Privacy Policy

1. The short version

Your plans stay yours. Tempa has no accounts and no servers of its own that hold your data — your tasks live on your device and in your own iCloud. A few services help the app work: AI planning, subscriptions, anonymous usage statistics and ad measurement. This page says exactly what each of them receives. We never sell your data, and nothing you type is ever used for advertising.

2. What stays on your device

Your tasks, schedule, completions, focus history and settings are stored on your device and synced through your private iCloud (CloudKit). They sit in your Apple account, out of our reach — we cannot read them.

3. What is sent to AI

When you use an AI feature (break into steps, plan my day, Ask Tempa), the text you typed or spoke is sent to Anthropic's API so it can be turned into a plan. So the plan fits your day, the request can also include the titles and times of your own tasks for the days involved, your wake time, your energy-dip time, and the current date and time zone. Events from your calendars are never included. Per Anthropic's API terms, this data isn't used to train models. Nothing is sent unless you use an AI feature.

4. Voice input

Speech is turned into text by Apple's speech recognition — on your device where available, otherwise on Apple's servers under Apple's privacy policy. Tempa only receives the resulting text and never stores audio.

5. Your calendars

Connecting a calendar is optional. With your permission, Tempa reads events from the calendars set up on your iPhone (iCloud, Google, Outlook and others) and shows them as blocks on your day, so your tasks are planned around them. Tempa only reads: it never adds, changes or deletes anything in your calendar. Imported events are kept like your tasks — on your device and in your own iCloud. They are never sent to us, to the AI, to analytics or to advertisers. Switch it off any time in Settings → Calendar, and the upcoming imported events are removed.

6. Google Calendar

If you choose to sign in with Google, Tempa asks for read-only access to your list of calendars and to their events. It uses this only to show your Google Calendar events on your day and to plan your tasks around them, on your device. The data goes straight from Google to your phone — Tempa has no server — and is stored only on your device and in your own iCloud. It is never shared with third parties, never used for advertising, and never used to train AI models. The sign-in token is kept in your iPhone's Keychain. Disconnect in Settings → Calendar and access is revoked and the upcoming imported events are removed; you can also remove Tempa's access at https://myaccount.google.com/permissions. Tempa's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

7. How your data is protected

Everything Tempa sends or receives — to and from Google, Anthropic and Apple — travels encrypted over HTTPS (TLS). Google sign-in happens in Apple's secure sign-in window using OAuth 2.0 with PKCE, so Tempa never sees your Google password, and access is limited to the two read-only calendar permissions described above. The sign-in token is stored in the iOS Keychain, which iOS encrypts, and it is not synced to your other devices. Your tasks and imported calendar events are kept in Tempa's private storage on your iPhone, which iOS encrypts (Data Protection), and are synced only through your own private iCloud database, which Apple encrypts in transit and at rest and which we cannot access. Tempa has no server of its own that receives your data, so there is no copy of it on our side to be read, lost or sold. When you disconnect Google Calendar, Tempa also deletes the sign-in token and its cached calendar data from your device; events that already happened stay in your history like your own tasks until you delete them.

8. Notifications

Reminders and nudges are scheduled locally on your device. They never leave it.

9. Purchases

Subscriptions are processed entirely by Apple; we never see your payment details. So we know a subscription is active and can understand our revenue, the purchase record (product, price, dates and an anonymous app identifier — no name, no email) is shared with RevenueCat, our subscription analytics provider. If you installed Tempa from an Apple Search Ads ad, Apple's attribution token is passed along so we know which campaign worked.

10. Anonymous usage statistics

To see where the app confuses people, Tempa records anonymous events with PostHog, hosted in the EU: which onboarding screens were viewed, that a task was completed, a focus session started, the paywall shown, a calendar connected. Counters only — never task text, names, calendar contents or anything you type. Events carry a random identifier and basic device information (model, iOS version, app version, language, and an approximate region derived from your IP address). There are no accounts, so they are not tied to your identity.

11. Ad measurement

We advertise Tempa on TikTok, Meta (Facebook and Instagram) and Apple Search Ads. So those campaigns can be measured, the TikTok and Meta SDKs inside the app report a few standard events — install, app open, onboarding finished, paywall viewed, trial started, and a purchase with its value — along with the device information those SDKs collect (such as device model, iOS version, IP address and Apple's SKAdNetwork attribution data). Tempa never shows Apple's tracking prompt, so these SDKs don't receive your advertising identifier (IDFA). Nothing you type, no task and no calendar data is ever shared with them.

12. This website

tempa-planner.app uses Google Analytics to count visits and taps on the download button. It sets cookies and sees your IP address and browser details. It has no connection to what you do inside the app.

13. Your control

Delete a task and it's gone from your devices and your iCloud. Delete the app and its data goes with it (iCloud data can also be removed in iOS Settings → iCloud). Calendars can be switched off in Settings → Calendar or in iOS Settings → Privacy & Security → Calendars. There's no account to close because there's no account. To ask what statistics may be linked to your device, or to have them deleted, email us at support@tempa-planner.app.

14. Children

Tempa is not meant for children under 13, and we do not knowingly collect their data.

15. Changes

If this policy changes in a meaningful way, the app will say so. Continued use after changes means you accept the updated policy.

16. Contact

Questions about this policy? Email us at support@tempa-planner.app.