Privacy Policy
Last updated: October 30, 2026
Tempo Canvas is operated by Ofri Yehuda. This policy explains how information is handled when you use the iPhone app and this website. For privacy requests, contact ofri@ofriyehuda.com.
Using the app without an account
You can use the free sessions and restore a subscription without creating a Tempo Canvas account. Starting with version 1.0.1, new purchases require Sign in with Apple; version 1.0.0 also permits purchases without a Tempo Canvas account. Your profile, preferences, optional task labels, focus history, and collected artwork records are stored on your iPhone. These library records are uploaded for backup and sync only if you choose to sign in.
Optional Sign in with Apple and cloud sync
If you connect an account, Apple provides an account identifier and may provide your name and email address. You may use Apple’s Hide My Email option. Supabase provides authentication and stores your profile, preferences, task labels, session history, and collected-art metadata so they can sync across your devices. This information is linked to your account and used to provide the app’s functionality.
Tempo Canvas uses app-specific database tables. Other applications sharing the underlying hosting project do not receive your Tempo Canvas library through this app.
Subscriptions
Apple handles purchases and payment details. When you sign in and sync using an app version that supports subscription reporting, we store the status reported by your device, including plan, trial status, period end, renewal, test-environment and revocation information, remaining free sessions and app version, to provide account support. Complimentary Plus grants and their administrative history are stored separately. Tempo Canvas uses StoreKit to verify your subscription and trial eligibility. We do not receive your full payment card information.
Our server can also receive and verify signed subscription notifications from Apple. We store limited transaction identifiers, plan, dates, trial and renewal status, price and currency, and refund or revocation status to understand subscriptions and provide support. Purchases made by supporting app versions include your Tempo Canvas account identifier as an Apple app account token, allowing the verified subscription record to be linked to your cloud account. These records are separate from anonymous app-usage reports. Deleting your cloud account removes this account linkage; limited transaction records may remain for subscription operations. Apple’s own privacy policy also applies to Apple services.
Artwork delivery and website hosting
Public artwork images are delivered using Cloudflare and cached on your device. Cloudflare receives the network information needed to serve a request, such as your IP address and the requested image. The website is hosted by Vercel, which similarly processes network information needed to serve and protect the site. Provider infrastructure may maintain operational and security logs under its own retention practices.
Notifications, analytics, and tracking
Timer notifications are local and optional. The app does not display advertisements or sell personal information. App versions with AppsFlyer integration use it to measure installations, app opens and selected actions, including onboarding, focus sessions and subscription-flow outcomes. AppsFlyer receives technical app/device information, an SDK installation identifier and network information such as IP address. IDFA and IDFV collection are disabled, and sharing with advertising partners is blocked. We do not send AppsFlyer your account identifier, name, email, focus intentions, artwork library, payment details or purchase revenue. Turning off “Share usage statistics” stops future AppsFlyer collection. AppsFlyer processes data under its retention practices and our account configuration; the 90-day limit below applies to our first-party reports, not to AppsFlyer. Contact us for deletion requests. See AppsFlyer’s Privacy Policy.
App versions with usage reporting send basic first-party statistics to our Supabase service, including first app use, onboarding completion, Gallery and Progress visits, focus starts, completions, cancellations and durations, free-preview completion, and views and outcomes in the sign-in and subscription flow. This includes use without an account. By default, reports use a random identifier for this app installation and indicate guest or account mode, without linking activity to your account. Activity reports never include your name, email, focus intentions or artwork library. This identifier is not used across other apps. Usage reporting is enabled by default; you can turn off “Share usage statistics” in App settings to stop future reports and clear unsent activity. Reports waiting for a connection may be sent later. The owner dashboard displays aggregate statistics for up to the last 90 days; older activity is removed during routine ingestion cleanup. Turning reporting off does not delete reports already received or disable account sync and subscription-support records.
Supporting app versions offer a separate “Link activity to my account” choice in Settings while signed in. It is off by default and applies to the selected account on that iPhone. If you enable it while usage sharing is on, future signed-in activity is associated with your authenticated account so we can understand individual product journeys and provide support. Earlier and guest activity is not linked retroactively. Turning linking off clears pending linked activity and stops future linkage; turning usage sharing off stops both forms of activity reporting. Already received linked events remain subject to the same 90-day activity retention. Deleting your Tempo Canvas account removes the activity-to-account linkage.
This website uses Google Analytics to understand visits, page views, and interactions with public pages. Google Analytics uses cookies and processes information such as browser and device details, referral sources, and page activity. Advertising personalization and Google signals are disabled. Analytics is not loaded on the owner admin page, and we do not send app library records or account details to Google Analytics. See Google’s Privacy Policy and Google’s analytics opt-out tool.
Our website also measures first-party acquisition: the broad referral source (such as YouTube or Google), a campaign label, public page paths and clicks on our App Store link. A random, first-party session cookie expires after 30 minutes. We retain these reports for up to 90 days and do not include names, email addresses, raw referrer paths, query strings or IP addresses in this dataset. Website sessions are not matched to app installations or cloud accounts. Links through our /go/app redirect record a store-link request, not proof of an App Store visit or download. These first-party reports respect browser Do Not Track and Global Privacy Control signals; signed-in owner sessions are excluded. Apple source reports are separate aggregate summaries.
Session recordings and website heatmaps
Supporting app and website versions use Mixpanel Session Replay to understand navigation and usability. The website also records click positions for heatmaps. Recordings use anonymous installation or browser identifiers, are processed in Mixpanel’s EU data region, and are not linked to your Tempo Canvas sign-in. Text, inputs and images are masked; account screens, focus-intention entry and the website owner dashboard are excluded. Console logs, network request contents, microphone and camera are not recorded. Mobile uploads use Wi-Fi.
In the app, turn off “Share usage statistics” to stop new recordings. Frames already captured may finish uploading. On the website, use the control below; Do Not Track and Global Privacy Control also prevent recording. Mixpanel retention follows the project’s configured plan and retention settings, rather than the 90-day first-party event window. Contact us for deletion requests. See Mixpanel’s Privacy Policy.
Retention and deletion
Local records remain on your device until removed. You can delete your Tempo Canvas account in Profile using “Delete Tempo Canvas account”. This removes your Tempo Canvas cloud profile, focus history, collected-art records, and the account’s saved library on that iPhone. Starting with version 1.0.1, signing in transfers guest progress into the account automatically, and account deletion also clears guest artwork and history on that iPhone. In version 1.0.0, the separate guest library stays. An authentication identity needed by another application is preserved, along with that application’s data.
A limited count and identifiers for up to three free sessions remain on your device so deleting an account does not reset the free allowance. After deletion, the app explains how to remove Tempo Canvas from Sign in with Apple settings. Account deletion does not cancel an Apple subscription: manage subscriptions separately in your Apple Account settings. For help with deletion, contact the address above.
We retain only information needed to provide the service, handle a request, meet applicable obligations, or protect the service. Limited backup or security records may remain until the relevant provider’s retention period expires. If you contact support, we use the information you send to respond to your request.
Service providers and international processing
Apple, Supabase, Cloudflare, Vercel, Google Analytics, AppsFlyer, and Mixpanel process information for the purposes described above. Processing may take place outside your country. Their privacy information is available at Apple, Supabase, Cloudflare, and Vercel.
Your choices
You may keep using the app without cloud sign-in, disable notifications, manage your Apple subscription, and contact us to request access, correction, or deletion of personal information. Available rights depend on your location. The app is not directed at children under 13, and we do not knowingly collect their personal information through an account.
Changes
We will update this page when our practices change and update the date above. Material changes will be communicated as appropriate.