Privacy Policy

This Privacy Policy explains how Tempea processes personal data, what information remains on your device, what information may be synchronized with our cloud infrastructure, why we process this information, and what rights and choices you have.

Tempea is currently available only for Apple iOS devices and is distributed through the Apple App Store.

Section 01Controller and Contact

Tempea is operated by Anton Naumov, who is the controller responsible for the processing described in this Privacy Policy.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at the email address above.

Section 02Information We Process

The information processed by Tempea depends on the features you choose to use and the information you enter into the application.

Information that may be synchronized with Tempea's cloud infrastructure includes:

• Profile information, such as your name, date of birth, gender, goals, application preferences such as your default training time and reminder settings, and whether optional features such as the Cycle feature are switched on.
• Planner information, such as categories, tasks, schedules, task occurrences, comments and other text you enter.
• Training information, such as workout programs, schedules, sessions, exercises, sets, body weight, training notes and the time zone in which a session was recorded.
• Habit information, such as habits you create, your completion history and related progress information.
• Technical synchronization information, such as account and record identifiers, versions, sequence information, timestamps and other metadata required to operate synchronization reliably.

You decide what information you enter into Tempea.

Section 03Cycle Information

Tempea includes an optional Cycle feature that may contain information about your menstrual cycle, including period days, flow, pain and mood.

Cycle day logs are excluded from cloud synchronization.

Whether the Cycle feature is switched on or off is part of your profile settings and is synchronized as described in section 2. The cycle day logs themselves are not synchronized.

If Tempea introduces cloud synchronization for cycle day logs in the future, we will update our privacy practices and provide any additional information and controls required before such processing is enabled.

Section 04Cloud Synchronization

Tempea uses cloud infrastructure to synchronize supported information.

When synchronization is introduced for information that was previously stored locally, existing supported information already stored on your device may also be uploaded. Synchronization is therefore not necessarily limited to information created after an application update.

Cycle day logs are excluded from this process.

We use Supabase to provide database, authentication and related cloud infrastructure. Tempea's primary Supabase database is hosted in Ireland, European Union.

Supabase processes relevant information on our behalf as an infrastructure provider.

Section 05Tempea Account and Identifier

Tempea may automatically create an account identifier to provide cloud synchronization.

You do not need to provide an email address or password for this account. Synchronized information is associated with this generated identifier so that Tempea can maintain the correct cloud data for the application account.

Deleting Tempea from your device does not by itself delete information that has already been synchronized with Tempea's cloud infrastructure.

To delete your cloud account and associated information, use the data deletion functionality available in Tempea. You may also contact tempeateam@gmail.com if you need assistance with a privacy-related request.

Section 06Information That Remains on Your Device

Some information used by Tempea remains locally on your device and is not transmitted to Tempea's cloud infrastructure.

This includes:

• Cycle day logs;
• certain locally maintained application state and progress information;
• certain interface and application preferences;
• other information required only for local functionality.

Information that remains exclusively on your device is not available to us through Tempea's cloud infrastructure.

Section 07How We Use Information

We process synchronized information to:

• provide the Planner, Training, habit-tracking and profile functionality you use;
• preserve and synchronize supported information;
• maintain synchronization integrity and consistency;
• operate, secure and maintain the reliability of Tempea's cloud functionality;
• diagnose and protect against technical failures or misuse where necessary.

We do not sell your personal data.

We do not use your personal data for third-party advertising.

Section 08Legal Bases

Where the General Data Protection Regulation (GDPR) applies, personal data is processed only where an applicable legal basis exists.

Information necessary to provide Tempea's requested functionality and supported synchronization is processed under Article 6(1)(b) GDPR, where processing is necessary to provide the service requested by you.

Technical information necessary for the security, integrity and reliable operation of Tempea's infrastructure may be processed on the basis of our legitimate interests under Article 6(1)(f) GDPR. Those interests consist of operating a secure and reliable service and protecting the integrity of user information and our infrastructure.

The cloud processing described in this Privacy Policy does not rely on consent as its legal basis.

Where a future feature requires consent for particular processing, we will request that consent separately before the relevant processing begins.

Section 09Analytics, Advertising and Tracking

Tempea does not use third-party analytics, advertising, attribution or tracking SDKs.

We do not use information entered into Tempea to track you across applications or websites owned by other companies.

We do not sell personal data to advertisers or data brokers.

Section 10Notifications

Tempea reminders are scheduled locally on your device and delivered through the operating system's local notification functionality.

Tempea does not request or store push-notification tokens for these reminders.

You can manage notification permissions through your device settings and applicable settings within Tempea.

Section 11Technical and Synchronization Information

Tempea maintains limited technical records necessary to operate cloud synchronization.

These records may contain:

• account identifiers;
• entity and record identifiers;
• synchronization versions and sequence information;
• timestamps;
• operation fingerprints and other synchronization metadata.

These records are used to maintain synchronization integrity, reliability and consistency.

Our infrastructure providers may also process technical information generated when your device communicates with their services, such as network and request information, where necessary to provide, secure and operate their infrastructure.

Section 12Deleting Individual Information

When synchronized information is deleted within Tempea, technical information about the deletion may remain in the synchronization system. This information is used to propagate the deletion correctly across synchronized data and to maintain synchronization integrity.

Technical synchronization information associated with the account is deleted when the Tempea cloud account and its associated server data are deleted.

Section 13Account Deletion and Retention

Tempea provides functionality for deleting your Tempea cloud account and associated user data.

When you use this functionality, the Tempea account and user-associated records held in Tempea's active cloud database are deleted, including associated technical synchronization records.

Tempea user data stored locally by the application on that device is also removed as part of the applicable deletion process.

Deleting Tempea from your device without using the account deletion functionality does not automatically delete information that has previously been synchronized to the cloud.

Information that exists exclusively on your device remains there until it is removed through applicable Tempea functionality, application data is removed, or the application itself is removed.

A small number of device display settings, such as your selected language, theme and time format, remain on the device after account deletion. These settings do not contain personal information about you.

Infrastructure providers may retain limited technical or operational records where necessary to operate their services or comply with applicable legal, security or technical requirements.

Section 14Service Providers

We use Supabase to provide the cloud database, authentication and related infrastructure required by Tempea.

Supabase processes relevant information on our behalf and may engage authorized subprocessors in accordance with its applicable data-processing terms.

We may also disclose information where required by applicable law or a legally binding request from a competent authority.

We do not sell or rent personal data.

Section 15International Processing

Tempea's primary Supabase database is hosted in Ireland within the European Union.

Our infrastructure provider or its authorized subprocessors may process limited information in other locations where necessary to provide their services. Where applicable, such processing is subject to safeguards required by applicable data-protection law.

Section 16Security

We take technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss and misuse.

Communication between Tempea and its cloud infrastructure uses encrypted network connections.

User-associated cloud records are associated with account identifiers, and server operations use the identity of the requesting account when processing user data.

We also rely on security protections provided by the operating system and our infrastructure providers.

No electronic transmission or storage system can guarantee absolute security.

Section 17Your Rights

Where the GDPR applies, depending on the circumstances you may have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive eligible personal data in a portable format;
• withdraw consent where particular processing is based on consent, without affecting processing that occurred lawfully before withdrawal;
• lodge a complaint with a competent data protection authority.

You can submit a privacy request by contacting tempeateam@gmail.com.

We will handle requests within the time limits required by applicable data-protection law. We may request information reasonably necessary to verify that a request relates to the correct Tempea account.

If you are in Austria, you may also lodge a complaint with the Österreichische Datenschutzbehörde (Austrian Data Protection Authority).

Section 18Children

Tempea is not intended for children under 14 years of age.

If we become aware that personal data has been processed from a child in circumstances where such processing is not permitted under applicable law, we will take steps to delete the relevant personal data.

Section 19Changes to This Privacy Policy

We may update this Privacy Policy when Tempea's functionality, data-processing practices, service providers or applicable legal requirements change.

The Last updated date at the top of this Privacy Policy identifies the current version.

Where a change requires additional notice or consent under applicable law, we will provide that notice or obtain the required consent before beginning the relevant new processing.

Section 20Contact

For questions about privacy, this Privacy Policy or the processing of personal data by Tempea, contact: