Privacy Policy
App: Tsuyo, for iPhone and Android
Version: 1.0 · Effective: 2 November 2026
In short
- Tsuyo is an app for training your fingers on a hangboard: workouts, timer, plan, tests and progress. It is developed by Francesca Barchietto, an individual based in Italy. She is the controller of your data.
- Your profile, workouts, sessions and tests are stored on Google Firebase, in Italy (Milan), so that you don't lose them and find them again on another phone.
- The email and password you sign in with are handled by Firebase Authentication, in the United States.
- Photos of your hangboard stay on your phone. Only the position of the holds goes to the server.
- If you generate a workout with AI (Tsuyo Pro), we send Gemini, Google's model, your request and, if "Use profile and history" is on, also your age, weight, level, tests and recent sessions. Never your name or email. Google does not use this data to train its models (section 3.5).
- No ads, no tracking, no analytics or crash reporting tools. We don't sell your data.
- You can export or delete your account data from the app, whenever you want. Section 10 explains what remains.
1. Who is responsible for your data
The data controller is:
Francesca Barchietto, an individual
Strada Garella 78, 13900 Biella (BI), Italy
Email: info@tsuyo.app
No data protection officer (DPO) has been appointed. For any privacy question, write to the address above.
In this policy "we" means Francesca Barchietto, who develops the app and is responsible for it.
2. What this policy covers
It covers:
- the Tsuyo app for iPhone and Android, including test versions (TestFlight and Google Play testing);
- the website tsuyo.app;
- the emails you send us.
It does not cover the Apple and Google services you use with the app: App Store, Google Play, TestFlight, your phone's backups. Those are covered by Apple's and Google's privacy policies.
3. What data we process
3.1 Your account
To use Tsuyo you create an account with email and password.
| Data | When |
|---|---|
| The account ID | Always |
| Your email address | Always. We send you an email to confirm it and, if you ask, a link to reset your password. |
| Your password in protected form (a hash, which no one can read, not even us) | Always |
| Creation and last sign-in dates; the IP address and technical information about the app and device making the request (user agent) | Always: Firebase Authentication records them when you sign in |
We use your email only for your account: to sign you in, confirm the address and reset your password. Never for newsletters or ads.
3.2 Your profile
We ask for it the first time you open the app, and you change it from Profile:
- the name we greet you with;
- your year of birth, to check that you are at least 18 (section 11) and to suggest loads suited to your age;
- your weight and height, if you enter them: weight is used to work out load relative to your body (you can skip it);
- how long you have used a hangboard (your level), the hardest grade you climb and how many times a week you want to train;
- the hangboards you use and your equipment: the most weight you can add, your weight increments, whether you have a pulley;
- your weight unit (kilograms or pounds) and the dates the profile was created and changed.
3.3 Workouts, sessions and tests
- The workouts you create or save: name, notes, focus, hangboard, blocks (sets, reps, times, holds, loads).
- Your plan and programs: which workouts you planned and on which day, multi-week programs and the test they start from.
- The sessions you do: date, start and end time, duration, time under tension, each hang (set, rep, hand, planned and actual time, load), how your fingers feel before you start (1 to 5, you can skip it), how hard it was at the end (1 to 10) and the notes you write.
- Strength tests (max hang): date, duration, edge, grip type, hand, added load, your weight that day and notes.
- The hangboards you draw or trace from a photo: name, grid and position of the holds. The photo never leaves your phone (section 4).
Some of this data (your weight, how your fingers feel, session notes) may say something about your body and your health. We don't ask you for medical information: in notes, only write what you need for training.
3.4 Tsuyo Pro and purchases
If you subscribe to Tsuyo Pro, you pay through the App Store or Google Play: we never receive your card details.
To know whether you have Pro we use RevenueCat, a service that receives the status of your purchases from the stores. RevenueCat knows your Tsuyo account ID (not your email or name), your purchases, renewals and free trials, the store country and some technical data about the app and device, such as the version and the IP address of the request.
From this data RevenueCat also shows us aggregate statistics about subscriptions, for example how many are active and how many renew. We look at them to understand how Tsuyo Pro is doing, never for advertising.
3.5 Workouts generated with AI
With Tsuyo Pro you can ask AI for a workout, from the Generate with AI screen. To answer, the app sends Gemini, Google's artificial intelligence model, through Firebase AI Logic:
- always: your goal, duration, intensity, how your fingers feel, the hangboard, the language, your equipment and what you write in "Anything else to know";
- only if "Use profile and history" is on (it is on at first, and you can turn it off each time): your age (worked out from your year of birth), weight, level, grade, weekly goal, your max hang test results, your hangboards with their holds and the names you gave them, and your sessions from the last 42 days (at most 20: date, workout name, focus, time under tension, how hard it was).
