Privacy Policy
Last updated 6 November 2026
Your training is yours. It lives on your iPhone and in your iCloud, and we can’t see it.
The short version
- The Tonzo app has no servers of its own and no account with us. The app sends nothing to us.
- No ads, no analytics, no tracking, and no third-party code in the app.
- We never sell your data, and never use Apple Health data for advertising.
- Apple runs the parts that leave your iPhone: iCloud, Sign in with Apple and payments.
- We only hold your data if you give it to us, such as by emailing us or joining the testing list.
Who we are
Tonzo is made by Original Copy Ltd (“we”, “us”), a company registered in England and Wales, number 16908021. Our registered office is B703 Icon Heights, 14 Bury Road, London, England, N22 6FA. For anything in this policy, email hello@tonzo.app. Where data protection law applies to what we do, we are the data controller.
What Tonzo stores, and where
| Data | Where it lives | Can we see it? |
|---|---|---|
| Your training: sessions, weights, reps, times, ratings, notes, plans and your bells | Your iPhone, and your private iCloud if iCloud is on | No |
| Your settings: first name, units, coach and sound settings, today’s intensity, moves you avoid, when you joined, when you accepted the Terms, founding member status and number of hugs | Your iPhone, and your private iCloud if iCloud is on | No |
| Apple Health readings: sleep, heart rate variability and resting heart rate, and with an Apple Watch your heart rate and active energy while you train, if you allow it | Read on your iPhone. A session keeps only its average and peak heart rate, which sync with your training. Nothing else is saved or synced | No |
| Sign in with Apple: your Apple user ID, and the email and first name you choose to share | Your iPhone | No |
| Device settings: notification choices and your widget’s summary | Your iPhone | No |
| Emails you send us, including feedback from the app: your message, any screenshots or videos you attach, and the details the app adds so we can fix problems (your iPhone model, iOS and Tonzo versions, and how many sessions you’ve logged) | Our email provider | Yes |
| Testing list: the email address you enter on our website, and when you joined | Our hosting provider, Cloudflare | Yes |
Apple Health
Connecting Health is optional, and you can turn it off at any time in the Health app or iOS Settings.
- What we read: sleep, heart rate variability and resting heart rate. Tonzo uses them on your iPhone to work out your daily Bell Score. With an Apple Watch, it also reads your heart rate and active energy while you train, to show them live and on the finished session.
- What we write: finished sessions, as workouts, so they count in Fitness. With an Apple Watch, the Watch saves the workout instead.
- What we never do: send these readings to ourselves or anyone else, sell them, or use them for advertising, marketing or data mining. The only Health figures Tonzo saves are a session’s average and peak heart rate, kept with that session on your iPhone and in your private iCloud.
Your score can shape what you train, so a saved session may show that it ran at Recover because of the score. That session record syncs like any other, without the Health readings behind it.
iCloud
If you’re signed in to iCloud, Tonzo syncs your training and settings through your private iCloud so they follow you to a new iPhone. Tonzo doesn’t need you to sign in to the app for this. That data is held by Apple under your Apple Account and Apple’s Privacy Policy. We have no access to it. To stop syncing, turn Tonzo off under iCloud in iOS Settings.
Sign in with Apple
Sign in with Apple is optional. If you use it, Apple gives the app a user ID, and the first time only, the email and name you choose to share. They stay on your iPhone and are never sent to us.
Payments
Apple handles every purchase and subscription. We never see your card details. Apple gives us sales reports that don’t name you. If you email us about a purchase, we’ll see whatever you include.
Permissions
- Notifications: reminders are set on your iPhone. Tonzo doesn’t use a server to send them.
- Photos: Tonzo can add a session statement to your library when you ask it to. It can’t read your photos. To attach screenshots or videos to feedback, you pick them in Apple’s photo picker, and Tonzo only gets the ones you pick, to put in your email.
TestFlight and Apple’s app reports
If you test Tonzo on TestFlight, Apple shares your name and email if you were invited directly, your app use statistics, crash reports and any feedback you send. If you’ve agreed to share analytics with app developers in iOS Settings, Apple also gives us crash reports and summary statistics, which don’t identify you to us. We use these to fix problems and improve Tonzo.
Our website
Our website has no analytics, no advertising and no tracking cookies. Our hosting provider briefly processes standard server logs, such as IP addresses, to deliver the site and keep it secure.
Why we use the data we hold
For people in the UK and EU, these are our legal reasons:
- Emails: to answer you. Our legitimate interest in supporting Tonzo, or to perform our contract with you.
- Testing list: to invite you to test Tonzo and tell you about testing. Your consent, which you can withdraw at any time by emailing us.
- TestFlight data and Apple reports: our legitimate interest in keeping Tonzo working well.
- Website logs: our legitimate interest in keeping the site secure.
- Apple Health: stays on your iPhone and only runs with the permission you give in iOS.
Who else is involved
Only the providers named above: Apple, our email provider and our hosting provider. They may process data outside the UK or EEA, with safeguards the law requires. We don’t sell or share personal information, and we’d disclose it only if the law required it.
How long we keep it
- On your iPhone and in iCloud: until you erase it. Deleting the app doesn’t remove your iCloud copy.
- Emails to us: up to 2 years after we last talk, then deleted.
- Testing list: until you ask us to remove you, or 6 months after Tonzo launches on the App Store, whichever comes first.
- TestFlight and Apple reports: kept by Apple on its own schedule.
Your choices and rights
- Export: Profile, Account and privacy, Export my data gives you your sessions as a CSV file.
- Erase: the same page erases your sessions, plans, bells and settings from this iPhone and from iCloud. Do it once on each device you use, or that device can sync its copy back. You can also delete Tonzo’s data under iCloud in iOS Settings.
- Everything else: depending on where you live, including in the UK, EU, California and other US states, you can ask to access, correct, delete or move data we hold about you, or object to how we use it. Email us and we’ll answer within a month, at no cost. We won’t treat you differently for asking.
- Complain: you can complain to your data protection authority. In the UK that’s the Information Commissioner’s Office.
Security
Your data is protected by your iPhone’s passcode and by Apple’s iCloud security. No system is perfect, so keep your device and Apple Account secure.
Children
Tonzo is for adults aged 18 and over. We don’t knowingly hold data about children. If you think a child has sent us their data, email us and we’ll delete it.
Changes
If we change what Tonzo does with your data, such as by adding analytics, we’ll update this page first. If the change is material, the app will ask you to agree again before you next train.