Privacy Policy

1Who we are

Actempus is a productivity app that helps you manage goals, tasks, schedules and daily planning, with the help of an AI assistant. Jemai Pty Ltd is responsible for the personal information described in this policy. Our contact details are in section 16.

2Information we collect

2.1 Information you give us

• Account information. Your name, email address and the sign-in method you use (email and password, Google or Apple). If you use Sign in with Apple and choose Hide My Email, we receive only Apple's relay address. Sign-in is handled by Google Firebase Authentication. We never receive or store your password.
• Profile and onboarding. Your time zone, the life priorities you rank (for example "Health & Fitness" or "Career & Work") and any custom categories you create. You can also give us your gender (optional, and "prefer not to say" is available), a profile photo (optional) and the name you give your AI assistant.
• Goals and tasks. Goals, target dates, priorities, tasks, recurring schedules, task descriptions, task locations you type in, and the history of what you complete, skip, reschedule or miss.
• AI assistant conversations. The messages you send the assistant, its replies, plans it proposes, and any voice messages you record. See section 5.
• Notification preferences. Which notifications you want, reminder lead times, travel mode and leave-time buffer.
• Support enquiries. Anything you send us when you contact support.

2.2 Information from connected services

• Calendar data from Google Calendar, Microsoft Outlook or Apple iCloud Calendar, if you choose to connect one. See section 3.
• Subscription status from RevenueCat, the Apple App Store and Google Play: whether you have an active Pro subscription, renewal and cancellation events, and an anonymous customer identifier. We never receive your card or payment details, which are handled by Apple or Google.
• Sign-in details from Google or Apple when you use them to sign in: your name, email address and a unique account identifier.

2.3 Information collected automatically

• Device location, only while the app is open and only if you allow it. See section 6.
• Push notification token. A Firebase Cloud Messaging token and your device platform (iOS or Android), used to send you notifications. It is removed when you log out.
• Diagnostics and app analytics. The mobile app uses Firebase Crashlytics to collect crash reports (device model, operating system version, app version and crash details).
• Service logs. Our servers record technical information such as request times, error messages and IP addresses, which we use to keep the Service running securely. We do not write your calendar contents or your location coordinates to these logs.

3Your calendar data

Connecting a calendar is optional. Actempus works without one. If you connect a calendar, here is exactly what happens.

3.1 Calendars we support and the permissions we request

We ask for write access as well as read access because Actempus syncs in both directions.

3.2 What we read from your calendar

• Event titles, descriptions and locations
• Start and end times, all-day status and time zone
• Recurrence rules (for example "every Tuesday") and changes to single occurrences
• Calendar names and identifiers, and the email address of the connected account
• Technical sync information, such as change tokens and webhook subscription identifiers

We do not read or store attendee lists, invitation responses, attachments, or conferencing details other than any meeting link that appears in an event's location field. We do not access your email, contacts, files or any other data in your Google, Microsoft or Apple account.

3.3 What we write to your calendar

• Tasks you create in Actempus are added to your connected calendars as events, with the task's title, description and time. Recurring tasks are added as a single recurring series.
• Changes you make in Actempus to an event imported from your calendar (its title, description, date, time or recurrence), and deletions you make, are written back to the calendar the event came from.
• Changes made through the AI assistant. If you ask the assistant to plan or reschedule something and agree to the change in the chat, the resulting task changes are written to your calendar in the same way.
• Changes you make in your calendar to events we added are synced back into Actempus. For example, if you delete a recurring series in Google Calendar, its future dates are removed from Actempus.

We never add attendees, send invitations, set provider-side alarms, attach files, change sharing settings or publish your free/busy information. We do not create, delete or rename calendars themselves.

3.4 How we use calendar data

We use your calendar data only to provide features you can see in the app:

• showing your calendar events alongside your Actempus tasks in one schedule
• finding free time and warning you about clashes when you create or move a task
• helping the AI assistant plan and reschedule around your existing commitments (section 5)
• sending the reminders, missed-task alerts and daily or weekly summaries you have turned on
• working out when you need to leave for an event that has a location, if you use leave-time alerts (section 6)

We do not use calendar data for advertising, we do not sell it, and we do not use it to build profiles for anyone else.

