Privacy policy

Temporal.ist is built to know as little about you as it can while still recording your working time. This policy explains what we collect when you use the website, the web app, the desktop app, the browser extensions, the terminal client and the connections to AI assistants (together, "the Service"), why, who else handles it, how long it is kept, and what you can do about it.

Temporal.ist is made by ame.link. We are the controller of the personal data described here. Inside an organisation on the Team plan, the organisation decides what its members track; for the time members record there, we act on the organisation's behalf.

What we collect

Your account

• Your name, email address and password. We store only a hash of the password, never the password itself.
• If you sign in with Google, Microsoft, GitHub or LinkedIn: the account identifier and email address that provider confirms.
• Your settings, such as your timezone and theme.
• On a paid plan: your plan, billing address and VAT number. Card and bank details go straight to our payment provider, Stripe, and never reach our servers.

Your working time

• Projects, clients, tags and tasks you create, and the rates and invoice details you enter.
• Sessions: the project, start, end, pauses and task of each stretch of work, and which app recorded it.
• File activity, from the desktop app and the terminal client: for each session, which files in the folders you chose to watch changed, how often and when. Only their names and paths within those folders; never their contents.
• Website activity, from the browser extension: that a tab matching one of your rules was open, and from when to when. Your rules are stored in your account. The addresses of your tabs, your browsing history and page contents stay in your browser.
• Your devices and connections: the name of each app or AI assistant you signed in to, and when it was last used.

What we never collect

Screenshots or screen recordings, keystrokes, mouse movement, the contents of your files, other applications or windows, and websites that match none of your rules. The apps contain no code that could collect them.

Support and the contact form

Your messages to us, the email address and name you give with them, and our replies.

Technical logs

Our servers log requests to keep the Service working and secure: the time, the address requested and the response. The logs leave out query strings, which can hold private links, and are kept only briefly, to investigate problems.

How we use it

• To provide the Service: record, show, report and invoice your time, and sync it between your apps.
• To charge for paid plans and keep the accounting records the law requires.
• To answer your questions and support requests.
• To send emails the Service needs: verifying your address, resetting your password, invitations, receipts and replies to your requests.
• To keep the Service secure and prevent abuse, for example by limiting how often a form can be sent.

We do not sell your data, show advertising, or use your data to train AI models.

The legal bases are the contract with you (providing the Service), our legal obligations (accounting records), our legitimate interest in running a secure and reliable service (logs, abuse prevention), and your consent (optional analytics and connections you choose to make).

Who else handles it

• Stripe processes payments for paid plans.
• Our email provider delivers the emails the Service sends.
• Our hosting provider runs the servers and stores the backups.
• Google or Microsoft, when you connect a calendar: we send them the finished sessions you choose to publish. When you sign in with Google, Microsoft, GitHub or LinkedIn, that provider tells us who you are.
• AI assistants you connect receive the data you ask them about, under your account with that assistant. You can revoke them at any time.
• Your organisation, if you work in one: its owner and admins see the time members track on its projects.
• Webhook addresses you configure receive the events you subscribe to.

These providers process data only to provide their part of the Service. We may disclose data when the law requires it.

Cookies and local storage

The site uses only what it needs, plus optional analytics that you choose:

• Needed for the Service: a cookie that keeps you signed in; your light or dark preference; whether you were signed in, so the home page can send you to the app; and, when you arrive through a partner's link, its referral code for 60 days so the partner is credited if you sign up.
• Optional: first-party analytics, described below, only after you allow it.

There are no advertising or third-party tracking cookies. Change your choice at any time under Cookie settings at the bottom of every page.

First-party site analytics

With your permission, we count which pages of the site are visited and which links and buttons are used, to learn which pages help. This is our own measurement; no third party receives it.

• It starts only after you click Allow, and stops as soon as you withdraw. Withdrawing removes the identifiers from your browser and discards anything not yet sent.
• Browsers that send Do Not Track or Global Privacy Control are never counted, and are not asked.
• We store a random identifier for your browser, the page, the link or button you used, and the site you came from. Never your IP address, your browser's details, query strings, or what you type.
• Pages with private links or account details, such as sign-in, support conversations and shared invoices, are never counted.
• If you are signed in, the counts are linked to your account, included in your data export and deleted with your account.
• Analytics data is deleted after at most 90 days.

How long we keep it

• Your account and working time: for as long as your account exists. On the free Solo plan the app shows the last 31 days; older work is kept, not deleted, and appears again when you upgrade.
• After you delete your account: for 30 days you can sign in to undo it. After that, your name and email address are removed, and your settings, devices, connections, API keys, tracking rules, analytics data and the time you tracked in your own organisation are deleted. What stays, without your name: invoices you issued and the sessions they bill, payment records, and time you tracked in someone else's organisation, which belongs to that organisation's records.
• Invoices and payment records: kept for as long as tax and accounting law requires, usually seven years.
• Support conversations: kept with your account; when the account is deleted, your name and email address are removed from them.
• Analytics: at most 90 days.
• Backups: deleted data disappears from our backups within eight weeks.

Security

Connections to the Service are encrypted. Passwords are stored as salted hashes, and access tokens and API keys only as hashes. Sign-ins from apps can be seen and revoked under Settings → Devices and connections. Access to the servers is limited to the people who run them.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

Your rights

You can see, correct, export and delete your data yourself:

• Export: under Settings → Privacy and data, download everything stored about you, as one JSON file or as spreadsheets in a ZIP file, on every plan.
• Correct: change your profile, sessions and projects in the app.
• Delete: under Settings → Privacy and data, delete your account.

You also have the right to object to processing based on our legitimate interest, to restrict processing, and to withdraw consent at any time without affecting what happened before. Email privacy@temporal.ist for anything you cannot do in the app; we answer within 30 days. You may also complain to your data protection authority.

International transfers

We keep your data in the European Union where we can. Some providers, such as Stripe and the calendar and sign-in providers you choose to use, may process data outside it; they do so under the European Commission's standard contractual clauses or an adequacy decision.

Children

The Service is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, tell us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top. For changes that matter, we tell signed-up users by email or in the app before they take effect.

Contact

Questions about privacy: privacy@temporal.ist. Our data protection contact: dpo@temporal.ist. For anything else, use the contact form.