← Privacy overview

TEMPO APPS STUDIO · PRIVACY

TAS PandNota privacy policy

Effective 25 October 2026 · Policy version 1.1

TAS PandNota · com.tempoappsstudio.pandnota

This policy applies to TAS PandNota, including public releases and test versions. Available features depend on your app version and licence.

Who we are

Tempo Apps Studio is the provider of this app and the controller of personal information you send to us for support, licensing or tester administration. We are a sole trader based in Belgium, enterprise number 1043.805.122. For privacy questions or requests, contact info@tempoappsstudio.com.

The app does not require a Tempo Apps Studio account. It does not include advertising or marketing analytics, and we do not sell your personal information. Local app content is not automatically uploaded to a Tempo Apps Studio server. Google Play services and optional transfers are explained below.

Inspection information on your device

TAS PandNota stores properties and addresses, clients and contacts, dossiers and inspections, observations, photographs and floor plans, measurements, signatures, appointments, reports, collaboration records and settings locally. This information enables your inspections and reports. The app does not send inspection files to a Tempo Apps Studio server and does not use AI services to process your inspection content.

You choose the information you record. Obtain any necessary permission and only include information relevant to your work, particularly for occupants, clients, photographs and signatures. Professionals remain responsible for their own lawful handling and retention of client and inspection records.

Permissions and device features

You can select photographs and documents through Android’s file tools, take a photo with a camera app and select or import a phone contact. Contact access is requested where Android requires it; selected details such as names, telephone numbers, email and postal addresses are copied into your local records. Selected media may contain identifying information or embedded metadata supplied with the file.

Bluetooth connects to a paired device for local transfers you initiate; device names and addresses help select the intended participant. Notification and alarm permissions support reminders, and background service support enables configured backups. You can pass an appointment to a calendar app at your request. Manage permissions in Android settings; disabling them may prevent the associated feature from working.

Sharing, collaboration and backups

Exporting or sharing a report gives the chosen file to the recipient or app you select. Local collaboration transfers the selected contributions or report versions to the participant you confirm. Recipients may keep their own copies. Their further handling is outside TAS PandNota’s local controls.

Optional direct Google Drive backup requires your own Google account and consent. Access is limited to files created or used with TAS PandNota (drive.file), not your entire Drive. The connected email address and Google permission identifier are stored locally to display and verify the destination; access tokens are obtained through Google Play services and are not included in backups. When you enable automatic backup or request a backup, the recovery archive is sent directly over HTTPS to your Google Drive, not to a Tempo Apps Studio server. It can contain dossiers, contacts, photographs, reports and other supported local records. Success is reported only after a full upload and download verification. After a new copy succeeds, retention moves older verified copies managed by this installation to Drive trash. Disconnecting stops new automatic backups and keeps existing copies. Delete those copies in Drive and revoke access in your Google Account. Restore uses the same account, validates the archive and does not silently overwrite conflicting dossiers. Backup is not two-way synchronisation. Offline features and local backup remain available without a Google connection.

Manual and optional automatic backups write recovery archives to the folder or document provider you choose. These archives contain the supported local records and files needed for recovery and can include personal inspection information. A cloud provider may upload them to your own account. Automatic backups require configuration and can be disabled. Retention follows the selected number of automatic copies (3, 7 or 14); older managed copies are removed when that cleanup succeeds. A successful local write does not prove that cloud synchronisation has finished.

Exported reports and backup archives are not protected by TAS PandNota’s app lock or PIN. Store them with appropriate access controls. Deleting a record in TAS PandNota does not delete reports already shared, another participant’s copy, external documents or backups. Android’s automatic app-data backup is disabled; use TAS PandNota’s own backup options for recoverable copies.

Google Play, gift and test licences

Where available in your version, Google Play handles one-time Pro purchases, Premium subscriptions and optional coffee contributions. Google collects payment details directly. TAS PandNota processes product identifiers, purchase status, purchase tokens and signed receipts to check purchases and stores entitlement information locally to enable features and restore purchases. Coffee contributions are separate and do not grant a paid package. We do not receive your bank card details through the app.

Gift licences use a locally generated installation identifier. If you choose to send a device code to us, we use it to provide the requested licence. Test administration may include the email address you supplied, an invitation or licence code and its status or validity. This administration is separate from your inspection files. Removing local app data may remove installation-bound licence access; backups are not a substitute for purchase or licence restoration.

Technical Google Play data, updates and reviews

In addition to processing purchases, Google Play Billing automatically sends technical diagnostics to Google. These may include app and library versions, Android version, device make and model, technical device characteristics, language and network context, timestamps, operation results and error codes. Random client and flow session identifiers help link events within the same technical session. These are not advertising identifiers.