3.5 How sync works and how credentials are stored

For Google and Microsoft, the provider notifies our servers when something changes and we fetch only what has changed. Apple iCloud does not offer this, so we check your chosen iCloud calendar every few minutes. Access tokens, refresh tokens and app-specific passwords are encrypted at rest. They are never shown in the app, never returned by our API and never written to logs.

3.6 Disconnecting a calendar

You can disconnect any calendar from the app's settings. When you do, we immediately stop syncing it and delete its stored credentials. We also remove the events Actempus added to that calendar (where the provider still allows it) and remove that calendar's events from your Actempus schedule. You can also revoke our access directly from your Google account, your Microsoft account or appleid.apple.com.

4Google API Services: Limited Use

Actempus's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features described in section 3.
• We transfer Google user data to others only when needed to provide those features (for example, to our AI service provider to plan around your schedule), to comply with law, for security, or as part of a merger or acquisition with your notice.
• We do not use or transfer Google user data for serving advertisements, including retargeting, personalised or interest-based advertising.
• We do not sell Google user data, and we do not use it to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve or train generalised or non-personalised AI or machine-learning models.
• Our staff do not read your Google user data unless you give us explicit permission for specific data (for example, in a support request), it is needed for security purposes such as investigating abuse, it is needed to comply with law, or the data has been aggregated and anonymised for internal operations.

We apply the same commitments to calendar data we receive from Microsoft and Apple.

5The AI assistant

Actempus includes an AI assistant that can generate a plan for your goals, answer questions, and plan or reschedule tasks. It is operated by our AI service, which uses large language models hosted on Amazon Bedrock (Amazon Web Services).

What we send to the AI service

When you use the assistant, we send only the information it needs to answer you, which may include:

• your message or voice recording, and recent messages in the same conversation
• your first name, the name you gave the assistant, your time zone and, if provided, your gender
• your priorities, goals and tasks
• relevant parts of your schedule, including the titles and times of calendar events, and the names of your connected calendars
• a short summary of your preferences built from earlier conversations, so the assistant can personalise its help (this summary is deleted with your account)
• your current location, only if you have allowed location access and the request needs it

Voice messages are stored securely and converted to text so the assistant can respond. Your conversations and preference summary are stored on our systems, including our AI service, so the assistant can remember context. They are deleted when you delete your account.

What the AI does not do

• Amazon Bedrock does not use your prompts or responses to train its models, and does not share them with the model providers.
• We do not use your conversations or calendar data to train general-purpose AI models.
• Any change the assistant makes to your tasks or calendar is one you have asked for or agreed to in the chat.

AI responses can be inaccurate. Please check plans and suggestions before relying on them.

6Location information

Location access is optional and controlled by your device settings. We use it for two features:

• Weather. When the home screen loads, the app may send your current coordinates so we can show local weather (from the Google Maps Platform Weather API). We do not store these coordinates against your account.
• Leave-time alerts. If you turn these on, we store your last-known location only, overwriting it each time you open the app. We use it with the location of your upcoming event and Google's traffic-aware travel times to tell you when to leave. Event locations are converted to coordinates using the Google Geocoding API.

We only collect location while the app is open. We never track your location in the background, and we never keep a location history. Your stored location is wiped when you turn off location access, once it is more than 24 hours old, and when you delete your account. Our support staff can see whether leave-time alerts are working for you, but cannot see your coordinates. If you do not allow location access, these features simply stay off and everything else in Actempus keeps working.

7How we use your information

We collect, hold, use and disclose personal information to:

• create and manage your account and keep you signed in securely
• provide the Service: goals, tasks, schedules, calendar sync, the AI assistant, reminders and leave-time alerts
• send the push notifications you have turned on
• manage your subscription, AI usage allowance and free trial
• respond to support requests and communicate with you about the Service, including important changes
• keep the Service secure, prevent fraud and abuse, and fix errors
• understand how the app is used, in aggregated or de-identified form, so we can improve it
• comply with our legal obligations

We will not use your personal information for any other purpose unless you would reasonably expect it, you consent, or the law requires or permits it. We do not send marketing emails. If that ever changes, we will ask for your consent first, and you will be able to opt out at any time.

