Privacy Policy

• You own your Memories. Your Brain Dumps, calendar blocks, and journal entries belong to you. We only process them to run the app for you.
• Local-first. Your data is stored on your device first (in a private on-device database). When you're signed in, it's mirrored to your account so you can access it across devices.
• Signed-out data never leaves your device. Guest and anonymous dumps stay in your browser's private on-device database (IndexedDB). If you clear your browser, we can't recover them.
• We don't sell your data. No ads, no analytics cookies, no cross-site trackers, no data brokers.
• AI providers don't train on your inputs. Full detail below.
• Tempryn never receives or stores raw voice audio. Speech-to-text is handled by your browser or phone's own speech service, and we only ever see the resulting text.
• Delete anytime. One button in Settings wipes your account within 30 days.

Tempryn is operated by Tempryn by Cris Velk (Ohio, USA). For any privacy question or request, email hello@dayforge.io.

You own 100% of your Memories and Brain Dumps. The raw text you dump, the calendar and task entries the AI creates from it, and your journal history, all yours. We hold a narrow, revocable license to store, transmit, and process that content only to operate the Service for you (syncing across your devices, running AI organizing, showing you the results). We do not use your content for our own purposes, we do not sell or license it to anyone, and we do not train models on it. You can export or delete it at any time.

• Account info. Your email address and a hashed (scrambled, one-way) copy of your password. If you sign in with a third-party provider, we also receive your name, profile picture URL, and that provider's user identifier.
• Your content. The brain dumps you type or dictate, the calendar and task entries the AI creates from them, your journal history, and simple task completion counts.
• Plan, purchase history & usage metadata. Your plan tier, your AI credit balance, refill balance, subscription status, and a record of the purchases and renewals on your account, so we can enforce your allowance and process billing.
• Voice audio (in passing, never stored). When you use the microphone, your browser or phone's built-in speech service processes the audio to produce text. On Chrome and Android that audio is sent to Google's speech service, and on Safari/iOS to Apple's, under their own privacy policies. Tempryn never receives, stores, or has access to the audio itself, only the resulting text.
• Support messages. Anything you send through the feedback form.
• Sign-in security logs. Our authentication layer keeps standard security records (approximate IP address, browser user-agent, sign-in timestamps) to protect your account from abuse.
• Admin action logs. If an operator ever takes a destructive action on an account, we record who did what and when, so we stay accountable.
• Anonymous usage counts. Our own first-party counter records simple event names, page landed, tried it, signed up, alongside an anonymous 12-character visitor ID generated in your browser. No email, no content, no third-party identifier is attached. If you go on to create an account, that visitor ID is saved onto your profile once so we can measure how well our landing page converts, and it is deleted when you delete your account.
• Crash reports & diagnostics. When the app hits an unexpected error, our hosting platform receives the error message, the technical stack trace, and the in-app page path where it happened, so we can fix the bug. These reports do not include your brain dumps, journal entries, email address, or payment details.

• No advertising cookies, no third-party analytics SDKs, no cross-site trackers or profiles.
• No location or GPS data.
• No contacts, photos, or files from your device.
• No device fingerprinting.
• No stored voice recordings, Tempryn never receives the audio, and neither we nor our providers keep a copy of it for us.
• No device calendar, contacts, photos, or files from your device.
• No web browsing history and no health or fitness data.
• No payment card numbers. Our PCI-compliant payment processor handles card details directly; we only see whether the charge succeeded and the resulting plan state.

We call the storage layer "the Vault" because it's designed to hold your memory for the long run.

• On-device first. Brain Dumps, calendar events, backlog items, and journal entries live in a private, per-account IndexedDB database inside your browser. Small metadata (sync timestamps, your device ID, app preferences) lives in local storage.
• Encryption in transit. Every request between your device, our Encrypted Database Host, our Secure AI Gateway, and our payment processor travels over HTTPS/TLS.
• Encryption at rest. Our cloud database and backups are encrypted at rest by our Secure Cloud Infrastructure.
• Per-account isolation (Row-Level Security). Every row in the cloud database carries your user ID and is gated by database-level policies so that only your account can read or modify your rows. Even if application code were to try to fetch someone else's row, the database refuses.
• Tombstoned deletes across devices. When you delete an item, a "tombstone" propagates to every device you're signed into so the deletion sticks and can't be resurrected by a stale offline copy.
• Password hygiene. Passwords are hashed by our authentication layer, we never see them in plain text, and new passwords are checked against an industry breach-corpus so you can't reuse a compromised one.
• Admin re-authentication. Sensitive operator actions require the operator to re-enter their password and are written to a permanent audit log.

