Privacy Policy

Tempo is built on one simple principle: everything stays on your device. No account, no server, no analytics, no ads, no trackers. Nothing you do in the app is sent to us, because we receive nothing.

Tempo exists on iPhone and on Android. The principle is the same on both, but the two systems don’t offer the same technical safeguards: wherever that difference matters to you, both cases are spelled out separately rather than blurred into a convenient summary.

Who publishes Tempo

Tempo is published by Florent Michenaud. For any privacy-related question, email us at contact@playfan.fr.

The principle: no collection

Tempo runs entirely offline, on your device. We operate no server that would receive your data, we embed no third-party analytics SDK, and we use no advertising identifier. There is no account to create: you don’t enter an email, a password, or any personal information to use the app.

Health data

With your explicit permission, Tempo reads the information needed to credit minutes: workouts (activity type, duration, start and end dates) and, depending on your settings, steps and active calories. This data serves exactly one purpose: turning your activity into screen-time minutes.

• It is read and processed only on your device.
• It is never transmitted to our servers (we have none), to any third party, or to another device.
• It is never used for advertising, marketing, profiling, or resale.
• Tempo only reads: it writes no data back into your health app.
• Only sensor-measured data counts. A manually entered workout credits nothing.

On iPhone — Apple Health (HealthKit)

Tempo reads your workouts, steps and active calories from Apple Health, in accordance with Apple’s HealthKit rules. You can revoke this access at any time in Settings → Health → Data Access & Devices → Tempo.

On Android — Health Connect

Tempo reads four Health Connect permissions, and nothing else:

• Exercise sessions — to credit screen minutes based on the duration and type of your effort.
• Steps — for the step bonus, if you enable it.
• Active calories burned — to refine the credit for certain activities.
• Read health data in background — so your workout is credited even when Tempo isn’t open. Without it, you’d have to reopen the app to see your balance grow; with it, your time is already waiting for you. It grants access to no additional data — only to the same scope, at another moment.

Retention and deletion. Tempo keeps no copy of your health data. It derives minutes from it, then retains locally only the identifiers of workouts already credited, so the same effort is never credited twice. Those identifiers are excluded from backups (see below) and disappear when you uninstall. You can revoke access at any time in Settings → Security & privacy → Privacy → Health Connect, or from the Health Connect app itself, which also shows you a history of the reads Tempo performed.

Blocked apps and phone usage

To block and unlock the apps you choose yourself, Tempo needs to know which app is on screen. How each system allows this differs substantially, and it would be dishonest to pretend otherwise.

On iPhone — Screen Time (Family Controls)

Tempo uses Apple’s Screen Time API (Family Controls, ManagedSettings, DeviceActivity).

• Your app selection is represented by opaque tokens provided by iOS. Tempo doesn’t even know the names of the apps you picked: Apple does not reveal them to it.
• These tokens and your settings are stored locally (including in a shared “App Group” container so Tempo’s extensions and widgets can access them). They never leave the iPhone.
• iOS itself enforces the blocking and re-blocking.

On Android — usage access

Android offers no equivalent to Apple’s opaque tokens. Tempo uses the Usage access permission, which implies a real difference:

• Tempo knows the technical names of installed apps and can see which app is in the foreground. That is required to know when to draw down your balance and when to show the blocking screen — and it is also the only use made of it.
• Tempo reads nothing of what happens inside those apps: no content, no messages, no keystrokes, no pages visited. It observes only the identity of the app on screen, and for how long.
• This information is used live, on the device. It is never kept as a usage log, nor transmitted anywhere.
• Your selection of apps to block is stored locally.

Tempo also uses the overlay permission (Display over other apps) to present its blocking screen, and a foreground service — the persistent notification you see — because Android requires an app that works continuously to say so openly. Finally, Tempo asks to be exempt from battery optimisations: without that, the system can put the countdown to sleep, and your balance stops being trustworthy. This last one is optional, and declining it leaves the app usable.

Other Android permissions

• Physical activity — to read the phone’s hardware step counter when Health Connect has no steps to offer yet.
• Notifications — to tell you about a credit, a balance running low, or a re-block. Nothing else is notified.
• Boot completed — to stand guard again after a restart, without which blocking would vanish at the first power cycle.
• Vibration — for the interface’s haptic feedback.

Data created in the app

Your minute balance, workout history, profiles, conversion rates and preferences are saved locally on your device. This information is neither synced to a server nor shared.

Backup and restore

One exception deserves to be stated plainly, because it qualifies the “everything stays on the device” promise: since version 1.4, Tempo entrusts your statistics to your system’s backup service, so that switching phones or reinstalling doesn’t wipe your history.

• On iPhone through iCloud; on Android through Google Backup (Google Drive).
• This data goes to Apple or Google under your own account, encrypted, and according to the backup settings you chose at the system level. We have no access to it: we still receive nothing.
• What is backed up is limited to aggregates: time earned and spent per period, your current streak, the state of strict mode. No health data — no workout, no step, no calorie — and no app list is ever backed up.
• You can turn this backup off in your system settings (iCloud on iPhone, Settings → Google → Backup on Android).

In-app purchases

Tempo Pro is sold through the in-app purchases of the store your app came from: the App Store on iPhone, Google Play on Android. Payments and subscription management are handled by the store: we neither receive nor store your payment details. Your purchase is validated on-device (StoreKit on iOS, Google Play Billing on Android). These transactions are governed by Apple’s Privacy Policy or Google’s, as applicable.

The movetempo.app website

This website is a static page. It uses no tracking cookies and no analytics tools. A single functional cookie (lang_pref) remembers your preferred language; it serves no other purpose and enables no tracking. One resource is loaded from a third party: the Product Hunt badge in the footer, an image served by producthunt.com, which therefore sees your IP address as for any image; nothing else is sent to it.

Children

Tempo is not intended for and not specifically directed at children. The app relies on a voluntary act of self-restriction by adults: it is a limit you set for yourself, not control exercised over someone else.

Your rights

Since we neither collect nor hold any personal data on our systems, there is nothing on our side to access, correct, export or delete. You keep full control:

• On iPhone — revoke the permissions in Settings → Health and Settings → Screen Time.
• On Android — revoke health access in Health Connect, usage access in Settings → Apps → Special app access → Usage access, and the overlay in Special app access → Display over other apps.
• Uninstall the app to erase all the data it created on your device. To erase the backed-up statistics too, delete Tempo’s backup in your iCloud or Google settings.

Regulations such as the GDPR (EU) or the CCPA (California) grant you rights of access and deletion: they are inherently satisfied here, since all your data stays in your hands.

Changes

We may update this policy to reflect changes to the app or to regulations. The date at the top of the page indicates the last revision. Material changes will be flagged in the app or on this page.

Contact

A privacy question? Email us at contact@playfan.fr.