Last updated: September 2026
Tempō is built on a simple principle: your data belongs to you.
Tempō Intelligence — smart note extraction, client intent recognition and Day Debrief — runs on your device using Apple’s Foundation Models. Nothing you say or write is sent anywhere to be analysed, and nothing is ever used to train anyone’s model. What Tempō Intelligence writes down becomes an ordinary note, and on the Team plan your notes sync like the rest of your records so that every device shows the same thing; section 4 sets out what is kept where. Voice dictation depends on your operating system, and we would rather set it out than let you assume: on iOS 26 speech is converted to text on your device and the audio does not leave it. On earlier versions Tempō requests Apple’s on-device recognition wherever your language has a model for it; where it does not, the audio is processed by Apple’s speech recognition service under their privacy policy.
When you turn on sync, your data is encrypted in transit and at rest, both on Merano’s servers and in your own iCloud. We never access your synced data for advertising, analytics, or any purpose other than providing the service you’ve subscribed to.
When you create a Tempō account, we collect:
We collect anonymized usage data to improve the service, including:
Subscriptions are processed entirely by Apple through the App Store. We do not store credit card numbers, bank account details, or any payment credentials. We receive only a confirmation of your subscription status from Apple.
We use the information we collect to:
Tempō Intelligence features — smart note extraction, client intent recognition and Day Debrief — process data locally on your device using Apple’s Foundation Models. Voice dictation converts speech to text on your device on iOS 26. On earlier versions it requests on-device recognition where your language supports it, and otherwise uses Apple’s speech recognition service — in which case that audio is processed by Apple, not by us and not by any other third party. Everything downstream of the transcript stays on your device.
No voice data is transmitted to Merano’s servers. Apart from the speech-to-text step described above, which leaves your device only on older operating systems and only where your language lacks an on-device model, AI processing begins and ends on your own device, on every platform. Tempō Intelligence currently runs on iPhone and iPad only.
What Tempō Intelligence produces is an ordinary note, and it is then treated like one. On the Team plan your notes sync to Merano’s servers along with your other records, which is what lets each of your devices and the web app show the same thing, under the same encryption and the same commitment: we never read them, and they are never used to train anyone’s model. On the Personal plan they stay on your device.
Your time entries, client information, invoices, expenses, and notes are stored locally on your device. On the Personal plan they stay there: we never send your time entries, clients or invoices to our servers. The note you type while a timer is actually running is covered separately below.
With the Team plan your data is kept in two places. A copy is held on Merano’s own servers, which is what lets the web app and each of your devices show the same information. A copy is also mirrored to your private iCloud database, which is governed by Apple’s privacy policy. Both copies are encrypted in transit and at rest, and we never access either one for advertising or analytics, or for any purpose other than running the service.
On the Team plan, a timer that is running or on hold is held on Merano’s servers as well as on the device that started it. This is what lets you start a timer on your iPhone and stop it from your Mac or the web app, and it is why the web app can tell you that you are already clocked in somewhere else. It holds the client the timer is against, when each stretch of work started, which of your devices started it, and the note you type while the timer runs. When you clock out it becomes an ordinary time entry and the running record is deleted. On the Personal plan a running timer never leaves your device.
Signing in does not by itself send your work anywhere. On the Personal plan, a signed-in device contacts our servers only to sign you in, to check which plan you are on, and, if you have been invited to a hub, to carry the time you log for that hub’s shared clients. Everything else stays on the device.
Your email, name and subscription status are stored on Merano’s servers, encrypted at rest using industry-standard encryption. This applies on every plan, including Personal, where they are the only things we hold.
Tempō also stores a random identifier that the app creates when you first run it, one per installation, so we can tell which of your own devices a record came from and tell a newly installed app that your work is on another device rather than showing you an empty screen. It says nothing about your hardware, it cannot be used to recognise you in any other app or website, and deleting Tempō discards it. We keep at most ten per account, and they are deleted with the account.
Tempō integrates with the following third-party services:
To change your mind, clear this site’s data in your browser and you will be asked again on your next visit.
You have the right to:
To exercise any of these rights, contact us at privacy@merano.studio.
Active account data is retained for as long as your account remains active and you continue to use the service.
If you request account deletion, all associated data will be permanently deleted within 30 days of your request. On-device data is removed immediately when you delete the app.
We may update this privacy policy from time to time. When we make material changes, we will notify you via email at the address associated with your account and through an in-app notification. We encourage you to review this policy periodically.
If you have questions about this privacy policy or our data practices, contact us at: