Privacy Policy — Tempelo
Last updated: 8 April 2026
1. Who is responsible?
Tempelo is provided by:
VanSpeykWheelsCity: Castricum
Chamber of Commerce (KvK): 81344406
Contact:
hello@tempelo.app 2. What data do we process?
Tempelo is designed to process as little personal data as possible. Depending on how you use the service, we may process the following data:
• Account data (optional): if you sign in, we process your email address to send a login link, plus technical session and authentication data needed to keep you signed in and make the login flow work securely.
• Personalized clothing advice (optional, signed-in users only): if you use personalized clothing advice, we process data needed to make this feature work, such as saved clothing advice, chosen ride time and duration, feedback on earlier clothing advice, and a limited profile that helps tune future clothing advice more closely to what works for you.
• Ride Commute (optional, signed-in users only): if you use Ride Commute, we process data needed to make this feature work, such as saved places, configured time slots, feedback on commute advice, and send- or alert-related records required to provide commute information at the right moment.
• Strava connection (optional): if you connect Strava, we process data required to keep the connection working, such as athleteId, access token, refresh token, scope, and token expiration.
• RideWithGPS connection (optional): if you connect RideWithGPS, we process data required to keep the connection working, such as access token, refresh token, token type, scope, and token expiration.
• Location data (coordinates): only to fetch and display weather data for your selected location or route.
• Route data (GPX or route points): if you upload a GPX, import a route, or share a route, we process the route to calculate weather along the route. For shared routes, the original GPX may be stored temporarily so the recipient can download it.
• Technical data: IP address, browser or device information, timestamps, and error or performance data may appear in technical logs from our infrastructure.
Strava and RideWithGPS: routes only
Tempelo uses the Strava and RideWithGPS APIs only for routes. We do not fetch activities or segments through these connections for Tempelo’s normal operation.
Shared Ride Route links (shareId)
For Ride Route, sharing uses a shareId in the URL. When such a link is opened, Tempelo loads the route, such as simplified route points and, if available, the original GPX, to show the map and forecast.
For shared routes, we may also store limited display metadata, such as file name, source, and elevation gain, so the recipient can see the same route information as in the regular flow.
Functional browser storage
To make the service easier to use, Tempelo may store your last used location, recently chosen locations, and a few preferences locally in your browser, for example via localStorage.
• Location name or display name
• Coordinates (lat/lon)
• Saved time
• Preference settings such as language, ride intensity, and some other functional preferences
This storage remains on your device or in your browser. You can remove it through your browser settings, for example by clearing site data.
GPS or geolocation (optional)
When you click the GPS icon, your browser asks for permission to access your location. With your consent, Tempelo can use your location to show the weather for your position and optionally update your last used location. You can withdraw permission at any time through your browser settings.
3. What do we use this data for?
• To deliver the service, such as linking weather forecasts to your location or route.
• To process routes for Ride Route, such as calculating route points and showing weather along the route.
• To show and import Strava routes, only if you connect Strava.
• To show and import RideWithGPS routes, only if you connect RideWithGPS.
• To enable Ride Commute, such as processing commute places, time slots, and related advice or feedback data.
• To make shared Ride Route links work, such as temporarily making routes available via shareId and enabling GPX download where applicable.
• To enable personalized clothing advice, such as linking feedback to previously used clothing advice and better tuning future clothing advice.
• To make the service easier to use, such as showing suggestions based on last used or recent locations and locally stored preferences.
• To keep accounts, sessions, and login links working securely.
• For security, stability, and troubleshooting.
• For aggregated insights to improve Tempelo.
4. Legal bases
• Performance of a contract: for the functionality you actively use or request.
• Legitimate interest: for security, technical operation, stability, troubleshooting, and improvement of Tempelo.
• Consent: where required, for example for GPS location via your browser prompt.
5. Do we share data with third parties?
Yes, but only with parties required to operate Tempelo.
• Vercel: hosting infrastructure to make the app available.
• Supabase: database and infrastructure services for accounts, sessions, and app-related data.
• Resend: for sending login links, alerts, and other functional emails.
• Strava: if you connect Strava, Tempelo fetches routes via the Strava API.
• RideWithGPS: if you connect RideWithGPS, Tempelo fetches routes via the RideWithGPS API.
• Cloudflare Web Analytics: for aggregated usage statistics and performance insights.
• Open-Meteo: for retrieving weather information based on coordinates.
• TransIP: for domain registration and DNS.
If the code or infrastructure also uses a separate geocoding provider, that provider should also be added to this privacy policy.
6. Cookies and browser storage
No marketing or tracking cookies
Tempelo does not use marketing or tracking cookies.
Functional cookies
Tempelo uses functional cookies required for the site to operate, such as tempelo_locale for your language choice and auth or session cookies to keep you signed in.
Functional storage
Tempelo may also use functional browser storage, such as localStorage, to remember preferences and last used or recent locations.
Analytics
We use Cloudflare Web Analytics for aggregated statistics and performance insights.
7. Retention periods
• Account data: as long as you use an account or as long as needed for security and administration.
• Technical login and verification data: as long as needed to make the login flow and security work, according to the functional retention of the authentication solution used.
• Personalized clothing advice data: as long as your account is active or as long as this data is needed to keep the feature working, unless you remove it through the reset option or delete your account.
• Ride Commute data: as long as your account is active or as long as this data is needed to keep Ride Commute working, unless you remove it where that option is available or delete your account.
• Strava tokens and connection: as long as you keep the connection active; on disconnect we delete the connection and attempt to revoke the token at Strava.
• RideWithGPS tokens and connection: as long as you keep the connection active; on disconnect we delete the connection.
• Location coordinates: only as long as needed to fetch or display weather data for the session or request.
• Route data for shared routes: temporary, with a current retention of 14 days.
• Browser storage for last used or recent locations and preferences: remains local until you remove it through your browser settings.
• Technical logs: according to providers’ retention periods and as far as needed for security, operation, and troubleshooting.
In addition, you can use the account deletion option to permanently remove your account and linked stored data.
8. Deleting your account and data
If you are signed in, you can permanently delete your account and all associated stored data yourself from the Account page.
When you delete your account, we generally also remove data linked to that account, such as account data, session or auth data, personalized clothing advice data, Strava connections, RideWithGPS connections, and Ride Commute data linked to your account.
Warning: this is a permanent action and cannot be undone.
9. Your rights
Where applicable, you have rights such as access, rectification, erasure, restriction of processing, objection, and data portability. You can also withdraw consent for processing based on consent, such as GPS location via your browser settings.
For questions or requests, email
hello@tempelo.app.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Minors
Tempelo is not specifically directed at children, but it may be used by a broad audience, including minor athletes. If you have questions about privacy and use by minors, please contact us.
11. International transfers
Some of our suppliers may process data outside the European Economic Area. Where that is the case, we aim to use appropriate safeguards required under privacy law, such as contractual measures or other valid transfer mechanisms.
12. Changes
We may update this privacy policy. The latest version is always available on this page.