Privacy Policy

Time-Pop is a local-first application. Your time tracking data is stored on your device by default. This policy explains what we collect, when, and why.

Data we collect

Personal Mode (no account): No data is collected. All records remain on your device. No network requests are made.

Pro / Enterprise (with account): We collect your email address for authentication, and sync your time entry records (project, activity, duration) to our cloud infrastructure to enable multi-device access and team reporting. We use Supabase hosted in the EU (Frankfurt, Germany).

Data we never collect

We do not collect keystrokes, screenshots, clipboard content, application usage, browsing history, location data, or any other behavioural monitoring data. This applies to all users in all modes.

Data retention and deletion

You can export your data at any time from the app — CSV and PDF, with no restrictions. To erase your account and all associated data, open the app and go to Settings → Cloud Account → Delete account; we email a confirmation link, and following it deletes everything immediately. You can also start from our account deletion page. If you can no longer sign in, email support@time-pop.com and we will action it within 30 days. For enterprise organisations, admins can configure retention policies. Deletion is permanent and we do not retain backups beyond 30 days.

GDPR

We comply with the UK GDPR and EU GDPR. Our lawful basis for processing is contract performance (providing the service you've signed up for). Enterprise customers can request a Data Processing Agreement (DPA). Contact enterprise@time-pop.com.

Contact

Questions about this policy: support@time-pop.com