Privacy Policy

What stays on your iPhone

TimeUp works without an account. It never asks for your name, your email address or a password.

Everything the app needs — your health readings, the apps you chose to block, your rules, your time reservoir — is stored in a private container on your device, protected by iOS. None of it is sent to us or to anyone else.

Health data

With your permission, TimeUp reads five things from Apple Health: exercise minutes, workouts, steps, sleep and mindful minutes. They are used for one purpose — working out how many minutes of screen time you earned.

The reading is one-way: the app doesn't write anything into Health. Your health data stays on the device, is never transmitted, and is never used for advertising.

You can revoke this access anytime in Settings › Privacy & Security › Health.

Blocked apps

When you pick the apps to block, iOS doesn't give TimeUp their names — only opaque tokens. The app literally doesn't know what you blocked.

It also never sees your usage history: not which app you opened, not when, not for how long. All it receives is a signal saying total usage has reached a certain number of minutes, so it can debit your reservoir and put the block back up.

You can revoke this access anytime in Settings › Screen Time.

Camera

Quick challenges use the front camera to count your reps. The analysis happens live on your iPhone and the images are discarded immediately: nothing is recorded, nothing is sent. Only the number of reps is kept.

Camera access is optional — declining it only disables quick challenges.

Notifications

If you allow them, TimeUp schedules local reminders — a nudge to move, an alert when your reservoir runs low. They're generated by your iPhone. No notification server, no device identifier shared.

Anonymous usage statistics

To know whether the app is actually used and where it breaks, we collect anonymous statistics through PostHog, hosted in the European Union.

What's sent: which screens are opened, which features are used, errors, plus the app version, iOS version and device model. Each installation gets a random identifier so the same phone isn't counted twice — it's tied to no name and no account, and it disappears when you delete the app.

What's never sent: your health data, the identity of your blocked apps, camera images, or anything that could identify you.

These statistics are never sold and never used for advertising. You can turn them off in the app's settings — the app keeps working exactly the same.

Apple

The app is distributed on the App Store, so Apple collects its own download and billing data. If you enabled diagnostic sharing in iOS, Apple may pass us crash reports and statistics that are aggregated and anonymised. Your health data and Screen Time settings are never part of those.

Deleting your data

Time credits expire on their own 72 hours after being earned. Everything else stays until you remove the app.

Deleting TimeUp wipes its container: your reservoir, your rules, your app selection and the random statistics identifier all go with it. Permissions you granted are revoked separately, from iOS settings.

Your rights

Almost none of your data ever reaches us, so you control it directly: your health data lives in Apple Health, the rest lives in the app. Delete the app and it's gone.

For the anonymous statistics, you can opt out in the settings at any time. If you have a question, or believe something isn't right, write to us — you can also contact your national data protection authority, the CNIL in France.

Children

TimeUp is made for adults who want to hold their own leash. It isn't a parental control tool, and it isn't aimed at children.

Changes

If this policy changes in a way that affects your data, we'll tell you in the app before it takes effect. The date at the top always reflects the current version.

Contact

Any question about privacy: hello@tempo.app.

See also the terms of use.