Privacy
Policy
Your privacy matters to us. In this policy we explain how we collect, use and protect your personal data in the Tsemp service.
1. Data controller
The controller responsible for processing your personal data is:
Tsemppi Fitness Oy
- Business ID: 3377898-6
- Address: Kolmas Linja 30 B, Helsinki, Finland
- Email: info@tsemppiapp.fi
2. What data we collect
We collect the following data in order to provide the service:
Basic details
Name, email, date of birth, gender
Account details
Username, password (encrypted), profile picture
Training data
Training history, performances, weights, repetitions, progress data
Body data
Height, weight, limitations (optional)
Usage data
How the app is used, device information, IP address
Note: We do not collect sensitive health data. Training and body data are optional, and you decide yourself which data you save.
3. Artificial intelligence and data processing
Tsemp uses artificial intelligence to create personalised training programs. Here we explain in detail how the AI works:
What data the AI uses
- •Goal: Muscle growth, strength, fat loss or performance
- •Level: Beginner, intermediate or advanced
- •Training frequency: How many times per week you want to train
- •Session length: Target time per workout
- •Equipment: Gym, basic equipment or home training
- •Limitations: Any injuries or restrictions (knee, shoulder, back, hip)
Third-party AI service
To generate training programs we use OpenAI's GPT-4o-mini model. When you create a new training program:
- •We send OpenAI only the onboarding details mentioned above (goal, level, frequency, length, equipment, limitations)
- •We do not send personal identifiers such as your name, email or username
- •OpenAI does not use the data to train its models when accessed via the API
- •The data is processed in accordance with the EU General Data Protection Regulation
Data storage
- •All user data is stored on our own servers within the EU
- •Generated training programs are saved to your account, not to OpenAI
- •Training history and performances remain only in our own database
Limitations of the AI: The AI creates a training program based on the information you provide and our existing exercise library. The AI does not replace advice from a professional, and we recommend consulting a doctor before starting a new training program, especially if you have any health-related limitations.
4. Strength level and muscle points
Tsemp calculates metrics that describe your progress based on your training data:
Strength level metric
The strength level is based on standardised powerlifting formulas and takes into account:
- •Lifted weights: Maximum performances in different exercises
- •Body weight: Relative strength in proportion to body weight
- •Gender: Comparison with gender-specific averages
Muscle map and progress
The muscle map visualises the load of your workouts:
- •Intensity: Calculated from sets, repetitions and weight
- •Target muscles: Each exercise targets specific muscle groups as defined in our exercise library
- •PR tracking: Personal records are saved automatically
Note: These metrics are indicative and intended to motivate and track progress. They are not medical assessments.
5. App permissions
Tsemp may request the following permissions on your device. Each permission is optional and you can manage them in your device settings:
Camera
OptionalWe use the camera to take a profile picture and to save training videos and progress photos to your profile.
Notifications
OptionalWe use notifications to remind you about workouts, inform you about community activity (likes, comments, followers) and replies to support messages.
HealthKit (iOS)
OptionalThe HealthKit integration lets you sync training data with Apple Health, so you can follow all your activity in one place.
Note: The app works fully without these permissions. We only ask for permission when you use the relevant feature for the first time.
6. What we use your data for
We use your data for the following purposes:
- ✓Creating personalised training programs with the help of AI
- ✓Tracking and visualising your progress as a muscle map
- ✓Managing your user account and login
- ✓Providing community features (if you share your performances)
- ✓Developing and improving the service
- ✓Customer communication and support
7. Data security
We protect your data carefully:
Encryption
All data is encrypted both in transit (TLS) and at rest. Passwords are hashed with the bcrypt algorithm.
Secure infrastructure
We use data centres located within the EU (MongoDB Atlas)
Access control
Authentication based on JWT tokens, 90-day session validity
Regular audits
We review our security practices regularly
8. Sharing of data
We do not sell your data
Your personal data is never sold to third parties for marketing purposes.
We share data only with:
- •OpenAI (GPT-4o-mini): Generation of training programs - only onboarding details, no personal data
- •Service providers: Cloud services and infrastructure (MongoDB Atlas, Sentry error monitoring)
- •Community features: To other users only if you choose to share your performances
- •Legal obligations: To authorities only when required by law
9. Cookies and analytics
We use cookies to ensure the service works:
Essential cookies
Login, session management - these cannot be disabled
Analytics cookies
Help us understand how the app is used
Performance cookies
Improve the speed and function of the app
You can manage your cookie settings in the app settings or via your browser.
10. Data retention period
- 👤User data: We keep it for as long as your account is active
- 💪Training data: We keep it for the lifetime of the account, so you can follow your progress
- 🗑️After account deletion: Data is deleted within 30 days
- 📊Anonymised statistics: We may keep anonymised data to develop the service
- ⏰Session expiry: After 90 days of inactivity you need to log in again
11. Your rights (GDPR)
You have the following rights regarding your personal data:
Right to access your data
You can request a copy of all data collected about you
Right to rectification
You can correct inaccurate or incomplete data
Right to erasure
You can delete your account in the app settings ("right to be forgotten")
Right to restrict processing
You can restrict the processing of your data in certain situations
Right to data portability
You can receive your data in a machine-readable format
Right to object
You can object to your data being processed for marketing
Exercise your rights by sending an email to info@tsemppiapp.fi. We respond to your request within 30 days.
12. Underage users
Tsemp is primarily intended for adult users. If you are under 16 years old:
- •You need a guardian’s consent to use the service
- •Your guardian has the right to review and delete the minor’s data
- •We do not knowingly collect data on children under 13 years of age
13. Changes to this privacy policy
We may update this privacy policy from time to time. We will notify you of significant changes:
- 📱In the app with a notification
- 📧By email
- 🌐On our website
We recommend reviewing this policy regularly. By continuing to use the service after changes, you accept the updated privacy policy.
14. Right to lodge a complaint
If you believe that our processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. As the data controller is established in Finland, the lead supervisory authority is the Office of the Data Protection Ombudsman (Finland). Under the GDPR you may also lodge a complaint with the supervisory authority in your country of residence; if you are in Denmark, this is the Danish Data Protection Agency (Datatilsynet):
Office of the Data Protection Ombudsman (Finland)
- Visiting address: Lintulahdenkuja 4, 00530 Helsinki, Finland
- Postal address: P.O. Box 800, 00531 Helsinki, Finland
- Email: tietosuoja(at)om.fi
- Switchboard: +358 29 566 6700
- Denmark: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby – dt@datatilsynet.dk
15. Contact us
If you have questions about privacy or want to exercise your rights: