HushTempo

HushTempo privacy policy

Privacy policy

HushTempo has no cloud journal, account, advertising, or analytics collection in the app. Sun Ryse does not receive your journal or Apple Health readings through the app.

Updated October 14, 2026 · Describes the HushTempo 1.0.0 prototype, including optional automatic activity
Operator: Sun Ryse Software LLC

Who the app is for

HushTempo is intended for adults at least 18 years old, or the higher age required where they live. It asks you to declare your eligibility. It does not collect a birth date or verify identity. A tap, shared cue, or device reading cannot establish consent to intimacy.

Information saved on your devices

When you choose to save a manual session, HushTempo records its identifier, start time, active duration, whether it was connection or breathing practice, and any optional comfort and connection reflections you provide on a 1–5 scale. If you confirm an automatic suggestion, the saved journal entry also records that origin and a candidate identifier. Its times describe the recorded motion pattern, not independently verified sexual-session boundaries. Preferences and unfinished manual session state are stored locally. Only record what you want to keep.

Journal and automatic-activity files use operating-system file protection and are excluded from device backup. Use a device passcode. The iPhone/iPad journal's device-authentication viewing lock is enabled by default; the Watch relies on its passcode and Wrist Detection. The viewing lock does not replace the device's own security protections.

HushTempo is not a backup service. Losing a device or uninstalling the app can erase local records. There is no developer copy to recover.

Optional automatic activity on Watch

This prototype feature is off by default. In Watch Settings, Automatic activity → Find possible activity opens an explanation before you turn it on and request Apple's Motion access. It can then examine recorded accelerometer motion without a Start or End tap for each event. Everyday repeated movement can create a suggestion. Results can be wrong or missing and do not establish sexual activity, arousal, orgasm, or consent.

Each system recording request lasts up to 12 hours. HushTempo requests another window when watchOS allows it to run; renewal and continuous coverage are not guaranteed. Processing can be delayed. Apple may retain recorded motion on the Watch for up to three days. The app shows the requested recording deadline separately from the last motion sample actually received.

HushTempo processes raw motion in a bounded working buffer, extracts summaries, and discards those samples. It does not save raw sample arrays in its own files or upload them. A separate protected local store holds the enable preference, recording and processing status, pending patterns with dates and summaries, and limited identifiers used to avoid replaying deleted or answered patterns.

After a proposed pattern ends, you may answer Was this sexual activity?

  • Yes, save entry saves a journal entry confirmed by you, then a local Yes example, and removes the pending proposal.
  • No, something else saves a local No example and removes the proposal without a journal entry.
  • Not now leaves it unanswered. Dismissing or deleting a possible entry does not label it No.

The feedback store keeps at most 500 examples: your answer, aggregate motion features, observed duration, algorithm version, and a digest used to avoid duplicate answers. Feedback examples contain no raw samples or event timestamps. Labels and summaries remain sensitive local data; a digest is not a guarantee of anonymity. The detector does not train or adapt from these answers yet. No raw motion, proposal, or feedback is uploaded, sent to a partner, or written to Apple Health. This feature does not create a workout or use heart rate for detection.

Turning the feature off stops our analysis and renewal and, after a successful save, clears pending patterns and feedback. A system recording already requested may continue until its window expires, and HushTempo cannot erase Apple's recorder cache. Confirmed journal entries stay until separately deleted. Deleting possible entries alone keeps detection enabled and retains answered feedback. Watch Delete local history turns detection off and clears journal and automatic data; copies already sent to your iPhone must be deleted there separately.

Optional Apple Health access

On Watch, you can explicitly request the latest available heart-rate sample from the last ten minutes. Apple controls Health access. HushTempo temporarily displays the reading and its timestamp; it does not save the sample in the journal, transmit it to iPhone, sell it, or use it for advertising. It does not write to Apple Health or create workouts.

Denied access, missing data, or an old sample does not prevent timing, breathing practice, or journaling. Change Health access through Apple's system settings.

