Your information

Privacy Policy

Effective September 17, 2026

Tempo is a personal task-planning app operated by Abhay Dalmia. This policy explains how we handle information when you use Tempo or request help.

Information we use

• Account information: your email address, phone number, verification status, account identifier, and profile information (such as a name) supplied when you sign in with Google or Apple. When you connect Apple sign-in, we also securely store an encrypted provider credential so we can disconnect it when you delete your account.
• Profile information: an optional display name and profile photo. We may fill in your name from Google or Apple, and your photo from Google, when available. You can edit your name, choose a photo, or remove your displayed photo in Account Settings. Apple does not provide a profile photo.
• Planner information: the tasks, schedules, sections, color names, edits, focus sessions and completion history you create in Tempo.
• Connected-device information: a watch installation identifier, pairing credentials and Live Activity push tokens that let your devices access your account and receive the current task state.
• Support information: the information you choose to send us when asking for help.
• Operational information: authentication and delivery records, such as the time and outcome of a sign-in or SMS request. Our service providers may process connection information, including IP addresses, to deliver and protect their services.

Why we use it

We use this information to create and secure your account, verify your phone number, keep your planner synchronized, restore your tasks on another device, keep your watch and Live Activities current, process account deletion and disconnect Apple sign-in, investigate delivery or sync problems, and respond to support requests.

We use your profile name and photo to personalize Account Settings.

Service providers

Tempo uses Supabase for authentication and cloud data storage, Twilio to deliver verification texts, and Zoho Mail to handle support email. Apple Push Notification service delivers Live Activity updates, including the task title and timer state displayed on your devices. Our website hosting provider processes connection information to serve these pages. If you choose Google or Apple sign-in, that provider processes your sign-in under its own privacy policy. These providers receive the information needed to perform their role.

Verification texts

Tempo sends an authentication text when you enter your number and tap the button to request a code. Initial account setup requires phone verification. The app guides you through phone verification and the available email, Google or Apple sign-in options.

Message frequency depends on your requests: one authentication text per code request. Message and data rates may apply. We do not use this program for marketing or task-reminder texts. Reply STOP to opt out or HELP for help. Opting out prevents delivery of new text codes until you opt back in. See the SMS terms for details.

Storage and retention

Tempo keeps a copy of your planner on your device and synchronizes account data to its cloud service. Your sign-in session and watch pairing credential are stored using the device Keychain. The watch keeps a local copy of the task state so it can display it while reconnecting. Revoked watch access is checked when it next connects; an offline device may retain its last local display until then. Cloud connections use HTTPS. Access to cloud planner data is restricted to the associated account.

We retain account and planner data while needed to provide the service and handle account requests. When in-app deletion succeeds, the account and its associated planner data, focus history, feedback and device access records are removed from the live Tempo database. The initiating app clears its account cache and credentials; other devices clear account state when they learn access has been revoked. An encrypted Apple credential may remain in a separate retry queue solely to revoke Apple sign-in, for up to seven days before expiry. This queue contains no planner content or Tempo account identifier. It is removed after successful revocation, or by the next scheduled cleanup after expiry. Support email, service-provider security and delivery logs, and backups are separate from the live planner database and may have their own retention periods. Contact us for help with those records or with an older app version.

Photos you choose are resized and have location and camera metadata removed before upload. Uploaded profile photos are stored privately with your account in Supabase. If you use a Google profile photo, Tempo retrieves it from Google to display it. When account deletion succeeds, your uploaded profile photos are removed from Tempo's live cloud storage along with your account data.

Your choices

You can edit your planner information in the app. In app versions with account deletion, open Settings → Account & sync → Delete Account and confirm to request permanent deletion. You can also contact us to request access, correction or deletion of account information, or to ask about a privacy concern. Do not send us a password or verification code.

You can change or clear your display name and change or remove your displayed profile photo in Account Settings. Neither is required to use Tempo.

We may update this policy as Tempo changes. The date above identifies the version of this policy.

Contact

support@tempotodo.com