Legal

Privacy Policy

Last updated: 7 October 2026

1. Who we are

Tempo is operated by Tempo Software Pty Ltd (ABN 85 701 184 358, ACN 701 184 358), based in Queensland, Australia. This policy covers tempoassistant.com, the Tempo web app at beta.tempoassistant.com and app.tempoassistant.com, and the iPhone app. Contact us at tempo.calendar.ai@gmail.com.

Tempo helps you make plans with people you know. Calendar connections are optional. We do not sell personal information or use it for advertising or tracking across other companies’ apps.

2. Information we collect

  • Account: email address, display name, username, account ID and an optional profile photo. Google or Apple sign-in provides the profile information you authorise; Apple may provide a private relay email address. Authentication and connection tokens are used to maintain sign-in and integrations.
  • Calendars: events you create and, with permission, Google Calendar or Apple Calendar event titles, times, locations and calendar identifiers. Apple Calendar sync does not read event notes. Subscribed calendar feeds supply their event information.
  • Plans and context: activities, invitations, participants, replies, candidate times, booked plans, tasks, reminders and preferences or notes you enter. Notes can be private or shared with friends.
  • Photos and voice: profile and plan photos you upload; dictation recordings when you use voice input. Tempo does not store dictation recordings after transcription processing.
  • Places and away dates: addresses you enter for place suggestions and travel estimates, and away dates you confirm. Tempo does not request device GPS location; confirmed away periods store dates rather than trip destinations.
  • Safety: friendships, blocks and reports, including the reason, optional note and reported content identifier.
  • Technical information: push notification tokens, AI feature usage and token counts, and operational logs such as request metadata, IP addresses and errors.
  • Website and support: the email you submit to the waitlist and messages or feedback you send us. Essential browser storage supports sign-in and preferences.

We do not access your device address book or read Gmail messages. Information you voluntarily put in notes or calendar events may itself be personal or sensitive; avoid providing information unnecessary for planning.

3. How we use information

We use information to sign you in, maintain calendars, coordinate and book plans, deliver reminders and plan updates, personalise planning, answer support requests, investigate abuse, enforce our Terms and meet legal obligations. We also use feature usage to manage costs and limits and understand whether plans are working.

Depending on your planning settings, Tempo may accept a plan and add it to your calendar automatically. You can review, decline or cancel plans. AI output may be inaccurate.

4. What other people see

Accepted friends can use your free/busy availability without seeing calendar event titles or locations. They can see your profile, notes you mark shared and away dates you choose to share. Private context is not shown to other users.

Participants can see the details, replies and photos of their shared plan, even if every participant is not your friend. Other Tempo users may find your profile by name or username. Contact us if you want to disable discoverability.

Blocking prevents new requests and access to friend-only availability. It does not erase screenshots, previously shared information or events already copied to another person’s calendar.

Profile and plan photos are held in private storage. The server checks access and provides temporary signed links; someone who already received a photo can still retain a copy.

5. AI consent and providers

Before AI features send your personal data to Google Gemini or TypeSafe, Tempo asks for your permission. Choose Allow or Not now. You can withdraw consent in Settings under AI planning and chat. Without consent, AI features are disabled; calendar functions and fixed-time invitations remain available. Withdrawal stops future AI processing but cannot undo completed requests.

Google Gemini: relevant chat and planning text, conversation context, calendar events used for the request (including titles, times and locations where relevant), preferences and participant first names. Dictation audio is sent for transcription when the feature uses Gemini.

TypeSafe: planning and classification text, participant first names, candidate times, shared preferences from consenting participants and decline replies. Calendar classification, routine or trip detection and parsing preferences may send relevant event titles, times or text you provided. Non-consenting participants’ personal context is excluded from AI requests.

These services process data under their applicable agreements and policies. Tempo does not use your content to train general-purpose AI models. Provider retention and permitted uses depend on the applicable service terms and account configuration; withdrawing Tempo consent does not itself delete provider-held copies. See Google’s Gemini API terms. Contact us for questions about provider processing.

Passwords and stored provider credentials are not included in AI prompts. Friends’ raw calendars are not shared between accounts; scheduling uses availability and candidate times.

