Skip to content
Legal

Privacy Policy

How Timealo collects, uses, stores and protects your data, and the rights and controls you have.

Draft policy: operator details and legal terms are being finalized before launch.

Last updated:

Who we are

Timealo ("we", "us") is the controller of personal data processed through the Timealo apps and this website. Contact: support@timealo.com. Address: [REGISTERED ADDRESS].

This policy explains what we collect, why, how long we keep it and the choices you have, including under the GDPR, UK GDPR and the California Consumer Privacy Act as amended (CCPA/CPRA).

Data we collect

Account data

  • Email address and authentication identifiers needed to sign you in.
  • Profile settings such as your preferred language, time zone and display preferences.

Content you create

  • Activities, tags and intentions you define.
  • Time logs (start and end times, durations, notes) and the audit rules you configure.
  • Derived results such as summaries and Life Audit insights computed from your logs.

Subscription information

If you subscribe, we process your plan status and renewal state. Payments are handled by Apple or Google; we do not receive or store your payment card number.

Waitlist data

If you join the waitlist on this website, we collect the email address you submit and, where offered, your language, so that we can notify you about the launch.

We also count waitlist joins and unsubscriptions in PostHog using a pseudonymous identifier. We do not send your email address or unsubscribe token to PostHog.

Technical data

Our hosting and backend providers may process technical data such as IP address, device and app version and request logs for security, abuse prevention and reliability. We do not use advertising trackers on this website.

How we use data and our legal bases

We do not sell your personal information or share it for cross-context behavioural advertising, and we do not use your time logs to train advertising profiles.

  • Provide the Service, sync your data and run features you request. Legal basis: performance of a contract.
  • Manage your subscription and handle support requests. Legal basis: contract and legitimate interests.
  • Keep the Service secure, prevent abuse and fix bugs. Legal basis: legitimate interests.
  • Send the waitlist launch notice and essential service messages. Legal basis: consent (waitlist) and contract (service messages). You can withdraw consent at any time.
  • Comply with legal obligations. Legal basis: legal obligation.

Sharing and processors

We share personal data only with service providers that process it on our behalf under contract, and when the law requires it.

  • Supabase: database, authentication and backend hosting for your account and content.
  • Netlify: hosting and delivery for this website.
  • Resend: email delivery for waitlist and account messages in production.
  • PostHog: pseudonymous counts of waitlist joins and unsubscriptions.
  • Apple and Google: app distribution and subscription billing, under their own privacy policies.
  • Authorities or advisers where required by law or to protect rights and safety.

International transfers

Our providers may process data outside your country, including outside the EEA or UK. Where required, we rely on safeguards such as the European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum or adequacy decisions.

Retention

  • Account and content data are kept while your account is active.
  • When you delete your account, your personal data is removed from our active systems; residual copies in backups are deleted on the normal backup cycle.
  • Waitlist emails are kept until launch communications are complete or you ask us to remove them.
  • We may keep limited records where the law requires it, for example billing or legal-claim records.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export and restrict or object to the processing of your personal data, and to withdraw consent at any time.

California residents have the right to know, delete, correct and opt out of the sale or sharing of personal information. We do not sell or share personal information, and we will not discriminate against you for exercising your rights.

To exercise a right, use the in-app tools below or email support@timealo.com. We may need to verify your identity and will respond within the period required by law (generally one month). You can also complain to your local data protection authority.

Exporting and deleting your data

  • Export: in the app, open Settings and choose Data Export to download a copy of your personal data and reports.
  • Delete: you can delete your account from within the app, which removes your profile, activities, tags, intentions, time logs and audit rules.
  • If you cannot use the app, email support@timealo.com and we will help.
  • Cancel any active subscription in your Apple or Google account; deleting your account does not cancel store billing.

Language and preferences

Your language choice is stored on your device and, for signed-in users, with your account preferences so the experience is consistent across devices.

Children's privacy

Timealo is not directed at children. You must be at least 16 years old, or the minimum age of digital consent in your country if lower but not below 13, to use the Service. If you believe a child has provided us personal data, contact support@timealo.com and we will delete it.

Security

We use encryption in transit, access controls and row-level security so each account can only access its own data. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects you, we will notify you and the authorities as required by law.

Cookies and similar technologies

This website uses only essential browser storage (for example your language choice). See our Cookie Policy for details.

Changes to this policy

We may update this policy. We will change the "Last updated" date and notify you of material changes in the app or by email.

Contact

Privacy questions and requests: support@timealo.com. General support: support@timealo.com. Address: Timealo, [REGISTERED ADDRESS]. If we are required to appoint an EU/UK representative or a data protection officer, their details will be listed here: [DPO / REPRESENTATIVE].