When you tap the microphone, recording uses your browser's built-in speech recognition. That means Chrome routes the audio to Google and Safari routes it to Apple, under their own privacy policies. Tempryn never receives or stores the audio itself.

Once your browser converts speech to text, that text is:

• Saved on your device (in the Vault).
• Sent to our Secure AI Gateway (see below) so it can be turned into tasks and calendar entries.
• If you're signed in, mirrored to your account row of our Encrypted Database Host so it syncs across your devices.

The text of your dumps is sent through our Secure AI Gateway to third-party LLM providers, so it can be structured into tasks and calendar entries.

Vault Scan (personal achievements). If you are signed in, once a day Tempryn sends your completed block titles, notes, categories and dates, plus your recent journal entries, through the same Secure AI Gateway so it can decide whether you hit a milestone worth minting a personal achievement for, and, when it does, generate that badge's artwork. It runs at most once every 24 hours and never sends your email, payment details, or anyone else's data. You can turn Vault Scan off at any time in Settings; the achievements you already earned stay in your Vault.

Based on the current published API terms of those providers:

• Your inputs are not used to train their general models.
• Providers may retain inputs for a short period (typically up to around 30 days) to detect abuse and enforce their safety policies, and then delete them.
• Providers do not receive your account email, password, payment details, or the identity of other users.

AI training, opted out, confirmed (as of August 11, 2026). Our AI infrastructure provider has applied an account-level opt-out to Tempryn. Your data, prompts, and content are not used for model training, fine-tuning, or evaluation. This is the confirmed current state, not a pending request.

Gateway-side retention, still on, and we're saying so. Our Secure AI Gateway always records summary metrics for each AI call (model, token counts, latency, cost, success/failure status). Separately, the gateway provider's current configuration also retains the content of prompts and model responses for up to 90 days for operational debugging, on infrastructure we don't control. Turning that retention off, and purging payloads already stored, is a control the provider offers only on a higher-tier workspace plan, which we are evaluating. Tempryn does not use, review, or build features on top of that stored content, and we will date-stamp this section the moment the retention setting changes.

Your data inside the Tempryn, your entries, blocks, journal, and account, is unaffected by any of the above and continues to follow the retention rules described below. If provider terms or our gateway configuration change, we'll update this section and, for material changes, notify signed-in users.

Cloud content lives in our Encrypted Database Host (United States). AI processing runs in the United States through our Secure AI Gateway. Payments run through a PCI-compliant payment processor. If you're located outside the US and use the Service, you consent to your data being processed in the US under appropriate legal safeguards.

We only use what's needed to make the app work: a sign-in session token from our authentication layer, and browser storage (IndexedDB + local storage) for your offline content and app preferences. No advertising cookies. No analytics cookies. No third-party trackers.

We keep your content until you delete it. Deleting an item in the app removes it from your device and marks it deleted in the cloud (a "tombstone" so other devices know to remove it too). Emptying Trash performs a hard database delete. Account deletion removes your account data from active systems within 30 days; encrypted backups rotate out on a similar schedule.

How to delete your data: open Settings and use the delete-account button, or email hello@dayforge.io and we'll do it for you. Either route erases your account and all of its content. Full step-by-step instructions live on our account & data deletion page.

Delete your data without deleting your account. Settings also has an Erase my data (keep account) button that permanently wipes your brain dumps, calendar blocks, backlog, journal, task stats, achievements, and AI blueprint from this device and the cloud, while keeping your login, plan, and credits. You can also delete individual items at any time; emptying Trash performs a hard delete.

No matter where you live, you have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can:

• See and edit your data at any time inside the app.
• Delete your entire account from Settings.
• Erase only your content and keep your account, also from Settings.
• Email hello@dayforge.io for an export or any other request.

• Secure Cloud Infrastructure & Encrypted Database Host - hosting, database, and authentication (United States).
• Secure AI Gateway → third-party LLM providers - structures your text into tasks and calendar entries.
• PCI-compliant payment processor, billing. Receives your card details directly; they never touch our systems.
• Browser-native speech recognition (Google on Chrome, Apple on Safari), engaged only when you tap the microphone.

If we ever discover a security incident that affects your personal data, we'll notify affected users without undue delay and, where required by law, within 72 hours of confirming the incident.

Tempryn is not intended for children under 13 (or under 16 in the EU). Please don't use the app if you're below that age.

If we make material changes, we'll update the date above and notify signed-in users the next time they open the app.

Questions or requests: hello@dayforge.io.