← tomo

Privacy Policy

Effective: 1 May 2026 · Last updated: 1 May 2026

1. Who we are

AI TOMO Inc. (“tomo”, “we”, “our”) operates the tomo mobile application and the website at my-tomo.ai. We can be reached at developer@my-tomo.ai.

2. Data we collect

  • Account data — name, email address, date of birth, sport, and club.
  • Health & fitness data — heart rate variability (HRV), sleep duration and quality, resting heart rate, workout load, hydration, and soreness — sourced from Apple HealthKit, WHOOP, or your manual check-in.
  • Academic data — school schedule and exam dates you choose to enter, used solely to adapt your training plan.
  • Usage data — app interactions, session logs, and crash reports used to improve the product.
  • Device data — device model, OS version, and a random device identifier for analytics and push notifications.

3. How we use your data

  • Generate your daily readiness score and personalised training plan.
  • Power the tomo AI companion — your data is sent to our AI service to produce responses. We do not use your health data to train third-party AI models.
  • Sync with connected services (Apple Health, WHOOP) that you explicitly authorise.
  • Send push notifications about your plan, recovery, and weekly summaries.
  • Improve and debug the app using anonymised, aggregated usage data.

4. Health data

Health data read from Apple HealthKit is used exclusively to provide the tomo service to you. We do not share HealthKit data with advertisers, data brokers, or any third party for marketing purposes. We do not sell health data under any circumstances.

5. Third-party services

  • Supabase — database and authentication hosting (EU region).
  • Anthropic — AI language model powering the tomo companion chat. Prompts include your health summary; no raw identifiers are shared.
  • WHOOP — optional wearable integration, authorised by you via OAuth.
  • Apple HealthKit — optional, authorised by you via iOS permissions.

6. Users under 13

Tomo is intended for athletes aged 11 and older. For users under 13, we require verifiable parental consent before account creation. We do not knowingly collect data from children under 13 without parental consent. If you believe a child under 13 has registered without consent, contact us at developer@my-tomo.ai and we will delete the account promptly.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal and health data is permanently deleted within 30 days. Anonymised, aggregated data may be retained for product improvement.

8. Your rights

You may at any time:

  • Request a copy of all data we hold about you.
  • Correct inaccurate data.
  • Delete your account and all associated data.
  • Revoke HealthKit or WHOOP access via your device or WHOOP app settings.
  • Opt out of non-essential push notifications in iOS Settings.

To exercise any right, email developer@my-tomo.ai. We respond within 30 days.

9. Medical disclaimer

Tomo is a wellness and training companion, not a medical device. The readiness scores, training suggestions, and AI chat responses are for informational and motivational purposes only and do not constitute medical advice. Always consult a qualified healthcare professional for medical concerns.

10. Changes to this policy

We will notify you of material changes via the app or email at least 14 days before they take effect. Continued use of tomo after that date constitutes acceptance.

11. Contact

Questions about this policy: developer@my-tomo.ai