Privacy

Key points

Here's the short version. Everything in it is covered in more detail further down, but you shouldn't have to read the whole page to know where you stand.

• What we collect: the calendar you connect (Google or Apple), Gmail you connect (we read it and draft replies, we never send on your behalf), the to-dos, notes, and contacts you create in the app, the memory and preference files that let the assistant remember how you like things done, your voice when you dictate (and, if you turn it on, real-time voice conversation), your device's location only in the moment you ask for something that needs it, and basic account info like your name, email, and photo.
• Why we collect it: to run the assistant for you. That's the whole reason. Nothing is collected to advertise to you or to sell to anyone.
• Who else touches it: a short list of providers that help us run the service. Google and Apple for the accounts you connect, an authentication provider for sign-in, a database and hosting provider, and the AI companies that power the assistant, mainly Anthropic, with OpenAI handling voice.
• Your rights: you can see what we hold, ask us to correct or erase it, restrict or object to certain uses, withdraw consent for anything optional, control what's shared if you connect with friends, and turn off product analytics.
• A few honest caveats, upfront: full sign-in account deletion isn't built yet, and neither is a self-serve export. Ask us directly for either and we'll help by hand.
• How to reach us: email us any time. We read everything and reply.

Who we are

Temperance is operated by [Legal Entity Name], registered in [State/Country of incorporation], with a registered address at [Registered Business Address] — this is the company responsible for the decisions this page describes about your information. If anything here is unclear, or you think we've gotten something wrong, we'd rather hear from you than not. Reach us at hello@trytemperance.com; if that address isn't active yet, current contact details are posted at trytemperance.com.

What we keep for you

Temperance works by holding the things you ask it to hold, and by connecting to the accounts you choose to connect. Here's what that includes.

• Calendar events from a connected Google or Apple account. You choose which one to connect. We don't support Microsoft accounts.
• Gmail, if you connect it. We read your email and draft replies for your review. We never send on your behalf. There's no way in Temperance to send an email as you, so this isn't a promise we're making, it's how the product is built.
• To-dos, created only inside the app. Nothing is imported from another account or another to-do list.
• Notes, your second brain, contacts, and daily notes, all created and kept inside your account.
• Memory and preference files. As you use Temperance, it keeps a small file of the things worth remembering, how you like your mornings scheduled, names of people who matter, habits you've mentioned, so you repeat yourself less. You can view and edit this yourself in account settings.
• Voice. If you dictate to Temperance, we keep the transcript of what you said. There's also an optional real-time voice mode, designed to stay off unless you turn it on, for talking instead of typing.
• Location, intended to be one time only. If you ask Temperance something that needs to know where you are right now, we use your device's location to answer that one request; the product is designed not to keep a location history.
• Basic account info: your email, name, and profile photo.
• Chat history, so the assistant, and you, can look back on what was asked and done.
• Product usage data, scrubbed so it can't be tied back to what you specifically did or said. More on this under Cookies and analytics below.

Where this comes from: most of the above, to-dos, notes, contacts, memory and preference edits, and basic account info, comes directly from you. Calendar events and Gmail content come from the Google or Apple account you choose to connect. Chat history, transcripts, and product usage data are generated automatically as you use the app.

How long we keep your data

While your account is active, we keep your account information and the content you create, to-dos, notes, contacts, memory and preference files, connected calendar and email data, and chat history, for as long as it's useful to running the assistant the way it's meant to work, which in practice means for as long as your account stays open. We keep information only as long as one of these applies: it's needed to provide the service, it's needed for security or fraud prevention, or we're required to keep it to meet a legal obligation, and we delete or anonymize it once none of those reasons apply anymore. If you ask us to erase specific content or your account, we follow the process described under Your rights and control below rather than this general timeline.

How we use it

We use your information for one thing: to run the assistant for you. That means reading and writing your calendar, capturing your to-dos and the reminders you ask for, remembering how you like things done, and doing the small research and planning you ask for. Email works the same way. Temperance reads and drafts for you, and you decide what actually gets sent. Nothing goes out in your name automatically.

We're working toward Temperance doing more real-world things for you, like making a call, a booking, or a payment. None of that has shipped yet. When it does, the same rule holds: nothing risky or irreversible happens without asking you first, and we'll update this page before any of it reaches real users, not after.