We never send your name or email. If you say your fingers hurt, the app does not call the AI and suggests rest.
We use Gemini on a paid plan: under Google's terms, Google does not use prompts and responses to improve its products or train its models. It keeps them for a limited time, only to detect and stop abuse.
App check (App Check). So that only the real app can use the AI, on the first request the app asks Apple (App Attest) or Google (Play Integrity) to confirm it is the original app, on a device that has not been tampered with. This produces a technical token, which Firebase checks. It contains none of your training data.
3.6 Technical data, crashes and security
- IP address. Every time the app talks to the servers, the servers see the IP address of your connection. Firebase Authentication keeps it in its logs for a few weeks. We don't use it to locate you or for anything else.
- Statistics and crashes, through Apple and Google. We don't use Google Analytics or any other analytics or crash reporting tool. If on your phone you chose to share analytics with developers, Apple (in App Store Connect) and Google (in Google Play Console) show us aggregate statistics and crash reports for the app, without your name. Apple and Google process them under their own privacy policies; we only use them to fix bugs.
3.7 Test versions
If you try the app with TestFlight (iPhone) or Google Play testing (Android), Apple and Google show us the status of your invitation, your device model, system version, how often you open the app, crashes and the feedback you send, with any screenshots. If we invite you by email, we are the ones who enter your address in Apple's or Google's services. Apple and Google process this data as independent controllers, under their own privacy policies.
3.8 When you write to us
If you write to info@tsuyo.app we process your email address, your message and any attachments.
3.9 What we don't collect
- your location, your contacts, the microphone (the app doesn't use it);
- data from the Health app or Health Connect;
- photos: photos of your hangboard stay on your phone;
- advertising identifiers. The app does not track you across other companies' apps and websites;
- usage statistics: no Google Analytics or any other analytics or advertising tool (we only see what Apple and Google show us, section 3.6);
- payment details (cards, accounts): Apple and Google handle them.
3.10 The website
The website tsuyo.app uses no cookies, analytics or third-party tools. If you pick a colour on the page, the choice stays only in your browser. Like any website, the service hosting it (Firebase Hosting, by Google) receives the IP address and technical information about the request (browser, page, time) to show you the pages and protect the site from abuse.
4. What stays only on your phone
- Photos of your hangboard, if you take or choose a photo to trace the holds. Only the position of the holds goes to the server: on another phone the hangboard appears as a drawing.
- App preferences: appearance, colour, language, timer settings, reminder time, the quick timers you save.
- The session in progress, until you finish or abandon it.
- Reminders and timer alerts: they are notifications scheduled on your phone. No notifications from our servers.
- The timer's voice, using your phone's voices.
- Widgets and the lock screen timer (iPhone "Live Activities"). They show the name of today's and the next workout, the duration, the days of the week you trained and, during a session, the phase, the seconds, the set and the load. To do this the app copies this data to an area of the phone shared with the widgets. They are visible even when the phone is locked: if you don't want that, remove the widgets or turn off Tsuyo's Live Activities in your iPhone settings.
- The file you export, until you share or delete it.
The copy on your phone. So that the app works without internet, it keeps a copy of your data on your phone. This copy may be included in your phone's backup (iCloud, Google or a computer), if you have it on. Apple or Google manage the backup, under your agreement with them: we cannot see or delete it.
5. Why we process your data, and on what legal basis
| Why | What data | Legal basis |
|---|---|---|
| Create your account, sign you in, send you account emails | 3.1 | Contract: needed to provide the service you ask for (Art. 6(1)(b) GDPR) |
| Check that you are at least 18 | Year of birth (3.2) | Contract (Art. 6(1)(b)) and legitimate interest in offering the app to adults only (Art. 6(1)(f)) |
| Store, sync, show and export your profile, workouts, plan, sessions, tests and hangboards; work out loads, warnings and progress | 3.2, 3.3 | Contract (Art. 6(1)(b)) |
| Generate a workout with AI, when you ask | 3.5 | Contract (Art. 6(1)(b)) |
| Manage Tsuyo Pro and restore purchases | 3.4 | Contract (Art. 6(1)(b)) |
| Understand how Tsuyo Pro is doing, with aggregate statistics on subscriptions and renewals | 3.4 | Legitimate interest (Art. 6(1)(f)) |
| Protect the AI and servers from abuse; show you the website | App Check (3.5), IP and technical data (3.1, 3.6, 3.10) | Legitimate interest (Art. 6(1)(f)) |
| Fix bugs that make the app close; improve test versions | 3.6, 3.7 | Legitimate interest (Art. 6(1)(f)) |
| Answer your requests | 3.8 | Contract (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) |
| Comply with the law, for example answer an authority | What the law requires | Legal obligation (Art. 6(1)(c)) |
Legitimate interest, explained. Our interest is an app that doesn't close in the middle of a hang, that others cannot use to abuse the services and that we can improve by knowing how Tsuyo Pro is doing. We believe it does not override your rights because the data is limited and technical, we keep it for a short time (section 8) and we never use it for advertising or profiling.