6. Google user data

Google sign-in provides your authorised name, email and profile photo. Optional Google Calendar access lets Tempo display events, find available times and create or update plans. Tempo does not request Gmail access. If an older grant included email permissions, you can remove it at Google account permissions.

Tempo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements. We use calendar data to provide user-facing calendar and planning functions, not for advertising, sale or training general-purpose AI models. Relevant data is sent to planning providers only with your AI consent as described above. Staff access is limited to authorised support, security, legal needs or appropriately aggregated information.

6.1 Who we share Google user data with

We share Google user data (your Google Calendar data, and your name and email address from Google sign-in) only with the following, and only as needed to provide Tempo’s features. We do not share it with anyone else.

  • Supabase (database and authentication provider): stores your Google Calendar data and account details so Tempo can show your schedule and plan around it.
  • Render (application hosting provider): runs Tempo’s servers, so your Google Calendar data passes through its systems when Tempo reads or updates your calendar. Render does not use it for any other purpose.
  • Google, via the Gemini API (AI processing): with your AI consent, the relevant parts of your calendar used for a request, such as event titles, times and locations, are sent to Google’s Gemini API to suggest plan times. Google does not use this data to train its models.
  • TypeSafe (AI processing): with your AI consent, relevant event titles and times may be sent to TypeSafe to classify calendar events and detect routines or trips, so Tempo can plan around them.
  • Friends you plan with in Tempo: they see only the times you are busy or free, never the titles or details of your events. When you both agree to a plan, its details (time, place and the people invited) are shared with the people in that plan.
  • As required by law: where we must disclose data to comply with a law, court order or legal process, or to protect the rights and safety of our users or others.
  • Business transfers: if Tempo Software Pty Ltd is involved in a merger, acquisition or sale of assets, with notice to you before your data becomes subject to a different privacy policy.

We do not sell Google user data, and we do not share or transfer it to advertising platforms, data brokers or information resellers.

7. Service providers and overseas processing

  • Supabase: authentication, database and private file storage.
  • Render: hosting and processing app requests.
  • Netlify: the marketing website and waitlist infrastructure.
  • Google Gemini and TypeSafe: AI processing described above.
  • Google Maps Platform: addresses you enter for place suggestions and travel estimates; not device GPS location.
  • Google and Apple: sign-in and calendar services you authorise. Apple Push Notification service receives the device token and notification payload.

Providers may process information outside Australia, including in the United States. We take reasonable steps to protect information disclosed overseas consistently with applicable privacy requirements. We may disclose information where required by law, for security or to protect rights, or in a business transfer with appropriate notice and safeguards.

8. Retention and account deletion

We retain account information while needed to provide Tempo. Operational logs and backups follow the hosting providers’ retention schedules. AI providers may retain request data under their applicable terms; provider copies are separate from Tempo’s live database.

Delete your account in Settings → Advanced → Delete account. Tempo removes your account and associated live data and files, disconnects integrations and revokes Apple authorisation where applicable. Older Apple accounts may need to sign in again to permit revocation. If cleanup fails, deletion is not reported as successful and you can retry or contact support.

Copies already held by others, including events on their calendars, may remain. Backup copies expire through provider retention schedules. Limited records may be retained where required for legal or safety reasons. Email us from your account address if you cannot access the deletion flow, or to request removal from the website waitlist.

9. Security

We use encrypted network connections, provider encryption at rest and access controls. Apple provider tokens captured for account deletion are additionally encrypted in a server-only store. Access to production systems is restricted to authorised operators. No service can guarantee absolute security.

10. Your choices and rights

You can edit information, choose private or shared context, disconnect calendars, withdraw AI consent, change notification preferences, remove friends, block users and delete your account. Notification permission is optional.

To request access, correction, a copy of your information or help with deletion, email tempo.calendar.ai@gmail.com. We aim to respond within 14 days and comply with applicable legal deadlines. Rights vary by location. You may complain to the Office of the Australian Information Commissioner or your relevant local authority.

11. Age and changes

Tempo is for people aged 16 and over. We ask users to confirm eligibility during setup. Contact us if you believe someone under 16 has an account.

We update the date when this policy changes and give notice of material changes. Where a new use requires consent, we ask before that processing.