Legal basis for processing (EEA, UK, and similar regions)

If you're located in the European Economic Area, the UK, or another region with similar data protection law, here's the legal basis we rely on for each way we use your information.

• Running the assistant, calendar, email drafting, to-dos, notes, memory, and voice: performance of our contract with you, since this is the service you've asked us for.
• Basic account administration and security, sign-in, fraud prevention, keeping the service reliable: our legitimate interest in operating a secure, functioning product, balanced against your privacy, which is why we limit this to what's genuinely necessary.
• Product analytics: our legitimate interest in understanding how the product is used so we can improve it; you can turn this off at any time in account settings.
• Optional real-time voice mode and any other opt-in feature: your consent, which you can withdraw at any time by turning the feature off.
• Responding to legal requirements or protecting our legal rights: our legal obligation, where applicable.

Where we rely on legitimate interest, we've weighed our reasons for processing against your rights and interests, and we only proceed where we believe our interest doesn't override yours. You can object to this processing at any time; see Your rights and control below.

The AI behind the assistant

Temperance's assistant runs primarily on Anthropic's Claude models, with a smaller Anthropic model handling some lighter tasks behind the scenes. OpenAI is used for two narrower jobs: turning your spoken words into text, and, only if you turn on the optional real-time voice mode, carrying that live conversation. The underlying model provider may change from time to time for reliability or performance reasons. A change like that doesn't change what your data is used for or who it's shared with beyond what's described here.

What we never do

We do not sell your data. Not to advertisers, not to data brokers, not to anyone. We also don't share it with anyone for their own advertising or marketing purposes. When we hand part of a task off to another company you've asked us to use, like a flight search or a grocery order, we send only what's needed to complete that specific task, never for them to use however they want.

We don't use your personal content, your calendar, tasks, notes, or messages, to train Temperance's own models or features. The outside AI systems that power the assistant process your content to carry out your requests, under terms meant to restrict them from using it to improve their own general-purpose models. We'll state the exact commitment from each provider here once we've confirmed it directly with them.

Connected accounts and other providers

Running Temperance relies on a small number of trusted providers. Each one only gets what it needs to do its part, and each is bound to protect it.

• Google, for the calendar and Gmail you connect.
• Apple, for sign-in and on-device calendar access.
• An authentication provider, to handle sign-in securely.
• A database and hosting provider, to store your data and run the service.
• The AI providers named above, Anthropic and OpenAI, to power the assistant.
• A standard email provider, for ordinary account and service email like password resets. This is the service emailing you directly, not Temperance sending email as you.

Microsoft is not a connected provider. If Temperance adds task-specific partners for features like web search or booking hand-offs once those reach real users, we'll name them here.

Friends and shared plans

If you connect with a friend on Temperance, it happens instantly through a shared link. Sending that link is how you consent to connecting. There's no separate approval step buried elsewhere.

What actually gets shared is limited and specific: a calendar invite you send, or a single note or contact page you choose to share. Connecting with a friend never opens up your whole second brain or your ongoing calendar to them.

When two people's assistants coordinate something together, like planning an event, each side only shares what's needed to reach an agreement. Anything the other side's assistant sends is treated as unverified input, not automatically trusted or acted on.

A friend only ever sees your name and photo. They don't see anything about your account internals.

Your rights and control over your data

Depending on where you live, you have a number of rights over your information: to see what we hold, to have inaccurate information corrected, to ask us to erase it, to ask us to restrict how we use it, to object to certain processing (including anything based on legitimate interest), to withdraw consent for anything that relies on it, at any time, and, if you're in the EEA, UK, or a similar region, to lodge a complaint with your local data protection supervisory authority. Here's how these work in practice.

You can ask us to erase your to-dos, notes, and connected content at any time. When you do, we permanently purge it rather than leaving it sitting somewhere recoverable.

A few things are the honest exceptions. A small set of read-only starter templates stays in your account (they're ours, not your data, shown to help you get started). Your daily digest scheduling preference and other device preferences stay too, since they're settings rather than content. Any friend connections you've made stay unless you remove them separately. A connected calendar also stays connected after an erasure request, since disconnecting it is a separate action from erasing your Temperance data; you can disconnect it yourself at any time in account settings.

To correct inaccurate information, most of what we hold, your name, memory and preference files, to-dos, notes, is editable directly in the app; for anything you can't edit yourself, email us and we'll fix it. To restrict processing, object to processing based on legitimate interest, or withdraw consent for an opt-in feature like real-time voice mode, turn the relevant setting off where available, or email us and we'll action the request.

