Last updated 4 September 2026
Tempo is built so that your tasks, habits and focus data stay on your device and in your own iCloud account. This policy explains exactly what that means, and describes every feature where something leaves your device.
Everything you create in the app: tasks, subtasks, checklists, notes, tags, habits and streaks, reminders, focus session history, weekly reviews, and items you share into Tempo from other apps. This data lives in the app's own storage on your iPhone.
If you turn on iCloud sync, this data also syncs through your personal iCloud account so it is available on your other devices. It is stored in a private CloudKit database tied to your Apple Account. The developer has no access to it and cannot view, export or recover it.
| Permission | Why | Leaves your device? |
|---|---|---|
| Microphone | To capture what you say when adding tasks by voice. | No. Audio is processed on device and is not recorded or uploaded. |
| Speech recognition | To turn speech into text using Apple's on-device speech engine. | No. |
| Location | To trigger location reminders when you arrive somewhere, and to search for places when you pick a location. | No. Location is monitored on device and is never transmitted or stored by the developer. |
| Screen Time (Family Controls) | To block the apps you choose during a focus session. | No. Apple's framework gives Tempo opaque tokens, not a list of your apps, and these stay on your device. |
| Calendar | To create and update events in Tempo's own calendar when you export tasks. | No. |
| Reminders | To import lists you select from Apple Reminders. | No. |
| Notifications | To deliver task and habit reminders. | No. |
This is the only feature that sends the content of what you write or say to a third-party service, and it applies only to subscribers.
Speech is always transcribed on your device using Apple's speech engine — your audio is never uploaded. For Premium subscribers, the resulting text is then sent to a server operated by the developer, which forwards it to OpenAI to be turned into structured tasks (titles, dates, durations, tags and checklists). The structured result comes back to your device.
What reaches OpenAI is only the transcribed text. Nothing identifying is attached to it.
Your request also carries a subscription receipt issued by Apple, which the developer's server checks to confirm you hold an active subscription. It is verified and discarded in the moment — it is not stored, and it is never passed on to OpenAI. It contains no name, email address or device identifier.
What is never sent: your audio, your existing tasks, your location, your contacts, or anything identifying you personally.
OpenAI processes this text to return a result and retains API data for a limited period for abuse monitoring under its own policies. Text submitted through the OpenAI API is not used to train its models. The developer does not store the text of your dictations.
If you do not want any text to leave your device, do not use voice capture as a Premium subscriber; every other feature in Tempo works entirely offline.
Tempo can publish your scheduled tasks as a calendar you subscribe to from Apple Calendar, Google Calendar, Outlook or any other calendar app. This feature is off until you turn it on in Settings.
When it is on, Tempo writes a calendar document to a web address containing a long random token, for example https://tempo-cal.vercel.app/c/<token>.ics. That document contains the title, date, time, duration, place, notes and checklist of your scheduled tasks. Completed tasks appear with a check mark.
The address is unguessable, but it is not protected by a password. Anyone you give the link to — and anyone they forward it to — can read those tasks without signing in. Treat it like a password. The document is stored in a public database in the developer's CloudKit container, which is what allows a calendar app to fetch it without your Apple Account.
You are in control of it: turning publishing off stops the link working immediately, Reset Link issues a new address and permanently breaks the old one, and both remove the published document. Nothing is published while the feature is off, and the link is never shared with anyone by Tempo — it is only ever shown to you.
If you create or join a shared group, the tasks in that group are shared through Apple's CloudKit sharing with the people you invite. Everyone in the group can see and edit those tasks, and can see the display name, avatar colour or emoji, and profile photo you have set in Tempo. Invitations are sent by you, through Apple's sharing interface.
Shared data lives in your and the participants' iCloud accounts. The developer has no access to it. Tasks outside a shared group are never shared, and leaving a group stops the sharing.
Tempo's optional Chrome extension shows your Tempo inbox in the browser and lets you save links, pages, images and PDFs into it. It is off until you turn it on in Settings.
When it is on, your inbox items are mirrored through your own private iCloud database — the same account the app already syncs with. You sign in to the extension with your Apple Account, and only that account can read the data. The developer operates no server for this feature and cannot see what you capture. Turning the connection off stops the app publishing anything further.
To understand where people get stuck in first-run setup, Tempo records a handful of events while you are going through onboarding: which setup steps you continued past, the goals you selected, and whether you chose to try Premium or continue on the free tier.
Each event carries a random identifier generated on your device for this installation, the app's build number, and the time it happened. It carries no name, no email address, no Apple Account identifier, no device identifier, no advertising identifier and none of your tasks. The random identifier is not linked to your identity and is not used to track you across other apps or websites. These events are written to a database in the developer's CloudKit container.
Nothing outside the onboarding flow is recorded. Tempo does not measure how you use the app afterwards.
Tempo Premium is sold through Apple's App Store. Apple handles all payment processing. The developer never receives or sees your payment details. Apple provides aggregate sales and subscription reports that do not identify individual customers.
Tempo is not directed to children under 13, and the developer does not knowingly collect personal information from children.
Because your data lives on your device and in your own iCloud account, you control it directly:
There is no account to delete, because Tempo does not create one. If you are in a region with rights of access, correction, deletion or portability, those rights are satisfied by the controls above; if you need help exercising them, contact the developer.
If this policy changes in a way that affects how your information is handled, the updated policy will be posted here with a new date. Continued use of Tempo after a change means you accept the updated policy.
Questions about privacy: arnav.g.roy@gmail.com