Privacy

Last updated 4 October 2026

Teselo is a small personal project, run by one person in Barcelona, to keep track of the fitness classes you take. This page explains what it stores about you, where, why, and how to take it with you or delete it.

What we store

• Your email address, so you can sign in. There are no passwords.
• The classes you log: date, activity, studio, instructor, duration and any notes you write.
• Instructors you add. Only you can see them.
• Studios you add. These go into a shared list so everyone can pick them. Other people see the studio's name and city, never who added it.
• Basic technical logs kept by our hosting providers, such as your IP address and browser, to keep the service running and secure. They expire on their own after a few days.

We don't track your location, show ads, sell or share your data, or use analytics or tracking cookies.

Why

Only to run Teselo for you: signing you in and showing you your own history and stats. Under the GDPR, the legal basis is providing the service you signed up for (article 6.1.b), and for the security logs, our legitimate interest in keeping the service safe (article 6.1.f).

Where it's kept

• Supabase stores the database and handles sign-in. Your data is stored in Ireland, in the EU.
• Resend delivers the sign-in emails, from Ireland. It sees your email address and the email it sends you.
• Cloudflare runs a quick check on the sign-in page that you're a person and not a bot (Turnstile). It looks at your IP address and browser, sets no tracking cookies and isn't used for ads. Cloudflare also forwards emails sent to our contact address.
• Vercel runs the app. The servers that read your data are in Dublin, Ireland. Pages travel through Vercel's global network on their way to you.

All four companies are based in the US. They work for us under data processing agreements that include the EU's standard protections for any data that leaves the EU.

Who can see it

Only you. Access rules in the database stop anyone else using the app from seeing your classes, notes or instructors. The person running Teselo can technically reach the database to maintain it, but won't look at your data unless you ask for help with a problem.

Cookies

One essential cookie keeps you signed in. That's all, so there's no cookie banner.

How long we keep it

Until you delete it. Deleting your account removes your data straight away. Any copies in our providers' backups and logs expire on their own shortly after.

Your rights

• Download your data at any time from Account, as a JSON file you can take elsewhere.
• Correct it by editing any class in History.
• Delete your account and everything in it from Account. It happens immediately.
• You can also ask us to restrict or stop using your data, and you can complain to the Spanish data protection authority, AEPD.

Contact

Questions or requests: privacy@teselo.app. Teselo is for people aged 14 and over.

If anything here changes, we'll update this page and its date.