Privacy Policy

Account data. When you sign in with a magic link we store your email address (and your name, if your sign-in provider supplies one) so we can identify your parent account and send confirmation emails.

Device data. When you enroll a Mac, the device registers a name (e.g. "Alex's MacBook"), a timezone, and an Ed25519 public key. The corresponding private key never leaves the device.

Usage data. The TempoMinder Mac app records which apps were in the foreground on the managed Mac, for how long, and under which local user account. Each upload is signed by the device's private key and sent over HTTPS to our server.

Policy and overrides. Daily limits, warning durations, and any temporary extra-time grants you create through the dashboard are stored so the Mac app can enforce them.

Web-visit metadata. The TempoMinder Mac app's watchdog daemon observes outbound network traffic on the managed Mac and records the destination host name of each connection — extracted from DNS query responses, TLS ClientHello SNI, and plain-HTTP Host headers. We do not decrypt HTTPS, intercept payloads, capture URL paths, or store packet contents. Visits are aggregated into 10-minute buckets per host before upload to cut down on noise.

We do not use third-party analytics, advertising trackers, or social-media pixels. We do not record keystrokes, screenshots, window titles, document contents, full URL paths, search queries, or any HTTPS request payloads. We do not sell or rent any data to third parties.

Account and device data is used to identify you, authenticate uploads from enrolled Macs, and route policy updates to the right device. Usage data is used to render the dashboard for the parent who enrolled the Mac and to enforce the limits that parent set. Email confirmations are used to verify destructive actions like deleting a device or removing a time limit when that step is enabled for your account.

TempoMinder runs on Cloudflare Workers with a Cloudflare D1 (SQLite) database for storage. Traffic between the Mac app, your browser, and our servers is encrypted in transit (HTTPS). Activity uploads from the Mac app are additionally signed with the device's private key so the server can verify the device identity for each upload.

Pending activity uploads on the Mac itself are discarded after 24 hours so a long offline period doesn't snowball into a stale backlog. Activity events stored server-side are retained while your device is enrolled so the dashboard can render history. Account data is retained while your account exists. Unenrolling a device removes its policy, usage, and enrollment state from our servers.

TempoMinder is intended to be operated by a parent or legal guardian managing their own family's Macs. Usage data is recorded at the parent's direction so the parent can review and enforce time limits. We do not market the service to children and we do not knowingly create separate accounts for minors.

We use Cloudflare to host the service and store the database. We use an SMTP provider to deliver magic-link sign-in emails and confirmation emails. These providers process limited data (request metadata, recipient email addresses) on our behalf and do not use it for their own marketing.

You can unenroll any device from the parent dashboard (Settings → Devices), which removes that device's policy, usage, and enrollment state from our servers. You can request deletion of your account and all associated data by contacting us at the address below.

If we make material changes to how we handle data we'll update this page and adjust the "Last updated" date at the top. If the change is significant, we'll also notify account holders by email.

Questions about this policy or your data: email us at privacy@tempominder.com.