Legal
Privacy Policy
Last updated: June 2026 · Effective immediately
The short version
Your personal data never leaves your phone — except when you speak to Tempo, in which case your message and a summary of your app context is sent to Anthropic's Claude API. There is no developer server.
Voice recognition, text-to-speech, and all thought/task/goal storage happen entirely on-device. We collect no analytics, no crash data, and serve no advertising.
1. Who We Are
Tempo is an Android application built by Jonathon Gammage ("we", "us", "our"). It is an AI-powered ADHD and AuDHD coaching assistant designed to run primarily on your device.
Contact: jonathongammage@gmail.com
2. Data the App Accesses
The table below lists every category of personal data the app works with, where it is stored, and whether it ever leaves your device.
| Data type | What it is | Where it goes |
|---|---|---|
| Voice audio | Microphone recordings for wake-word detection and speech-to-text | On-device only |
| Conversation text | What you say to Tempo (after STT converts audio to text), plus a summary of your tasks, notes, mood, and goals sent as context | Anthropic API |
| Tasks & schedule | Task titles, dates, times, completion status | On-device only |
| Goals & milestones | Goals you set, milestone progress, AI-generated plans | On-device only |
| Notes & thoughts | Voice-captured thoughts, manually saved notes, passively captured ideas | On-device only |
| Mood & energy | Daily check-in scores (1–5 sliders for mood, energy, stress, sleep) | On-device only |
| Relationship notes | Names and social context you enter to help Tempo give relevant support | On-device only |
| Fitness & nutrition | Workout plans, meal plans, dietary preferences you enter | On-device only |
| Financial summaries | If you import a bank CSV, only monthly spending averages are stored — raw transactions are never persisted | On-device only |
| App usage data | Which apps are in the foreground, used to detect distraction patterns | On-device only |
| Notifications | Notification content read to give Tempo real-world context (e.g. upcoming calendar alerts) | On-device only |
| Calendar | Events read/written to sync tasks with your calendar | On-device only |
| Anthropic API key | If you choose to provide your own Anthropic API key, it is stored in local app storage and used in place of the bundled developer access | On-device only — sent only to Anthropic's API endpoint on your behalf |
| XP & progress stats | Points, level, streaks, completion counts | On-device only |
3. The Anthropic Claude API — Read This
When you speak to Tempo, your words (converted to text) and a summary of your app data are sent to Anthropic's Claude API to generate Tempo's response. This is the only point at which any data leaves your device.
Here is exactly what is included in each API call:
- The text of what you just said
- Your current task list (titles, dates, status)
- Recent notes and captured thoughts
- Your mood and energy check-in (if logged today)
- Your goals context
- Your name and support-style preferences (if set)
- The current date and time
How API access works. The app includes bundled API access to Anthropic's Claude, covered by your subscription. You can optionally provide your own Anthropic API key in settings — if you do, it is stored locally on your device and used for your API calls instead of the bundled access. Either way, the developer never receives the content of your conversations with Tempo.
Anthropic's handling of data sent through their API is governed by Anthropic's Privacy Policy. By default, Anthropic does not use API data to train their models. We recommend reviewing their policy directly.