Your right to object. You can object at any time, on grounds relating to your situation, to processing based on legitimate interest. Write to info@tsuyo.app. For the statistics and crashes Apple and Google show us, just turn off sharing with developers in your phone's settings.
Do you have to give us this data? Without an account the app doesn't work: workouts are stored on the servers so they aren't lost. Your year of birth is needed to use the app. Weight, height, how your fingers feel, notes and "Use profile and history" are optional: without them, some calculations and suggestions are less precise.
6. Who sees your data
You, through the app.
The controller. As owner of the project, Francesca Barchietto can technically access the database. She will only look at your data if you ask for support and agree, and only what is needed to help you.
Google, which provides the servers (Firebase) and the AI (Gemini). Google processes the data on our behalf, as a processor: for Firebase under the Cloud Data Processing Addendum, for Gemini under the Gemini API terms for paid services. Google in turn uses suppliers, including other group companies (Google Cloud subprocessors, Firebase subprocessors).
| Service | What it holds | Where |
|---|---|---|
| Cloud Firestore | Profile, workouts, plan, programs, sessions, tests, hangboards | EU, Milan (europe-west8) |
| Firebase Authentication | Account ID, email, protected password, IP | United States |
| Firebase AI Logic and Gemini | AI requests (3.5) and responses | United States and other countries where Google has data centres |
| Firebase App Check | App check tokens | Global service |
| Firebase Hosting | The tsuyo.app website: IP and technical data of visits (3.10) | Global service |
RevenueCat, Inc., in the United States, which manages Tsuyo Pro status (section 3.4), as our processor, under its data processing agreement.
Apple and Google, as independent controllers, under their own terms and privacy policies, for:
- purchases on the App Store and Google Play: payments, invoices, renewals and refunds;
- the app check (App Attest and Play Integrity, section 3.5);
- test versions (TestFlight and Google Play testing, section 3.7);
- statistics and crash reports, if you chose to share them with developers (section 3.6);
- your phone's backup, if you use it.
Squarespace, which manages the tsuyo.app domain and forwards mail sent to info@tsuyo.app, as our processor. Mail arrives in a Gmail inbox, Google's email service, where we read it and reply from.
Authorities, only if the law requires us to.
No one else. We don't sell or rent your data. We don't give it to advertisers or data brokers.
7. Transfers outside the European Union
- Firebase Authentication processes data in the United States (Google LLC).
- Gemini may process AI requests in the United States and in other countries where Google has data centres.
- RevenueCat processes data in the United States.
- Firebase Hosting and App Check are global services.
- Your profile, workouts, sessions and tests are stored in Italy (Milan). Google, as our processor, may access them in a limited way from countries outside the EU, only for maintenance, security or technical support.
- Mail to info@tsuyo.app passes through Squarespace, in the United States, and arrives in Google's Gmail inbox.
Safeguards. Google LLC and Squarespace, Inc. participate in the EU-U.S. Data Privacy Framework, which the European Commission has found adequate (decision of 10 July 2023); if it stopped applying, their terms provide for the Standard Contractual Clauses approved by the Commission. For RevenueCat, the Standard Contractual Clauses apply, as part of its data processing agreement. You can ask us for information or a copy of these safeguards at the address in section 1.