Sending an entry to your own iPhone

A selected Watch entry is sent only when you request it, your paired iPhone is reachable, and receiving is enabled in HushTempo on that phone. The iPhone confirms after saving. The transferred entry contains the journal fields described above, including its manual or confirmed-detection origin where applicable, never heart-rate samples, raw motion, or the feedback store. Completed sessions are not automatically sent.

Each device keeps an independent copy. Sending the same entry again does not create a duplicate on the phone. Delete each device's copy separately.

Shared cue and optional Watch proximity

You can create and share a five-minute invitation with a nearby partner. It contains a random room identifier and secret; anyone you forward it to may use it while valid. The app holds the invitation in memory, while the sharing service you choose may retain its own copy. Local Network access supports encrypted discovery and connection between nearby devices. No developer server is involved.

The connection exchanges readiness, cue timing, and cancellation. Each optional Watch connects through its own paired iPhone. If you enable wrist proximity, temporary Nearby Interaction tokens and a nearby/not-nearby signal also pass over that connection. They do not enter the journal. Journal entries, reflections, pulse readings, names, and GPS coordinates are not sent in these partner-control messages.

Leaving the connected flow clears readiness. The app does not automatically reconnect in the background. Either participant can cancel; proximity and readiness do not establish consent.

Cards you choose to share

The native share sheet exports a generic conversation card that you preview. It contains the chosen prompt and HushTempo branding. It has no session details, ratings, partner identity, dates, or Health readings. The recipient and service you choose handle the exported card under their own policies. HushTempo does not initiate a share automatically.

Optional spoken cues

Sound personalities are off by default. If enabled, the device synthesizes short fixed phrases when a session changes state or you request a preview. Your journal, ratings, timing, and Health data are never spoken. HushTempo does not request microphone access, record audio, use speech recognition, or send speech to a cloud service.

People nearby or on the current audio route may hear spoken cues. Preview discreetly and use Mute voice whenever you want. The voices are synthesized, not recordings of you or your partner.

What the developer receives

The app includes no developer backend, analytics SDK, advertising SDK, contact upload, location collection, or intimate-media capture. Sun Ryse does not receive your journal, Health data, motion samples, suggestions, or feedback through the app. Apple's platform diagnostics and the services you choose for sharing are governed by their own settings and policies.

If you contact support by email, we receive what you choose to send, including your email address and message. We use that information to respond, troubleshoot, maintain necessary business records, and meet legal obligations. Please do not send intimate records, Health screenshots, passwords, or invitation secrets. Email providers may process the message to deliver the support service.

This website and external links

This support website does not connect to your HushTempo journal. It has no account area, payment form, advertising, or analytics script. Our hosting and security providers may process ordinary technical request data, such as an IP address, browser information, requested page, and request time, to deliver and protect the website.

Research links in HushTempo open external publishers' websites. Visiting those optional links may disclose ordinary browser and network information to those sites under their own policies. The Sun Ryse company website has its own website privacy policy.

Retention and deletion

Journal entries remain until you delete them on each device or remove the app. Automatic proposals and feedback follow the separate controls described above. You can delete individual entries or all local history. A failed save or deletion reports an error and retains the prior saved state. If saving a paused or ended session fails, its stopped draft remains in memory while the app is open and may be lost when the app closes.

We retain voluntary support messages only as long as reasonably needed to handle the request, maintain business records, resolve disputes, and meet legal obligations. We do not sell personal information or use journal or Health data for advertising or model training. The optional local feedback examples are not used to train a model in this prototype.

Your choices and privacy requests

You control manual recording, optional automatic activity and Motion access, feedback, ratings, Health access, sound, sharing, and deletion. There is no remote HushTempo account to delete. To request access to, correction of, or deletion of information you sent us through support, contact the address below. Depending on where you live, you may have additional privacy rights and a right to raise a concern with your local data-protection authority. We may need enough information to identify your support request before fulfilling it; do not send unnecessary sensitive documents.

Policy updates

We may update this policy when the product or its data practices change. The effective date above identifies the current version. Material changes to app collection practices will be reflected in the app and its App Store privacy information.

Contact

operations@sunrysetech.com
Sun Ryse Software LLC
30 N Gould St, Ste R
Sheridan, WY 82801, United States