These data support the operation, reliability, troubleshooting and technical analysis of Google Play services. They may also be processed when you do not make a purchase. The app has no separate switch to disable this integrated SDK diagnostic processing. Events may be queued locally before transmission to Google. This processing is separate from your inspection photographs, reports and other dossier content; those are not sent to Google as Billing diagnostics.

For update checks, Google Play processes device metadata, the app version and information about installed app modules. Google Play handles any rating or review you choose to submit: it may be public for a public release, while closed-test feedback is shared privately with the developer. You can delete reviews through your Google Play or Google Account.

Data transfers to Google Play use encrypted connections. Billing diagnostics are transmitted over HTTPS/TLS. This protects data in transit and does not mean that exported reports or backup files are themselves encrypted. Recipients, sharing apps and document or cloud providers you choose also apply their own security practices and privacy policies.

Google determines retention and further processing of its technical data under its own policies. We do not promise a fixed retention period for these data and cannot remotely delete them ourselves. See Google’s privacy policy and your Google Account data and privacy settings. For information you send directly to Tempo Apps Studio, you can use the deletion request described below.

Retention and deleting your data

Your local records remain until you remove them through the available app controls or clear local storage. For all local data, use Android Settings → Apps → TAS PandNota → Storage → Clear data (wording varies). This removes local records, settings and local licence information. Uninstalling removes private local app data. Check and retain any backup you need before doing so. A professional user determines the necessary retention of their own inspection records.

Turn off automatic backups to stop new copies. Delete existing archives, exports and external calendar entries separately with the relevant provider, and ask recipients to delete their copies where appropriate. Restoring an older backup can restore deleted records. Removing the app does not cancel a Google Play subscription: manage or cancel it in Google Play. No TAS PandNota account is created with Tempo Apps Studio. For information held by us, use the privacy request route below.

Support, service providers and retention

When you email us, apply to test an app or request a licence, we receive your email address, the details you provide and any attachments. We use them to answer your request, organise the requested test, provide support or administer your licence. Please do not send passwords, payment card details or unnecessary client, calendar or inspection information.

For information we receive, we rely on fulfilling your request or agreement, our legitimate interest in providing and securing our services and handling disputes, and legal obligations where applicable. Where a particular optional activity relies on consent, you may withdraw that consent without affecting earlier lawful processing. An Android permission controls access on your device; it is not a blanket permission for us to use your information.

Support and tester correspondence is handled through our business email services, including OVHcloud and Google. We retain it only for as long as needed to handle the request, administer an active test or licence, resolve a dispute or meet applicable record-keeping obligations. We review its continued need when the matter is closed; we do not apply an extra fixed retention period after an accepted deletion request. If an exception requires retention, we explain the reason and relevant period.

Google Play and the calendar, storage, communication or sharing providers you choose handle the data delivered to them under their own policies. Those providers may process data outside your country, including outside the European Economic Area; consult their policies for locations, safeguards and retention. We do not receive your app content merely because you use one of these services. See Google Privacy Policy and OVHcloud data protection information.

Privacy requests and your rights

To request access, correction or deletion of personal information held by Tempo Apps Studio, email info@tempoappsstudio.com with the app name and “privacy request” or “data deletion” in the subject. Describe the information concerned and preferably use the address you used to contact us. No app account is needed. We may need proportionate information to verify that the request is yours; do not send identity documents unless we explain why they are necessary.

Depending on the circumstances and applicable law, you may also request restriction or portability, object to processing based on legitimate interests, or withdraw consent where processing relies on it. You may lodge a complaint with your competent supervisory authority, including the Belgian Data Protection Authority.

We cannot remotely read or erase records that exist only on your device or in your own calendar or cloud account. A request to us covers information we actually hold, such as support messages, attachments and licence correspondence. Use the local deletion steps above and the relevant provider’s controls for other copies. Google controls retention and deletion of its purchase records and technical Google Play data.

Security and policy changes

Android’s application security protects private local app storage. Protect your device, email and cloud accounts with suitable access controls. Backups and exported files need their own protection; no storage or transfer method eliminates every risk. Only share information with recipients you intend to receive it.

These are general-purpose tools, not services specifically directed at children. Do not send us unnecessary information about children or other people. If you believe such information has been sent to us inappropriately, contact us so we can review and address it.

We update this policy when relevant functionality or data handling changes. The date and policy version at the top identify this edition. The policy describes data handling; availability of individual features depends on your app version and licence.

About TAS PandNota