8. How long we keep your data
| Data | How long |
|---|---|
| Account, profile, workouts, plan, sessions, tests and hangboards on the servers | Until you delete them. You delete a session or workout from the app; everything else with "Delete account". After deletion, Google also removes the data from its internal backups within 180 days. |
| The same data, if we close your account (terms, section 15) or the service (terms, section 11) | After notice so you can export it, we delete it within 30 days. |
| AI requests | Google keeps them for a limited time, only to detect abuse (section 3.5). We don't store them. A workout you save stays among your workouts. |
| Purchase status in RevenueCat | As long as you have the account. After you delete it, write to us and we remove it within 30 days (section 10). |
| IP addresses in Firebase Authentication logs | A few weeks |
| IP addresses of website visits (Firebase Hosting) | A few months, then Google deletes them |
| Statistics, crashes and test-version data | Apple and Google keep them, under their own rules |
| The copy on your phone, hangboard photos, preferences | Until you uninstall the app. "Delete account" also removes the hangboard photos. |
| Support emails | 12 months after the request is closed, or sooner if you ask |
9. Your rights
You can ask us at any time to:
- access your data and get a copy (Art. 15);
- correct it (Art. 16). You correct your profile, workouts and sessions yourself in the app;
- delete it (Art. 17). You do it from the app (section 10);
- restrict processing (Art. 18);
- take it with you (Art. 20). You do it from the app with "Export my data": a JSON file with your profile, workouts, plan, sessions, tests, hangboards and programs. It doesn't include your email or photos: for sign-in data, write to us;
- object to processing based on legitimate interest (Art. 21: see the box in section 5).
How to exercise them.
- In the app: Profile › Your data › Export my data and Profile › Account › Delete account. To stop sending your profile and history to the AI, turn off "Use profile and history" in Generate with AI.
- By email: info@tsuyo.app, from your account's address. We reply within one month. If the request is complex we may take up to three months, and in that case we tell you within the first month.
Complaints. If you think we process your data incorrectly, you can lodge a complaint with the Italian Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the EU country where you live, work or where the alleged infringement took place. We'd appreciate it if you wrote to us first: we'll try to sort it out.
10. How to delete everything, and what remains
From the app: Profile › Account › Delete account.
- If you haven't signed in recently, the app asks for your password again.
- It then deletes your profile, workouts, plan, programs, sessions, tests and hangboards from the servers, deletes hangboard photos from your phone and finally deletes your sign-in account.
Uninstalling the app does not delete data from the servers. To delete it, use "Delete account".
What is not touched:
- your preferences and the copy on your phone, which remain until you uninstall the app;
- widgets already on your Home Screen, which show their last content until you remove them;
- copies in your phone backups, in exports you saved or on another phone;
- the purchase status in RevenueCat, linked to your account ID and not to your email: write to us and we remove it within 30 days;
- purchases, which stay in your Apple or Google account: to cancel a subscription use the store settings, because deleting your Tsuyo account does not cancel it;
- emails you sent us: we delete them as section 8 says, or sooner if you ask;
- Google's internal backups: Google removes the data within 180 days.
11. Minors
The app is only for people aged 18 or over: hangboard training puts strain on fingers, tendons and pulleys, which in teenagers are still growing. The account is created when you enter your email and password; right after that the app asks for your year of birth, before saving your profile. If you turn out to be under 18, the app does not save your profile, explains why and offers to delete the account. If we find out that we hold data of a minor anyway, we delete it. If you think this has happened, write to us.
12. How we protect your data
- Each account sees only its own data. The database rules enforce this on the server and accept only the fields described in this policy. We check them with automated tests every time they change.
- Encrypted connections (HTTPS) between the app and the servers, and for the website. Google also encrypts data at rest.
- We don't store your password. Firebase keeps only a protected form of it.
- Only the real app can use the AI, thanks to the app check (section 3.5). The Gemini key is not in the app.
- Administrator keys are not in the app's code. Access to the Firebase console is protected.
What we don't do. Data is not end-to-end encrypted, where only you would hold the key: that's why the controller can technically access the database (section 6). The export file is not password-protected: keep it somewhere safe.
If a data breach happens, we notify the Garante and, if there is a high risk to you, you too, as the law requires (Articles 33 and 34 GDPR).
13. Automated decisions
We don't take automated decisions with legal or similarly significant effects on you. The app makes calculations to give you suggestions: loads relative to your latest test, warnings about warm-up and rest, programs, workouts proposed by the AI. They are suggestions: you always decide.
14. Changes to this policy
If we change this policy, we update the version and date at the top and publish the new version at tsuyo.app/privacy. If the change is significant, we also tell you in the app or in the update notes. If you'd like to read a previous version, write to us and we'll send it.
15. Contact
Francesca Barchietto · Strada Garella 78, 13900 Biella (BI), Italy · info@tsuyo.app
Support: tsuyo.app/support