4. Android Permissions and Why We Need Them
| Permission | Why it's needed |
|---|---|
| RECORD_AUDIO | Always-on wake-word detection ("Hey Tempo") and speech-to-text. All processing is on-device. |
| MODIFY_AUDIO_SETTINGS | Manages audio focus so Tempo's voice and your device audio don't conflict. |
| FOREGROUND_SERVICE / FOREGROUND_SERVICE_MICROPHONE | Keeps the wake-word listener running when the screen is off. |
| POST_NOTIFICATIONS | Task reminders and scheduled nudges. |
| SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM | Delivers task reminders at the precise time you scheduled them. |
| RECEIVE_BOOT_COMPLETED | Restarts the wake-word service after a phone reboot so Tempo is ready without you opening the app. |
| WAKE_LOCK | Keeps audio playing during body-double or sleep-sound sessions when the screen turns off. |
| REQUEST_IGNORE_BATTERY_OPTIMIZATIONS | Prevents Android from killing the always-on wake-word listener. Without this, Tempo stops hearing you after a few minutes of screen-off time. |
| PACKAGE_USAGE_STATS | Detects when you open distracting apps during focus sessions so Tempo can gently intervene. Never leaves the device. |
| BIND_NOTIFICATION_LISTENER_SERVICE | Lets Tempo read notification titles to give relevant real-world context (e.g. "You have a calendar alert in 10 minutes"). Content never leaves the device. |
| READ_CALENDAR / WRITE_CALENDAR | Syncs your tasks with your device calendar so they appear alongside other events. |
| READ_CALL_LOG | Used to help Tempo understand social context (e.g. recent calls with people in your relationship notes). Never leaves the device. |
| BLUETOOTH / BLUETOOTH_CONNECT / BLUETOOTH_SCAN | Connects to the optional Tempo wearable patch via Bluetooth Low Energy. |
| USE_BIOMETRIC | Optional biometric lock for the app. |
| READ_MEDIA_IMAGES | Lets you set a custom background wallpaper within the app. |
| VIBRATE | Haptic feedback for notifications and interactions. |
| INTERNET | Required only for Claude API calls when Tempo generates a response. |
4a. Email Marketing (Optional)
During the initial app setup, you are given the option to provide your email address to receive updates about new features and products. This is entirely optional — skipping it has no effect on the app.
If you choose to subscribe:
- Your email address is sent to Klaviyo, our email marketing platform
- Your first name (if you entered one during setup) is included to personalise messages
- We will only contact you about Tempo updates, new features, and related products
- Every email contains an unsubscribe link — you can opt out at any time
Klaviyo's handling of your email address is governed by Klaviyo's Privacy Notice.
To request removal from our mailing list, email jonathongammage@gmail.com or use the unsubscribe link in any email we send.
5. How and Where Your Data Is Stored
All personal data — tasks, goals, notes, mood logs, health data, relationship notes, and settings — is stored in your device's private app storage using Android's standard local storage. It is not backed up to any cloud service by the developer.
If you have enabled Google's automatic app data backup in your Android settings, Android may back up certain app data to your Google account under Android's own backup system. This is governed by Google's Privacy Policy, not ours.
No developer server exists. There is no backend, no database, no analytics pipeline. The developer has no technical ability to access your data.
6. What We Do Not Do
- We do not collect analytics or usage statistics
- We do not collect crash reports or error logs from your device
- We do not serve advertising of any kind
- We do not sell, rent, or share your data with any third party (other than your own API calls to Anthropic)
- We do not store voice recordings — audio is processed on-device in real time and discarded
- We do not require account registration
7. Data Retention and Deletion
Your data persists on your device until you delete it. You can:
- Delete individual tasks, notes, goals, or entries from within the app
- Clear all app data via Android Settings → Apps → Tempo → Storage → Clear Data
- Uninstall the app, which removes all locally stored data from your device
Because the developer has no copy of your data, we cannot retrieve or delete it on your behalf — deletion is entirely within your control.
8. Children's Privacy
Tempo is intended for users aged 13 and over. The app handles sensitive personal health and wellbeing data and involves an AI coaching relationship that is most appropriate for teenagers and adults. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child under 13 is using the app, please contact us and we will assist with removal of any data.
9. Your Rights
Because your data is stored only on your own device and we hold no copy of it, you have complete control by design:
- Access — all your data is readable within the app
- Correction — edit or update anything within the app
- Deletion — delete any data or clear everything via Android's app storage settings
- Portability — your data is stored in standard formats on your device
If you have questions about data related to your Anthropic API usage, contact Anthropic directly at anthropic.com/privacy.
10. Changes to This Policy
If we make material changes to this policy — particularly around any new data flows — we will update the "Last updated" date at the top of this page and note the change in the app's update release notes on Google Play.
Continued use of the app after a policy update constitutes acceptance of the updated terms.
11. Contact
Questions about this policy or your data:
Jonathon Gammage
jonathongammage@gmail.com