Your sign-in account itself is a separate record from your in-app data, and isn't deleted by this action today. If you want that gone too, contact us directly and we'll handle it by hand. See the next section.

Ordinary deletes inside the app go to an undo area first. If you don't restore something within the current 30-day window, it's automatically and permanently cleared. If you ask us for a full data erasure instead, that request skips the waiting period.

We don't currently offer a self-serve export. If you'd like a copy of your data, email us and we'll put it together for you.

Account deletion: a gap we're closing

Here's something we want to be upfront about. Deleting your data inside Temperance clears your content, but it doesn't yet delete your underlying sign-in account. That's a real gap. Apple requires a genuine in-app account-deletion path for any app that lets you create an account, and Temperance doesn't have one yet. We're planning to close this before, or shortly after, this policy takes effect. Until then, if you want your account itself gone, email us and we'll remove it by hand.

Security

We protect your information with reasonable technical and organizational safeguards, and we limit access to it inside the team to what's genuinely needed to operate and improve the service. As designed, calendar and email credentials are encrypted at rest and database access is restricted on a per-account basis, so one account's data isn't meant to sit open to another's; we're continuing to verify these safeguards through ongoing security review as the infrastructure evolves.

Children's privacy

Temperance is intended for adults and isn't directed at children. As an interim policy while we finalize our long-term approach, we don't knowingly collect data from anyone under 16; this threshold may be revised as we confirm our final policy. If you believe a child has given us information, contact us and we'll delete it.

Cookies, analytics, and tracking

We keep basic product analytics, things like which screens get used and how often, so we can tell what's working. That data is tied only to an internal account ID, not to any advertising identifier, and we don't record your sessions. There's no advertising on Temperance, no ad tracking, and we don't sell usage data to anyone. You can turn analytics off entirely in your account settings.

If your browser or device sends a Global Privacy Control (GPC) signal, we recognize it as a valid request to opt out of any sale or sharing of your information, even though we don't sell or share data for advertising today. Whenever we honor an opt-out or other privacy request you've made, whether through a GPC signal, account settings, or by emailing us, we'll show or send you a visible confirmation that it's been done.

International users

Temperance is hosted and operated in the United States, and your information is processed there regardless of where you're using the app from. When we transfer information out of the EEA, UK, or other regions with similar protections, we rely on recognized safeguards for that transfer, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision, so your information keeps a comparable level of protection.

AI-generated content and automated actions

The responses, drafts, and any action Temperance takes are produced by an AI system, and like any assistant, it can occasionally get something wrong or leave something out. This isn't just a product disclaimer, it's a privacy commitment: anything risky, costly, or irreversible is never done without asking you first, and you can look back at a record of what the assistant has actually done on your behalf.

Automated decision-making and profiling

Temperance's memory and preference files, and the way the assistant tailors scheduling, drafts, and suggestions to you, are built from patterns in your own activity. This is a form of profiling, but it's used only to make the assistant more useful to you, and never to make a legal or similarly significant decision about you, like eligibility, pricing, or employment, without a person involved.

Temperance doesn't make any fully automated decision that produces a legal or similarly significant effect on you today; every action that matters, sending something, booking something, spending money, is confirmed by you before it happens. If that changes as agentic features expand, we'll update this section, complete the appropriate risk assessment, and give you clear notice before it applies to you.

If you'd rather the assistant not build or use a memory or preference profile of your habits, you can clear or turn off memory and preference tracking in account settings, or email us and we'll do it for you.

Changes to this policy

As Temperance grows, we may update this page. If a change is significant, we'll make it clear rather than bury it, and the date at the top will always reflect the current version.

We also review this policy at least once a year, even if nothing has changed, and keep a dated history of substantive revisions available at trytemperance.com/privacy/history (or by emailing us), so you can see what's changed and when.

One commitment we're making in writing: any change that would let us use your conversation or connected-account data more broadly, for example toward training AI models, will come with fresh, prominent notice and a real choice. We won't slide that in quietly.

Questions

Temperance is built by a small team, and we'd rather hear from you than not. Reach us any time at hello@trytemperance.com; if that address isn't active yet, current contact details are posted at trytemperance.com. We read and reply to what comes in.