Privacy Policy

This policy explains how House of Holder, LLC (“TempoCue,” “we,” “us”) handles information in the TempoCue mobile app, TempoCue appointment status links, the TempoCue business console and this website (together, the “Services”).

TempoCue works on behalf of the businesses you have appointments with, such as clinics and home-service companies (“Providers”). Your Provider decides what appointment information it shares with TempoCue. Their own privacy notices govern the records they keep about you. Where a Provider is a healthcare organization covered by HIPAA, we handle information from them as their service provider under a written agreement, and that agreement controls if it conflicts with this policy.

Preview notice: TempoCue is currently in a limited preview. Demo profiles and demo clinics in the app use synthetic data that does not describe real people. We do not accept protected health information from healthcare Providers until the required agreements and safeguards are in place.

Information you give us

• Account details: your mobile phone number and, if you choose, your name. We send a one-time code to verify the number; we store only a scrambled (hashed) version of the code, and it expires after 10 minutes.
• Actions you take: taps like “I'm on my way,” “I've arrived” and “Need assistance,” and confirmation codes you enter to add an appointment.
• Notification choices: which channels (app, text, email) you turn on or off for each appointment, and when.
• Caregiver invitations: the name and mobile number of anyone you invite, what they can see, and when access ends.
• Website forms: if you join a waitlist or request a business demo, the name, email, organization, role, location details and message you submit.

Information from Providers

Appointment details your Provider shares so we can keep you updated: the location name, address and phone number, your scheduled time, appointment status (for example, checked in or in progress), estimated service time, arrival instructions the Provider has approved, and the updates they send. We deliberately do not show the type of visit in the app or on status links.

Information collected automatically

• Sign-in session: a random session token stored securely on your device (in the iOS Keychain in the app) so you stay signed in. Sessions expire after 7 days.
• Service logs: our hosting providers record basic technical information, such as IP address, device and browser type, and request times, to operate and secure the Services.
• Audit records: we log security-relevant events, such as sign-ins, caregiver changes, appointment claims and account deletion, to protect your account and meet our obligations to Providers.

What we don't collect

The TempoCue app does not access your location, contacts, photos, camera, microphone, calendar or health data, and it does not use advertising identifiers. We do not use third-party analytics, advertising pixels or tracking cookies.

• To show your appointments, live timing estimates and approved arrival instructions.
• To send the updates you've turned on, and to verify your phone number.
• To let your Provider see your arrival status and requests for help.
• To give caregivers you've invited the access you chose, for as long as you chose.
• To measure and improve how accurate our timing estimates are for Providers.
• To secure the Services, prevent abuse (for example, by rate-limiting verification codes), and comply with law.
• To respond to waitlist and demo requests.

We don't use your information for advertising, and we don't build marketing profiles about you.

We share information only as follows:

• With your Provider: the actions you take on their appointments (such as “on my way”) and your notification choices.
• With caregivers you invite: appointment timing for the scope and period you choose. You or they can end access at any time.
• With service providers who host and run the Services for us under contracts that limit their use of the data, including our database provider (Convex), our web hosting provider (Cloudflare), and our app build and distribution providers (Expo and Apple). If we turn on text or email delivery, our messaging provider will receive what's needed to deliver your messages.
• For legal reasons: when required by law, or to protect the rights, safety or security of people or the Services.
• In a business transfer: if TempoCue is involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We send text messages only to verify your number or for appointment updates you've agreed to. Message frequency varies with your appointments. Message and data rates may apply. Reply STOP to opt out or HELP for help. Texts never include visit details, only timing and a secure link. We don't share your mobile number or text consent with third parties for their marketing.

In the app's Settings and appointment screens you can:

• Turn app, text and email updates on or off for each appointment.
• Disconnect a Provider, which removes their appointments from your timeline and stops updates from them.
• Invite caregivers, choose what they can see and for how long, and revoke access at any time.
• Export a copy of your profile, appointments, updates and caregiver settings.
• Delete your account.

You can also email privacy@tempocue.app to access, correct or delete your information. We'll verify your identity before acting on a request and won't treat you differently for making one. Depending on where you live, you may have additional rights under state privacy laws; we honor those requests as the law requires. If your request concerns records your Provider keeps, we'll direct you to them or assist them in responding.

• Account information is kept while your account is open.
• Verification codes expire after 10 minutes, and sign-in sessions after 7 days.
• When you delete your account, we remove your name and phone number from your profile, end your sign-in sessions and caregiver relationships, and unlink your appointments from you.
• Providers keep their own appointment records according to their legal obligations. We keep security audit records and information we must retain by law or under our agreements with Providers for as long as required, then delete or de-identify it.

We protect information with encryption in transit, access controls that limit each Provider's staff to their own organization, hashed verification codes and session tokens, rate limits, and audit logging. No system is perfectly secure, but we work to protect your information and will notify you and affected Providers of a breach as the law requires.

TempoCue accounts are for adults. We don't knowingly collect information from children under 13 through their own accounts. A parent or guardian may manage a child's appointments through their own account. If you believe a child has created an account, contact us and we'll delete it.

TempoCue is operated in the United States, and information is processed and stored in the United States.

If we make material changes, we'll update the effective date above and tell you in the app or by another appropriate method before the changes take effect.

House of Holder, LLC
30 E Broadway, Suite 203 #1053, Salt Lake City, UT 84111
privacy@tempocue.app

For urgent medical needs, contact your clinic or call 911. TempoCue is not for emergencies.