Privacy

Your files

Your files stay in your folder. There is no account, no sign-up and no cloud database. Nothing of yours lives on our servers.

Tempo is a face on your files. They are plain Markdown or Org in a folder you choose, on your Mac or in your iCloud Drive. Open them in any editor. Delete the app and the files stay.

What the app can send

Crash reports only after you say yes, anonymous usage only after a second yes, and feedback only when you write it — never text from your vault, never file names, never an account. The install id that goes with a crash report is random, stored hashed, and can be reset in the app; nothing sent identifies you.

• Crash reports — asked first. The app asks once, on the first-launch card “Two things can leave this Mac”; only after a yes does a crash send where in the app it stopped to Sentry, with the random install id. Never a word of your vault. Off any time in Settings › General (“Send crash reports”).
• Place and weather on a journal line — only when you ask for them. The place name is worked out by Apple's geocoder on your Mac; the weather is asked of Open-Meteo with your coordinates rounded to two decimals, about a kilometre. Neither reaches us, and the day's file keeps only the name you see.
• Feedback — only what you write. If you send a report from the app, we receive the text you typed, the version, the system, the language and the install id. An email only if you add one, only for a reply.
• The update check — the app asks this site once a day whether a newer version is out. That request carries its version and your macOS version, the way any app's does; nothing is stored about who asked.

Crash reports and anonymous usage

Crash reports stay off until you say yes. With that yes the app also says when it runs — how many sessions on which version — and that goes to Sentry with a random number for this Mac and no name.

Anonymous usage is a separate yes. The app asks once, a week after the first launch, and you can turn it off any time in Settings › General.

With it on, the app sends once a day: the Tempo and macOS versions, the language the app is in, whether you are on the trial or a plan, and which kinds of pages were opened — Today, Journal, Focus and the rest.

It sends no number for your Mac and no counts of what you wrote, and never a file, a word, a name or anything else from your vault. It goes to the maker's own analytics — Umami on our server, no cookies, IP addresses not stored — and to no third party.

The licence door

Not opt-in, but it only exists once you hold a key. When you activate or deactivate a Mac, the key and this Mac's name go to the licence door. A key bought once is never looked at again. A subscription bought earlier is looked at once after each renewal date, and once a day while a payment is late, so a cancelled plan ends when its paid time does: then the key and the activation id go, and the door asks the store for that plan's date.

To stop keys being guessed, the door looks at the address a request comes from for one minute; it is not stored or counted. The door counts the action and the store's answer — never the key, never the Mac.

The widgets

So the desktop can show the session you are in, the app writes one small file for its widgets inside its own container on your Mac — not in your vault, and never over the network. Nothing about it goes anywhere.

Ask AI

With the model that comes with macOS — what Ask AI uses by default — no question and no page ever leaves your Mac: there is no key, no account and no request over the network.

If you choose your own key instead, the question and the pages opened to answer it go to the provider you chose — never to us; the key is kept in the Mac's keychain, never in your vault. If you point it at a model you run yourself, nothing leaves your machine either.

Either way the assistant can only read and search: it never writes, deletes or sends, and an answer reaches your Inbox only when you click. It says it does not know rather than inventing a fact about a person, and it points at a page in Tempo rather than at a file in Finder.

The lock on the app

If you put a password on the app, it is kept as a salted hash in the Mac's keychain — never in your vault, never sent anywhere.

What we never do

• Read your files or your journal.
• Require an account or a sign-up.
• Sell or share anything about you.
• Track you across the web.

This website

This page is served like the rest of maxclax.com and keeps ordinary server logs for a short time. If you sign up for the release mail, we keep your email until you leave it.

If you allow cookies, our store, Lemon Squeezy, sets one for 30 days to record where a purchase came from. Say no, and nothing of theirs loads. The fonts come from this site, not from Google.

The site counts visits with Umami, on our own server: no cookies and no personal data — which pages were read, where visitors came from, and clicks on buttons such as Buy and Download.

By using Tempo you agree to the Terms of Use and the Privacy Notice.