Tempolist privacy policy
Last updated: 15 September 2026.
What Tempolist does not do
Tempolist does not track you across sites, shows no ads, and sells nothing about you to anyone. Your notes are never read, analysed, or used to train anything, and their content never leaves your device without an action from you (see sync and the assistant, below).
To know what to improve, the app measures its own usage in an anonymous, aggregate way, described in the next section. You can turn it off at any time. The only other third parties are RevenueCat, which handles the subscription, and Cloudflare's bot check, described below.
Anonymous usage statistics
To steer the product without guessing, the app counts a few events, such as "a note was created" or "the calendar was opened". These are numbers, never content: no note text, no task label, no calendar data, no due date is ever sent. Ever.
These events are tied to a randomly generated install identifier, unrelated to your identity, your account, or your notes. It only distinguishes installs so we can compute averages, such as how many notes a typical install holds. No IP address is kept.
This measurement is on by default and can be turned off in Settings → Privacy. Turned off, the app sends no events at all.
What stays on your device
By default, everything. Your notes, tasks, calendar blocks and settings live in a database on your phone. Without an account and without sync, nothing leaves the device.
An account is opened only when it is needed: when you subscribe, or when you enter an address to find your notes on another device. Without either, no account exists and nothing from your notes goes to our server; only the assistant, if you call on it, sends it anything (see below).
The bot check
Opening an account, or signing in, goes through a Cloudflare check (Turnstile). It appears inside the app, in a web page loaded from tempolist.co/captcha, most often without asking you anything. It exists to stop programs from opening accounts in bulk. Cloudflare then receives your IP address and technical characteristics of the device, for the duration of the check; we only receive a single-use token, with nothing that identifies you, which the app passes to our authentication provider (Supabase) with the sign-up or sign-in request only. Cloudflare does not use this data for advertising or to follow you across sites.
What leaves, if you turn on sync
Sync needs an account. It opens anonymously first: no email address, no password, an identifier without a name. You can attach an email address later, if you want to find your notes on another device.
The server does not keep your notes in readable form. It keeps a change log: lines such as "this field of this entity is worth this value, at this time, from this device". The full state is rebuilt on your devices, never on the server.
What is kept: your account identifier, your email address if you attached one, and your change log, which contains the text of your notes. Hosting is provided by Supabase, in France (Paris region).
What leaves, if you ask the assistant for help
Nothing leaves unless you ask. The assistant never speaks on its own.
When you call on it, the app sends to our server, which forwards to the model: the labels of your tasks, their times, their estimated durations and their due dates, for the day or week concerned.
The body of your notes never leaves. A task's label is enough to review a day, and what is not necessary has no reason to be shared.
The model is provided by Anthropic. Neither your identity nor your email address is sent to it: our server only forwards the text of the request. Answers are not stored.
What leaves, if you subscribe
Purchases go through the App Store: Apple handles payment, and we never see your payment method. To know who has paid, the app sends RevenueCat, our subscription provider, Apple's receipt and your Tempolist account identifier. RevenueCat notifies our server, which keeps only one thing: the date until which your subscription is active. Nothing else is sent, and none of it is used for advertising.
The tempolist.co website
This policy covers the app. The website that presents it, tempolist.co, counts its visits in an anonymous, aggregate way, to learn which pages and links bring people in. No cookie is set, no IP address is kept, no identifier is assigned to you: only numbers are added up, never an individual journey, and only for visits arriving through a campaign link. This counting is not used for advertising or to recognise you from one visit to the next.
Children
Tempolist is not intended for children under thirteen and does not knowingly collect any data about them.
Your rights
At any time, from the app, in Settings → Account, you can:
- delete your account, which permanently erases the account and everything the server holds about it. Your notes stay on your device;
- stop using sync, which leaves the app entirely local.
Under the GDPR, you have the right to access, rectify, erase, restrict and port your data. Exporting your notes is done from the app, in markdown. For any request: contact@tempolist.co.
You may also lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris, France.
Retention
A note moved to the trash stays there for thirty days, then is erased. The change log is pruned every night: only the latest value of each field is kept. A deleted account is deleted immediately and permanently.
Who publishes Tempolist
MSL INNOV, a French simplified joint-stock company registered under SIREN 911 004 117, whose registered office is at 5 rue des Boutons d'Or, 81380 Lescure-d'Albigeois, France. EU VAT number FR18911004117.
Publication and data controller: the legal representative of MSL INNOV.
Contact: contact@tempolist.co