Privacy Policy

Tekio app · Last updated: 20 July 2026

This policy explains what data Tekio (“the app”) processes, for what purpose, and what your rights are. It is written in plain language: Tekio is designed to keep your training data on your device and to collect only what is strictly necessary.

1. Data controller

The data controller is Tekio — Nicolas Brecqueville, established in France. For any question about your data, contact: [email protected].

2. Data processed

• Anonymous technical identifier. The app requires no account creation: no email address, no name, no password. On first use, an anonymous technical identifier is created through Firebase Authentication (Google). It is used only to secure access to the AI coach, verify your subscription and enforce usage limits. It is not associated with any data that could identify you.
• Training data. Workouts, exercises, loads, repetitions, perceived effort (RPE), goals, body measurements and body tracking, nutrition guidance, as well as your profile (weight, age, sex, experience level). This data is stored locally on your device: it is not hosted on our servers. Some of it is sent to the AI coach when you use it (see below).
• Health (HealthKit). If you allow it, the app reads certain health data (sleep and heart rate) to compute your recovery indicators. It is stored locally and, like your training data, may be included in the context sent to the AI coach when you use it. It is never used for advertising or marketing purposes, nor shared with a third party for such purposes, in accordance with Apple’s HealthKit rules.
• Photos. Photos you attach to a workout or to your progress tracking are saved on your device only. They are not transmitted to our servers, to the AI coach, or to any third party.
• AI coach. When you use the coach, the data needed for your request is sent, through our relay server, to the AI model provider (OpenAI) to generate the answer: your question and the conversation messages, your relevant training indicators, and depending on the topic, your body measurements, your nutrition guidance or your recovery indicators derived from HealthKit. Only what is necessary is transmitted, and only when you ask the coach. OpenAI does not use your data to train its models; requests may be retained for a maximum of 30 days for security purposes (abuse detection), then deleted.
• Coach usage counter. To enforce daily usage limits, our server records, in a Firebase Firestore database, a counter attached to your anonymous technical identifier: the current date and the corresponding usage volume. This counter contains neither the content of your conversations, nor your training or health data.
• Subscriptions. Purchases and subscriptions are handled by Apple (App Store): we never receive your payment data. Only your subscription status (plan and expiry date) is associated with your anonymous technical identifier, in order to unlock the corresponding features.
• Diagnostics. Technical logs may be generated locally for the proper operation of the app.

3. Purposes

• Provide the app and compute your indicators (strength, volume, load, freshness, readiness).
• Secure access to the AI coach and verify your subscription, via the anonymous technical identifier.
• Operate the AI coach when you use it.

4. Legal basis (GDPR)

Processing of the anonymous technical identifier and of training data is based on performance of the contract (providing you with the service). Access to HealthKit and use of the AI coach are based on your consent, which you can withdraw at any time (system settings for HealthKit; by not using the coach).

5. Processors and sharing

We rely on a limited number of providers, solely for the purposes described above:

• Google — Firebase Authentication: provision of the anonymous technical identifier (no account, no email address collected).
• Google — Firebase Functions and Firestore: hosting of the relay server that forwards your requests to the AI coach, and storage of the daily usage counter. The relay does not retain the content of your conversations.
• OpenAI: generation of the AI coach’s answers (only when you use it).
• Apple — App Store: processing of purchases and subscriptions. Apple acts here as an independent controller, under its own privacy policy.

We do not sell your data, do not rent it and do not use it for advertising purposes. No third-party tracker is embedded in the app.

6. Transfers outside the European Union

The providers listed above may process certain data in the United States. These transfers are governed by the appropriate safeguards provided for by the GDPR (standard contractual clauses and/or equivalent mechanisms).

7. Retention

• Local data (workouts, history, profile): kept on your device as long as the app is installed, or until you use “Erase my data” or uninstall the app.
• Anonymous technical identifier: kept as long as the technical session exists on your device. It is not associated with any data that could identify you; the subscription status attached to it expires on its own.
• Coach usage counter: kept on a rolling basis, for as long as needed to enforce daily limits. It contains no training, health or conversation data.
• AI coach requests: processed by the model provider for the time needed to generate the answer, retained for a maximum of 30 days for security purposes, then deleted. Our relay servers do not store the content of your conversations; the coach history lives on your device.

8. Erasing your data

You can erase your data at any time from the app: Profile → Settings → Erase my data. This permanently erases all data stored on your device (workouts, history, profile, coach conversations, settings). It is irreversible. The anonymous technical identifier may remain (it notably allows your subscription to be preserved), but it is not associated with any data that could identify you. Uninstalling the app also deletes all local data.

9. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability. Most can be exercised directly in the app (profile editing, “Erase my data”). For any other request, write to [email protected]. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL).

10. Security

Data stored on the device benefits from iOS file protection (encryption at rest). The anonymous technical identifier is kept in your device’s keychain, which is also encrypted.

11. Minors

The app is not intended for people under 16. We do not knowingly collect data concerning minors under 16.

12. Changes

This policy may be updated. In case of a significant change, we will inform you in the app. The date of the last update appears at the top of this page.

---

A question about your data? Write to [email protected].