out of your account: your backup remains restorable until you delete the account. “Sign out” makes a last backup, then erases the data on this iPhone.

9. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. Most can be exercised directly in the app (profile editing, “Erase my data”). For any other request, write to [email protected]. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL).

10. Security

Data stored on the device benefits from iOS file protection (encryption at rest). The anonymous technical identifier is kept in your device’s keychain, which is also encrypted. Your account backup is encrypted in transit and at rest at Google Cloud; it is accessible only to your account, through our functions, and never publicly.

11. Minors

The app is rated 13+ on the App Store and is not intended for children under 13. We do not knowingly collect data concerning a child under 13. The app does not verify the age of its users: if you are a minor, ask your parents for permission before using it.

12. Changes

This policy may be updated. In case of a significant change, we will inform you in the app. The date of the last update appears at the top of this page.

A question about your data? Write to [email protected].