8Who we share it with

We do not sell or rent your personal information. We share it only with the service providers that help us run Actempus, under contracts that require them to protect it and use it only for that purpose, and in the other limited cases listed below.

We may also disclose personal information:

• when required or authorised by law, or to respond to a valid request from a court or government authority
• to protect the rights, safety or property of our users, the public or Actempus
• to a buyer or successor if our business is sold, merged or restructured, in which case this policy will continue to apply to your information
• with your consent

9Overseas disclosure

Our primary database and servers are hosted by Amazon Web Services in Sydney, Australia. Some of our service providers process information outside Australia, mainly in the United States, and may also use facilities in other countries where they operate. This includes Google (Firebase and Google Maps Platform), Microsoft, Apple and RevenueCat. Your calendar data also stays with your calendar provider wherever they store it. We take reasonable steps to make sure these providers protect your information in a way that is consistent with the Australian Privacy Principles.

10How we protect it

• All data travels between the app and our servers over encrypted connections (HTTPS/TLS).
• Calendar credentials are encrypted at rest and only decrypted when we talk to your calendar provider.
• Passwords are handled entirely by Firebase Authentication. We never see or store them.
• Every request is checked against your verified sign-in, and you can only access your own data.
• Files such as profile photos and voice messages are stored privately and accessed through short-lived links.
• Access to production systems is limited to authorised staff who need it to do their job.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

11How long we keep it

• While your account is active, we keep your information for as long as you use the Service.
• Calendar data. Cached events are kept while the calendar is connected. When you disconnect it, its events are removed from Actempus and its credentials are deleted.
• Location. Only your last-known location is kept, and it is wiped after 24 hours or as soon as you turn off access.
• Push tokens are removed when you log out.
• When you delete your account, we permanently delete your sign-in and all of your Actempus data straight away. This includes your profile, priorities, goals, tasks, calendar connections and credentials, AI conversations and preference summary (including the copy held by our AI service), voice recordings, profile photo, location, device tokens and notification history. This cannot be undone. Copies held in our encrypted backups are removed as those backups are overwritten on their normal rotation.
• Records of your purchases are kept by Apple, Google and RevenueCat under their own policies.

12Your choices and rights

In the app

• Access and correct your profile, goals, tasks and preferences at any time.
• Disconnect a calendar from settings.
• Turn location off in your device settings. Leave-time alerts and local weather will stop, and your stored location will be wiped.
• Manage notifications in the app's notification settings or your device settings.
• Delete your account from the app's settings. This deletes your sign-in and all your Actempus data, as described in section 11. Cancel any subscription through the App Store or Google Play as well, because deleting your account does not cancel billing with Apple or Google.

By contacting us

Under the Australian Privacy Principles, you can ask us for a copy of the personal information we hold about you and ask us to correct it. If you are in the European Economic Area, the United Kingdom or another place with similar laws, you may also have the right to erasure, restriction, objection and data portability, and the right to withdraw consent. Where we rely on consent (for example, for location or calendar access), you can withdraw it at any time. To make a request, contact us using the details in section 16. We will respond within 30 days and may need to verify your identity first.

13Access by our staff

A small number of authorised Actempus staff use an internal support console to help users and keep the Service running. The console can show your account details, goals and tasks (which can include events imported from your calendar), subscription and AI-usage status, notification history and the status of your connected calendars. It never shows calendar credentials or location coordinates. Staff only open an individual account when needed to answer your support request, investigate a security or abuse issue, or meet a legal obligation. The commitments in section 4 apply to any data that came from your calendar.

14Children

Actempus is not intended for children under 16, and we do not knowingly collect personal information from them. If you believe a child under that age has given us personal information, please contact us and we will delete it.

15Changes to this policy

We may update this policy from time to time. If we make a significant change, for example to how we use your calendar data, we will tell you in the app or by email before it takes effect. The "Last updated" date at the top shows when the policy last changed.

16Contact us and complaints

For any privacy question, request or complaint, please contact our Privacy Officer:

• Email: actempus.dev@gmail.com
• Post: Jemai Pty Ltd, 16 Harvard Cct, Rouse Hill NSW 2155, Australia

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) on 1300 363 992. If you are outside Australia, you can also contact your local data protection authority.