Privacy Policy

1. Who we are and what this covers

Tempus is a daily planner designed with ADHD in mind. It is made by NAV LAB, an independent software studio. The Tempus app on iPhone, iPad, Mac, Apple Watch and any other Apple device it runs on, including its widgets and its Siri and Shortcuts actions, Tempus’s AI planning server, and the website at gettempus.app (together, the “Service”) are provided by the developer identified as the seller of Tempus on the Apple App Store, who operates NAV LAB from Vietnam and is the controller of your personal data under this Privacy Policy (“Tempus”, “we”, “us” or “our”).

This policy explains what personal data we collect, how we use it, who we share it with, how long we keep it and what rights you have.

It is Tempus’s part of NAV LAB’s Privacy Policy, which covers all of the studio’s apps. The two describe the same practices, this one in more detail for Tempus. If they ever differ, NAV LAB’s Privacy Policy applies.

You can contact us about privacy at any time at admin@gettempus.app.

2. The short version

3. Personal data we collect

Your plans

• What you create: your tasks, with their titles, notes, checklists, times, durations, repeats, icons, colours and alarm and reminder settings; when you complete them; and your streaks. Your habits are your repeating tasks. Focus sessions are not kept once they end.
• Where it is stored: on your device and, if iCloud sync is on, in your private iCloud database, so that your plans are on all your devices. Sync is on by default. Only you can access your private iCloud database; we can’t.
• Turning sync off: anyone can stop Tempus from using iCloud in the device’s Settings → [your name] → iCloud, and Tempus Pro has its own switch in Settings → Data & Privacy → iCloud Sync, which applies once Tempus restarts. Turning sync off doesn’t delete the copy already in iCloud (see Section 13).
• Widgets and Apple Watch: your widgets read your plans on your device. Your Apple Watch receives today’s and tomorrow’s tasks directly from your iPhone, and sends back what you do on it, such as completing a task or capturing a thought.

We don’t receive your plans, except the parts that an AI feature sends to our server, as described in Section 5.

Your planning profile

During onboarding, Tempus asks about your days so that it can plan around them: the first name you’d like it to use, your lifestyle (one you pick, or your own words), your wake and sleep times and work hours, the routines and habits you pick (which can include taking medication), your main goal, your energy pattern through the day, how long you can usually focus, the focus challenges you select, such as time blindness, and any notes you add. You can change them later in Settings → RePlan.

Your profile is stored in your device’s Keychain. It is not synced through iCloud, and it can stay in the Keychain after you delete Tempus; Delete All Data removes it (see Section 13). Section 5 explains when parts of it are sent to draft a plan.

Calendars and reminders

If you allow it — a Tempus Pro feature — Tempus reads, on your device, the events in the calendars and the reminders in the lists you choose, including those from accounts such as Google or Outlook that you have added to your device: their titles, times, notes and colours. It shows them on your timeline and in your widgets, and plans around them.

Tempus never creates, changes or deletes your events. When you tick a reminder in Tempus, Tempus marks it as completed — or not completed — in Reminders. Tempus doesn’t keep copies of your events or reminders: it only remembers which ones you ticked, by their identifiers and dates, with the rest of your plans. When Tempus drafts a plan, some of their details can be sent as described in Section 5.

Purchase information

Purchases are processed by Apple, and we never receive your payment card details. RevenueCat, our subscription management provider, gives us information about your purchases, such as the product purchased, transaction identifiers, purchase and expiration dates, renewal status and the country of your App Store account.

RevenueCat knows you only by a random identifier. Tempus also gives it your Firebase app-instance identifier, so that purchases can be matched with analytics, and where you first saw the Tempus Pro offer. RevenueCat also receives Apple’s privacy-preserving attribution data (AdServices), which tells us whether Tempus was installed from one of our Apple Search Ads campaigns, and from which one.

Usage, device and diagnostic data

We use Google Firebase — Analytics, Crashlytics, Remote Config and Cloud Messaging — in the app.

