Who is responsible
Tempo (App Store name "Tempo Work") is published on the App Store by Izotz Cristobal Mota (Seize Apps), Basque Country, Spain, who is the data controller for the app ("we", "us"). Contact for anything about your data: izotz@seizeapps.com.
What Tempo stores on your iPhone
- Work history. Your sessions are kept in a local database inside the app: the start and end of each working interval, the zone it belongs to, the events and reviews that led to it, and the corrections you make. It is not synced anywhere.
- Location evidence. When Tempo decides whether a session should start, stop or be reviewed, it keeps the evidence for that decision on the iPhone: individual location fixes (latitude, longitude, accuracy and time), the zone concerned, how the fix arose (for example a zone entry or exit) and your permission state at the time. This is evidence around zone checks, not a continuous trail of where you have been.
- Zones and settings. Each home or work zone you create (its name, centre coordinates, radius, type and schedule) and your preferences are stored in the app's settings. A copy of your settings and of the state a widget needs (the current session, its status, today's total and your daily target) is placed in an App Group container shared only with Tempo's own widgets and Live Activity.
- Small items. Onboarding progress, a cached commute distance, a cached copy of whether Pro is active, Focus timer preferences and statistics, your language choice and the last "What's new" you saw.
- Recovery files. If an update has to migrate an older format of your data, a backup of it is written inside the app, protected until the first unlock after a restart, and removed by "Erase all local data". If the app ever cannot open its database, it can bundle the raw files so that you can save them wherever you choose.
Tempo does not use iCloud or CloudKit, so nothing syncs between devices, and it does not use the Keychain. Like any app's data, what is stored on your iPhone can be included in your device backup (iCloud Backup or a computer backup) if you have backups turned on; those backups are between you and Apple. Tempo does not control that.
Location
Manual tracking works without any location permission. If you turn on automatic tracking, Tempo asks for location access (first "While Using the App", then "Always") and uses Apple's Core Location on the device to register your zones as geofences, receive entry and exit events and, when needed, take a single fix to verify where you are. Automatic tracking works the same for every zone, home included, and asks you nothing: once you have been inside a zone for about two minutes Tempo starts a session at the time you arrived, and once you have been outside for about three minutes it ends the session at the time you left. With "Always" access Tempo also asks iOS for significant-location-change and visit notifications, which let iOS wake the app after you have left so that it can finish the session with the right end time. Continuous location updates run only while the app is open (for example while the Places map tab is on screen). Tempo does not declare a background location mode; a background refresh task, which iOS schedules when it sees fit, lets Tempo settle an arrival or departure that is still waiting for its window to end. You control the permission in iOS Settings at any time.
None of this location data is sent to us: Tempo contains no code that sends your work records or coordinates to a server of ours.
What reaches Apple
Tempo uses Apple's MapKit for place search and routes, so two things leave the app for Apple's servers, under Apple's privacy terms and not ours: the text you type in the zone search bar, and, to compute a one-way driving distance for the "Commute Saved" card, the centre coordinates of your first home zone and first work zone. The result is cached on your iPhone. Saying that we do not collect your location does not mean that Apple's platform services never process it; how long Apple keeps such requests is set by Apple and we cannot see it. Apple also processes your purchases (see below).
No account, no ads, no tracking
Tempo has no account or sign-in, shows no advertising, does not ask for tracking permission and does not track you across apps or websites. Apart from RevenueCat's library, described under Purchase analytics, it contains no analytics, crash-reporting or advertising library. Its privacy manifest declares no tracking; it declares the purchase data that RevenueCat receives. Diagnostics stay on your iPhone: system log entries and an on-screen tracking-diagnostics view. Tempo makes no calls to any AI service.
Notifications, widgets and Siri
Notifications are local only: Tempo schedules them on your iPhone and does not use push notifications or a push server. They tell you what Tempo did or what is coming, for example when work started or ended (with the zone and the time), that it is time to leave, an overtime alert, that a session was closed automatically, a summary of a finished session and the end of a Focus timer phase; none of them asks you to confirm anything. Tempo's widgets, Live Activity and Control read their data from the shared App Group container and have no network or location access of their own. If you use Siri or Shortcuts, Tempo's App Intents let you ask for your hours or start and stop a session; Apple handles the request under its own privacy policy.
Photos and sharing
If you tap Save on a Wrapped share card (a Pro feature), Tempo asks for add-only access to Photos: it can add the image but cannot read your library. Sharing a card uses the iOS share sheet or the clipboard, and where it goes is your choice. "Export all data" writes a JSON file of your records, readable records, raw recovery material, settings and zones included, to a location you pick; it is free and nothing is sent anywhere.
Purchases
Tempo is free to start. Tempo Pro is sold through the App Store as a monthly or yearly subscription or as a one-time lifetime purchase. Apple processes the payment and any renewal; Tempo checks your purchases with Apple's StoreKit on the device, caches only whether Pro is active, and can restore purchases from Apple. We never receive your name, email or payment details from a purchase. We see aggregated, anonymous sales and download statistics from App Store Connect.
Purchase analytics (RevenueCat)
Tempo includes the software library of RevenueCat, Inc. (United States), used for purchase bookkeeping only: Apple's StoreKit still handles every purchase and Tempo still decides on your device whether Pro is active. Whenever Tempo runs, the library creates a random anonymous ID for your install and sends RevenueCat that ID, your device's vendor identifier (a number Apple gives the apps of one developer on one device; it is not the advertising identifier) and the App Store purchases you make in Tempo (product, price, dates and Apple's transaction data). Once per install it asks RevenueCat to read your existing purchase history from Apple, and RevenueCat also records when you last used Tempo. When a Pro screen opens, Tempo also tells it that the screen opened and what led you there, and where you got to (buy tapped, bought, cancelled, pending, failed, restore started, succeeded or failed) with the plan involved. The library also adds the technical details such a library sends with its requests (for example the app and iOS version, device model, language and App Store country), and, like any server, RevenueCat sees the internet address of each request. We use this to keep a record of purchases and to count them. Tempo never gives RevenueCat your work records, zones, coordinates or location, name or email, and we do not enable any advertising integration: it is not used to track you.
RevenueCat is our processor. What it collects through its library, where and for how long it keeps it, and how it protects it are set out in its own privacy policy at revenuecat.com/privacy; we cannot see inside its systems and we do not promise a retention period for it. Deleting Tempo does not delete what RevenueCat already holds: write to izotz@seizeapps.com and we will ask it to delete the record.
Writing to us
Suggest a Feature, Report a Bug and the startup "Contact Tempo support" button open a draft in your own mail app addressed to izotz@seizeapps.com. The bug report fills in the Tempo version, iOS version and device model, and you can read and change the draft first. Nothing is sent unless you send it, and we use your email only to read and answer it.
Deleting your data and how long we keep it
All of Tempo's data is on your iPhone and stays until you change or delete it: you can correct or delete sessions, delete a zone, use Settings › Data & privacy › Erase all local data (which also removes Tempo's notifications and ends the Live Activity), reset all settings, or delete the app. We hold no copy of your records and there is no account to delete; to ask RevenueCat to delete its purchase record, write to izotz@seizeapps.com and we will ask it. Tempo does not apply an automatic expiry to location evidence stored with your sessions, so it stays until you erase it.
Children
Tempo is not directed to children under 13 and is not in the App Store's Kids Category. It does not ask anyone for a name or email address.
Your rights
Under the GDPR you can ask for access to, correction or deletion of personal data, object to its use, or ask for a copy. Tempo keeps your records only on your device, so they leave with the app when you delete it. The only data about you that Tempo sends off your iPhone for us is what RevenueCat holds (see above): to ask for access, correction or deletion of it, write to us and we will pass the request on to RevenueCat. To exercise any right, write to izotz@seizeapps.com. The legal basis for the purchase records is the performance of the purchase and our legitimate interest in keeping track of sales. You can also complain to the Spanish Data Protection Agency (aepd.es) or to the authority where you live.
Changes
If this policy changes, the new version will be published on this page with a new date. If a later version of Tempo adds a server of ours or another third-party library, this page will be updated before it ships.