Privacy Policy

• Email address (required for login)
• Username (required; publicly visible)
• Password (not stored in plaintext; managed securely by Supabase Auth)

• Profile photo (optional)
• Bio (optional short text)
• Phone number (optional; collected only if you opt into contact-based friend discovery during onboarding; retained long-term to allow friends who join Tempo later to find you by contact; you may remove your phone number at any time in Account Settings → Privacy & Safety → Manage Data)
• Notification preferences (per-type toggles you control in Settings)

When you use Tempo, you create content that we store, including:

• Song and album ratings and descriptions
• Comments and replies on ratings, songs, albums, and lists
• Curated music lists, including titles, descriptions, and cover images
• Genre and descriptor tags applied to songs or albums
• Custom tag suggestions (including the text of tags you submit)
• Your Rotation (songs currently in heavy rotation)
• Follows, likes, saves, blocks, and content reports

We automatically collect certain information when you use the App:

• Usage data: Actions you take in the App (e.g., ratings submitted, screens viewed, search interactions, follow/unfollow events, tag submissions). We do not collect the text content of your comments or your exact search queries — only query length.
• Technical data: Device type and operating system information.
• Error data: Crash reports and stack traces, which may include device metadata, collected via Sentry.
• Push notification token: Used to deliver notifications; cleared from our systems when you sign out.

Tempo may request the following optional device permissions:

• Apple Music / Media Library: To detect the song currently playing on your device.
• Photo Library: To set your profile picture or list cover images.
• Contacts: To help you find friends already on Tempo by matching phone numbers. Only requested if you opt into friend discovery during onboarding. Contact phone numbers are sent to Tempo's servers for matching only and are not stored or shared with other users.
• Push Notifications: To deliver social activity alerts. You can toggle individual notification types in Settings.

Your profile (username, profile photo, bio), ratings, comments, lists, and other public activity are visible to other Tempo users as part of the core social experience.

We share data with third-party service providers that help us operate Tempo:

• Supabase — database, authentication, and file storage. All user data is hosted on AWS US-East-1.
• Expo / EAS — app build infrastructure and push notification delivery. Push tokens and notification payloads are shared.
• Apple MusicKit API — music catalog search. Search query strings are sent to Apple; no user identity is shared.
• Mixpanel — behavioral analytics. Behavioral events are always collected. If you have consented to analytics, your user ID, username, and email are also linked to these events for user-level analysis. This data is used solely for internal product analytics and is not used for advertising.
• Sentry — crash and error monitoring. Crash data and device information may be shared. User identity is not explicitly linked to Sentry error reports.
• Apple Music / Spotify — deep-link integrations for streaming. Only the URL is passed; no user identity is shared.

We may disclose your information if required by law or in response to valid requests by public authorities. We may also disclose information to protect the rights, property, or safety of Gravity Ventures LLC, our users, or the public.

If Gravity Ventures LLC is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

Tempo does not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

You may update, correct, or delete your account information at any time through Account Settings in the App. You may also email us at natevds44@gmail.com to request access to, correction of, or deletion of your personal information.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the personal data we collect and how it is used.
• Right to Access: You may request a copy of the specific personal data we have collected about you.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Delete: You may request deletion of your personal data by emailing us at natevds44@gmail.com.
• Right to Non-Discrimination: Exercising your CCPA rights will not result in discriminatory treatment.
• Sales/Sharing Opt-Out: We do not sell or share your personal information for advertising purposes. No opt-out is required.

If you are located in the European Economic Area (EEA), you have additional rights under the GDPR, including the right to access, rectify, erase, restrict processing of, and port your data, as well as the right to object to processing. To exercise these rights, contact us at natevds44@gmail.com.