Privacy policy

Last updated: 1 March 2025

This privacy policy explains what personal data tendo collects, why, and what rights you have. tendo is an AI-powered personal athletic coach accessible via Telegram and Messenger.

1. Data controller

tendo is operated as a personal project. For privacy-related requests, contact us at: hello@tendo.coach

2. What data we collect

Category	Examples
Identity	First name you provide during onboarding
Profile & goals	Sport, fitness level, goals, training availability, target event date
Training plans	Personalised weekly plans generated for you
Conversation history	Messages exchanged with the tendo coach
Strava activity data	Distance, pace, duration, heart rate, timestamps of workouts you have completed (fetched via Strava's API after you authorise access)
Platform identifiers	Telegram user ID or Messenger PSID — used solely to route messages back to you

We do not collect payment information, precise location data, or any sensitive personal data (health conditions, etc.).

3. Why we collect it (purposes & legal basis)

Purpose	Legal basis (GDPR)
Providing personalised coaching, plans, and session feedback	Performance of a contract — you asked us to coach you
Sending reminders and proactive session feedback via the chat	Performance of a contract
Improving tendo's coaching quality	Legitimate interest (we review aggregate usage to improve prompts and features)

4. Third-party processors

Your data is processed by the following third parties:

Anthropic — Conversation messages are sent to Claude (Anthropic's AI) to generate coaching responses. Anthropic processes messages on our behalf. Anthropic privacy policy →
Supabase — Our database host. All user profiles, plans, and conversation history are stored on Supabase's infrastructure. Supabase privacy policy →
Strava — Activity data is fetched via Strava's API after you explicitly authorise access using OAuth. Strava privacy policy →
Meta (Facebook / Messenger) — If you use tendo through Messenger, Meta processes messages on their platform. Meta privacy policy →
Telegram — If you use tendo through Telegram, Telegram processes messages on their platform. Telegram privacy policy →

We do not sell your data to any third party.

5. Data retention

Your data is retained for as long as you have an active account with tendo. If you request deletion, all your personal data (profile, plans, conversation history, Strava tokens) will be permanently removed within 30 days.

6. Your rights (GDPR)

If you are located in the EU/EEA or elsewhere covered by GDPR-equivalent law, you have the following rights:

Access — request a copy of the data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — request full deletion of your data
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at hello@tendo.coach or send the bot the command /delete to request erasure directly in the chat.

7. How to delete your account

Send /delete to the tendo bot on Telegram or Messenger, or email hello@tendo.coach. We will confirm deletion within 30 days.

8. Cookies and tracking

The tendo.coach website is a static page and uses no cookies, no analytics tracking, and no advertising pixels. No personal data is collected by visiting this website.

9. Data transfers outside the EU

Some of our processors (Anthropic, Supabase, Strava) are based in the United States. Data transferred to these processors is protected by standard contractual clauses (SCCs) or the EU-US Data Privacy Framework where applicable.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of tendo after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or your data? Email us at hello@tendo.coach.