• Analytics receives events about how Tempus is used: the screens and features you use; the steps of onboarding and the preset answers you choose (your lifestyle, main goal, energy pattern and focus length, the challenges and habits you tick, and the work hours suggested for your lifestyle); whether you allowed notifications and alarms; your planning requests — which kind, whether they worked, how long they took, how many items they returned, the length of what you typed and the times involved, such as your wake, sleep and work times or the time you picked; the steps of the paywall and of any purchase, including the plan you chose; and whether you use the free version, a trial, a subscription or Lifetime. It also receives the app version, your device model, operating system version, language and region, an approximate location derived from your IP address (country or region), and identifiers for your installation: a Firebase app-instance identifier and Apple’s identifier for vendors.
• What analytics doesn’t receive: your tasks, your notes, what you type to plan your day, and your calendars and reminders. One exception: if you described your lifestyle in your own words, those words can be included in events about planning requests that our server handled.
• Crashlytics receives crash reports and some error reports, with details about your device and the app. They include the most recent analytics events and can occasionally include a fragment of the data involved in the error.
• Remote Config lets us adjust some features, such as when Tempus offers Tempus Pro or which AI service it tries first, and try variations of them, without an app update.
• Cloud Messaging: Tempus registers your device with Firebase Cloud Messaging, which would let us send push notifications. We don’t currently send any: your reminders and alarms are scheduled on your device.
• Advertising identifiers: Tempus never asks for permission to track you, so it can’t access your device’s advertising identifier, and we don’t track you across other companies’ apps and websites. The edition of Firebase Analytics in Tempus includes Google’s components for privacy-preserving ad measurement — Apple’s SKAdNetwork and Google’s on-device conversion measurement — which can tell whether Tempus was installed after an ad. We don’t use your data for advertising.
• On our server: each request to our AI server comes with technical information, such as your IP address, the time of the request and your device’s standard network headers, which we use to run and secure the Service and to limit abuse.

Communications

If you contact us, we receive your email address and the content of your message, along with any details you choose to include. Emails you start from Tempus’s settings are pre-filled with the app version, your iOS version and your device type, which you can see and remove before sending.

gettempus.app

• No cookies, no analytics, no ads. gettempus.app sets no cookies and uses no analytics, advertising or cross-site trackers.
• In your browser. If you switch between the light and the dark theme, the site remembers your choice in your browser’s local storage. It never leaves your device.
• Hosting. gettempus.app is hosted by Vercel, which processes technical data such as your IP address to deliver the site and protect it against abuse, and keeps request logs for a short time.

4. How we use personal data and our legal bases

If you are in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR) requires a legal basis for each purpose; we indicate it for each one. Where other laws apply, we rely on the equivalent legal bases under those laws.

• To provide the Service: keep and sync your plans, show your calendars and reminders beside them, draft plans, run focus sessions, and provide support. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To manage purchases: verify your access to Tempus Pro and keep purchase records. Legal bases: performance of our contract with you, and compliance with our legal obligations, such as accounting and tax obligations (Art. 6(1)(c) GDPR).
• To understand and improve the Service: analytics, crash reports, remote configuration, testing of new features, and measuring which of our Apple Search Ads campaigns brought people to Tempus. Legal basis: our legitimate interest in understanding how Tempus is used and improving it (Art. 6(1)(f) GDPR).
• To keep the Service secure: limit abuse of our AI server, fix problems and enforce our Terms of Use. Legal basis: our legitimate interest in protecting the Service, our users and ourselves (Art. 6(1)(f) GDPR).
• To send you the notifications and alarms you set. Legal basis: your consent, given through your device’s notification and alarm permissions, which you can withdraw at any time in your device settings (Art. 6(1)(a) GDPR).
• To comply with the law: respond to lawful requests from authorities and establish, exercise or defend legal claims. Legal bases: compliance with our legal obligations, and our legitimate interest in protecting our rights.

Where we rely on our legitimate interests, you can object at any time (see Section 13). We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

5. How Tempus drafts your plans

Tempus uses AI in these features:

• Tempus AI: describe what you want to plan, by typing, dictating or picking a suggestion, and Tempus suggests tasks for your day. When you open Tempus AI, it also prepares a few suggestions of what to ask.
• Your first plan: at the end of onboarding, Tempus drafts a plan for your day from your answers. RePlan, in Settings, drafts it again.
• Filling a gap: when you tap free time on your timeline, Tempus suggests a task that fits it.
• Suggest with AI: when you add a task at a time you picked, Tempus can suggest what to do then.

Where your request goes

Tempus can handle a request in three ways:

1. On your device, with Apple’s on-device model. The request never leaves your device.
2. With Apple Intelligence on Private Cloud Compute, on devices with iOS, iPadOS or macOS 27 or later where it is available and its usage limit has not been reached. The request goes from your device to Apple’s Private Cloud Compute. According to Apple, this data is used only to fulfill the request, without being stored or made accessible to Apple. We never receive it.
3. On our server, which asks Google’s Gemini models to draft the result or, if that request fails or returns no usable answer, OpenAI’s models, and sends the result back to your device.

Tempus currently starts with Private Cloud Compute where it’s available, and uses our server otherwise: for example on iOS 26, when Private Cloud Compute is unavailable or has reached its usage limit, or when it can’t finish your first plan, a gap, a suggestion or the suggestions of what to ask.

What is sent to our server

• Tempus AI: the text you typed, dictated or picked from a suggestion, your device’s language and region, the date you’re planning and the app version.
• Suggestions of what to ask: your planning profile (Section 3), your language, and the title, start time and length of your tasks on the day you’re planning.
• Your first plan and RePlan: your planning profile, your language and the app version and, if you have allowed Tempus to access your calendars and reminders, the title, start time, length and notes of that day’s events in all your calendars and of the reminders due that day that you haven’t completed, in all your lists.
• Filling a gap and Suggest with AI: the start and end of the gap or the time you picked, your planning profile, your language, the app version, and the title, start time and length of everything on that day’s timeline, including the calendar events and reminders that Tempus shows there. When there is no timeline day to go by — for example when that day is empty, or you started from the Inbox, Tempus AI or a plan preview — it can instead include the title, start time and length of all the tasks saved in Tempus.

Every request also comes with technical information, such as your IP address. No account, device or advertising identifier is sent.

Our server passes the AI provider the parts of this information that it needs to draft the result. It doesn’t store the content of your requests (see Section 11).

What is sent to Private Cloud Compute

When Tempus uses Private Cloud Compute, the request holds similar information, plus your time zone, and never your first name. For Tempus AI, it includes your wake, sleep and work hours, and the titles and times of that day’s unfinished tasks and of the events and reminders from the calendars and lists that you show in Tempus.

AI providers

Our server uses Google (the Gemini API) and OpenAI (the OpenAI API) under their paid API terms, under which they process the content as our service provider, do not use it to train or improve their models, and may keep it for a limited period solely to detect abuse and comply with legal obligations.

Dictation

When you dictate, Apple’s speech recognition turns your speech into text. Depending on your device and language, Apple may process the audio on its servers under Apple’s Privacy Policy. Your audio is never sent to us; only the text is used, as described above.

Your choice

Turning what you tell Tempus into a plan is the purpose of these features, so this processing is necessary to provide them, and Tempus doesn’t ask before each request. If you don’t want your planning details processed this way, don’t use these features. Note that your first plan is drafted as onboarding ends, and that the suggestions of what to ask are prepared when you open Tempus AI.

6. Focus sessions and Screen Time

Focus sessions block the apps, app categories and websites you choose, with Apple’s Screen Time.

• Your choices stay private. You choose what to block in Apple’s own picker. Apple gives Tempus only opaque tokens for your choices, so Tempus can’t see which apps or websites you picked, or which apps you use. Your choices stay on your device.
• During a session, Tempus shows the task’s title, icon and colour on the screen that appears when you open a blocked app, and in a Live Activity on your Lock Screen.
• Nothing is sent to us, and Tempus doesn’t keep a history of your sessions.

7. Features you choose to use

• Notifications and alarms. Reminders show the task’s title and notes, and alarms, which use Apple’s AlarmKit, show its title and icon. Tempus presents some reminders like a message, with the task’s name and icon in place of a sender; it doesn’t use your contacts for this. Notifications, alarms and Live Activities can appear on your Lock Screen and on your Apple Watch, where people who can see your device can read them.
• Siri, Shortcuts and Spotlight. So that you can find your tasks in Spotlight and Siri can suggest what you do often, Tempus adds your tasks’ titles, notes and times to your device’s search index, and tells your device about actions you take in Tempus, such as completing a task or starting a focus session. This stays on your device. You can turn it off in your device’s Settings, in Tempus’s Siri and search options.
• Sharing. If you share your statistics, Tempus creates an image with your completion counts, rate and streak, and you choose where it goes. You can also share a link to Tempus.

8. Device permissions

Tempus asks for access to parts of your device only for the features that need them, during onboarding or when you first use those features. You can change any permission at any time in your device’s Settings; the related feature then stops working, and the rest of the app continues to work.

• Calendars and Reminders: to show your events and reminders on your timeline and plan around them, and to mark the reminders you tick as completed.
• Notifications, including time-sensitive ones: for task reminders and the end of focus sessions.
• Alarms: to sound the alarms you set for your tasks.
• Screen Time: to block the apps and websites you choose during focus sessions.
• Microphone and speech recognition: to let you dictate in Tempus AI and in your onboarding notes.

Tempus doesn’t ask for your location, contacts, photos, camera or health data.

9. Who we share personal data with

We share personal data only in the following cases:

• Service providers that process data on our behalf and under our instructions:
  • hosting and infrastructure: Cloudflare (our AI server) and Vercel (gettempus.app);
  • AI: Google (the Gemini API) and OpenAI (the OpenAI API), as described in Section 5;
  • app services: Google (Firebase Analytics, Crashlytics, Remote Config and Cloud Messaging) and RevenueCat (subscription management).
• Apple services you use: when you sync with iCloud, make a purchase on the App Store, use Apple Intelligence or Private Cloud Compute, dictate, use Siri or Screen Time, or receive notifications, Apple receives the data needed for that service and processes it under its own terms and privacy policy. Calendars and reminders from other accounts on your device, such as Google or Microsoft, sync with those providers under their terms.
• Other people, when you choose: when you share your statistics or a link to Tempus.
• Legal reasons: when required by law or by a valid request from public authorities, or when necessary to protect the rights, safety or property of our users, the public or ourselves, including to prevent fraud and abuse.
• Business transfers: if we are involved in a reorganization, merger, acquisition or sale of assets, your data may be transferred as part of that transaction and will remain protected by this Privacy Policy. We will inform you before your data becomes subject to a different privacy policy.

