Tempo Privacy Policy
Draft for the test build · Version 2026-10-25
This notice covers the Tempo app, activation, purchases and support. It describes the current test implementation. Retention schedules and international-transfer arrangements still need to be finalised before public launch. A website may need its own notice for any separate tracking it uses.
1. Who is responsible
indiefalcon is responsible for the personal information it processes for Tempo. For privacy questions or requests, email [email protected]. Feedback can be sent to [email protected].
2. Gestures and information on your Mac
Touch contacts are processed locally to recognise gestures and control volume or mute. Tempo does not upload raw finger coordinates, recordings, audio, microphone content, typed text or a stream of individual gestures for analytics.
Preferences, diagnostic messages, installation identity and a signed activation certificate are stored on your Mac. Clipboard text is read when you explicitly choose Paste for a licence key. macOS permissions allow particular local actions; granting them is not agreement to analytics.
3. Purchases and licensing
Stripe handles checkout and payment details. Its checkout may collect your name, email address, billing information and payment details under its own privacy policy. Tempo does not receive full card details.
Our Azure backend stores the purchaser email, amount, currency, purchase timestamps and Stripe transaction references to issue licences, deliver emails and reconcile purchases. The current implementation does not copy the purchaser name from Stripe into the licence database.
Activation sends the licence key, a random installation ID and a hashed identifier derived from the Mac to our Azure service. The hash is a persistent device identifier, not anonymous information. Licence and activation records enforce the two-Mac limit and allow the same Mac to reactivate. The licence key is used transiently by the app; the offline entitlement is saved as a signed local certificate.
Purchase and activation are different records: buying a licence does not itself count as activating a Mac. You can use activated Pro offline. Operational processing for payment, licence delivery and activation is necessary to provide Pro and is not turned off by declining optional analytics.
4. Optional usage analytics
Analytics is off until you choose Allow. You can decline or change your choice in Settings → Privacy without losing any Free or Pro feature.
If enabled, the app sends Mixpanel app launch events, the first successful volume gesture, settings changes and a daily settings snapshot when launched. Events include a random analytics installation ID, timestamps, elapsed days since the first locally observed launch, app version/build, macOS major/minor version and Apple Silicon or Intel architecture.
Settings include three- or four-finger trackpad volume preference, rounded trackpad/mouse sensitivity, gesture switches, Magic Mouse enable preference, native indicator preference and Free/Pro state. These are preferences, not a record of every gesture or proof that particular hardware is connected.
We do not send your email, name, licence key, Mac serial number, device name, raw hardware identifier or audio to Mixpanel. Its current project uses the US endpoint. Network requests expose your IP address to the receiving service; IP-based country, region and city enrichment is disabled. Country-only analytics is planned but is not enabled by this build and would require a new choice before collection.
Turning analytics off cancels pending uploads, clears unsent events and deletes the local analytics ID. It cannot recall events already received. Enabling it again creates a new ID. To request deletion of previously sent events, email us with the analytics ID shown in the analytics details before switching sharing off. Deletion currently requires manual action by us. See Mixpanel’s privacy policy.
5. Updates, support and third-party services
When configured, update checks and downloads contact our Cloudflare-hosted update feed and files through Sparkle. The hosting provider receives network information such as IP address and request metadata. Sparkle profile reporting is disabled. Automatic checks, downloads and installation default on; you can turn them off in Settings or check manually. These requests are separate from optional product analytics.
Support and feedback email includes whatever you send, your address and normal email metadata. Incoming correspondence uses our existing Microsoft 365 mail route. Production licence emails are being configured through Resend, which processes the recipient email address and licence-message content to deliver the email. Replies are directed to [email protected] through our existing incoming mail route. Historical sandbox licence delivery used a temporary Microsoft 365 sender in a separate organisation. Production checkout, licence email delivery and activation are enabled; end-to-end owner acceptance testing is in progress. See Resend’s privacy policy.
Buy Me a Coffee support is optional and separate from Pro purchases. Its embedded badge may load third-party scripts, fonts or assets while displayed, exposing network request information even if app analytics is off. Selecting it opens its service. If you contribute, Buy Me a Coffee may make supporter details, such as your name, email and contribution, available to us for handling that support. See its privacy policy. The badges are hidden when Pro is activated.
We use service providers including Microsoft Azure, Microsoft 365, Resend, Stripe, Cloudflare and Mixpanel for these purposes. We do not sell your personal information. Providers may also process information for their own purposes under their policies.
6. Why we process information
We rely on performance of a contract for purchases, licence delivery and activation; legal obligations for required financial records; and legitimate interests for proportionate security, abuse prevention, operational troubleshooting and support. Optional product analytics relies on your consent, which you can withdraw. We will assess and document these bases for production rather than treat acceptance of this notice as blanket consent.
7. Storage, retention and international processing
The analytics queue on your Mac is limited to 100 unsent events and four days. Preferences and activation information remain locally until removed or reset. Removing the app alone may leave its preferences or Application Support files behind.
Server purchase and activation records currently have no automatic expiry configured. Mixpanel event retention and email/operational log retention have not yet been finalised. We do not promise an implemented 90-day deletion schedule. Before public launch we must set retention periods based on the purpose, required accounting records and deletion rights, and update this notice with those periods or clear criteria.
Some providers, including the US Mixpanel project, process data outside the UK. Applicable processor agreements and international-transfer safeguards must be confirmed before public launch. This draft does not claim those arrangements have already been verified. Access to backend data and signing credentials is restricted; no storage or network system can be guaranteed risk-free.
8. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. You can withdraw analytics consent at any time without affecting earlier lawful processing. Some information may need to be retained for legal obligations or valid security purposes. Contact us with enough information to identify the relevant purchase, activation or analytics ID; do not email passwords or card details.
You can complain to the UK Information Commissioner’s Office or your local data protection authority. We would welcome the opportunity to resolve your concern first.
9. Changes
We will keep this notice available in the app and update it when practices change. A material expansion of consent-based analytics will require a new choice, not an assumption that earlier consent covers it. Contact: [email protected].