We do not sell your personal data and we do not share it for cross-context behavioral advertising.

10. International transfers

We and our service providers process personal data in several countries, including Vietnam, the United States and member states of the European Union, which may be outside your country of residence. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country that does not offer an adequate level of protection, we rely on appropriate safeguards, such as the standard contractual clauses adopted by the European Commission that are included in our service providers’ data processing terms, or the provider’s certification under the EU-U.S. Data Privacy Framework. You can contact us for more information about these safeguards.

11. How long we keep personal data

• Your plans and your profile: on your device until you delete them, and in your iCloud account until you delete them there. We never hold a copy. Your planning profile can stay in your device’s Keychain after you delete Tempus, until you use Delete All Data.
• Requests to our AI server: our server doesn’t keep the content you send in any database. To limit abuse, it keeps a counter linked to your IP address, which expires about an hour after your last request. Our hosting provider keeps technical request logs for a limited period. When a request to an AI provider fails, our error log may include the provider’s error message, but not what you sent or the model’s reply.
• Purchase records: for as long as necessary to meet our legal and accounting obligations. Apple and RevenueCat keep their own records of your purchases under their own policies.
• Analytics and crash data: kept by Google Firebase according to the retention settings of those services.
• gettempus.app: Vercel keeps request logs for a short time.
• Correspondence: for as long as necessary to handle your request and for a reasonable period afterwards.

We may keep certain data longer when the law requires it or when it is necessary to establish, exercise or defend legal claims.

12. Security

We protect your data with measures such as encryption in transit (HTTPS/TLS) for every request to our server, storage of your planning profile in your device’s Keychain, and access controls on our systems. Plans synced through iCloud are protected by Apple. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to security incidents. Where the law requires it, we will notify you and the competent authorities of a personal data breach.

13. Your rights

Depending on where you live — for example under the EU or UK GDPR, the Brazilian LGPD, the privacy laws of U.S. states such as California, or the personal data protection laws of Vietnam — you may have the right to:

• access the personal data we hold about you and obtain a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict certain processing, or object to it, including processing based on our legitimate interests;
• receive the data you have provided to us in a structured, commonly used and machine-readable format, and have it transmitted to another provider (data portability);
• withdraw your consent at any time where processing is based on consent, without affecting processing carried out before the withdrawal;
• lodge a complaint with a data protection authority, in particular in your country of residence.

California and other U.S. states: we do not sell your personal information or share it for cross-context behavioral advertising, and we will not discriminate against you for exercising your privacy rights.

How to exercise your rights

• In the app. Edit or delete any task, and change your planning profile in Settings → RePlan.
• Delete All Data. Settings → Data & Privacy → Clear Data → Delete All Data erases from your device your tasks and their history, checklists, streaks, alarms and notifications, your settings and your planning profile, and removes your tasks from Spotlight. With iCloud sync on, the deletion also reaches your iCloud copy and your other devices. To make sure nothing of Tempus stays in iCloud, you can also delete Tempus’s data in your device’s Settings → [your name] → iCloud → Manage Storage.
• Permissions. Turn off Tempus’s access to your calendars, reminders, notifications, alarms, Screen Time or microphone at any time in your device’s Settings.
• Subscriptions. Deleting Tempus or its data does not cancel a subscription; cancel it in your Apple Account settings.
• By email. For any other request — including deleting analytics or purchase data associated with your installation — write to admin@gettempus.app. Because Tempus has no accounts, we may ask you for details that help us find the data concerned. We respond within one month, which may be extended by two further months for complex requests where the law allows it.

14. Children

Tempus is not intended for children under 13, and we do not knowingly collect personal data from them. If you are under 18, or under the age of legal majority where you live, you may use Tempus only with the permission of a parent or legal guardian. Where local law requires the consent of a parent or guardian for a minor to use online services or for the processing of a minor’s personal data, you may use Tempus only with that consent. If you believe that a child under 13 has given us personal data, please contact us and we will delete it.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when we add a feature or change how Tempus works. We will publish the new version on this page and change the “Last updated” date. If the changes are significant, we will notify you in the app or by other appropriate means before they take effect.

16. Language

This Privacy Policy is written in English and may be translated into other languages. If there is any inconsistency between a translation and the English version, the English version prevails, to the extent permitted by applicable law.

17. Contact us

For any question about this Privacy Policy, or to exercise your rights, write to admin@gettempus.app. For help with Tempus, write to support@gettempus.app.