Privacy Policy

What we collect

• Your account: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google, and nothing else from your Google account.
• Your workspaces: the workspaces you create or join, your role in each (owner, admin or member), and invitations.
• Time you track: start and end times, the task and project, notes, and which device recorded it.
• Activity, from the desktop app: how much of each ten-minute block had keyboard or mouse input (counts only, never what you typed), the names of the apps in use, and whether an agent, render, build or call was running.
• Screenshots, only if your workspace turns them on: occasional screenshots while the timer runs, blurred if your workspace chooses. The app shows when screenshots are on.
• Security and service data: sign-in sessions, IP address and browser type, used to keep your account secure and the service running.

How we use it

Only to run Time Tracker: to sign you in, record and show time, build timesheets and reports, keep accounts secure, and fix problems. We don't sell personal information, we don't use it for advertising, and we don't use your workspace's data to train AI models.

Who can see it

• You can see all of your own time, activity and screenshots.
• Owners and admins of a workspace can see the time, activity and screenshots of the people in that workspace. Members can't see each other's.
• Progress Guide staff access data only when needed to run or support the service, or when the law requires it.

Service providers

We use a small number of providers to run the service, and they handle data only on our behalf: Vercel (hosting), Neon (database) and Google (if you choose to sign in with Google). Data may be processed in the United States and other countries where these providers operate.

Google sign-in

If you sign in with Google, we use your Google name, email address and profile picture only to create and sign in to your Time Tracker account. We don't access your Gmail, Drive, Calendar or contacts, and we don't share Google user data with anyone. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How long we keep it

We keep your data while your account or workspace is active. Workspace owners decide how long screenshots are kept and whether people can delete their own. When an account or workspace is deleted, we delete its data within 30 days, apart from backups, which expire on a rolling basis.

Your choices

• You can see and correct your account details, and download your timesheets as CSV.
• You can ask us for a copy of your data or to delete your account.
• If your workspace belongs to your employer, they control the workspace's data, so some requests go through them.

Security

Data is encrypted in transit and at rest. Passwords are hashed, two-step sign-in is available, and access is limited to the people who need it.

Children

Time Tracker is a work tool and isn't meant for anyone under 16.

Changes and contact

If we change this policy in a way that matters, we'll update the date above and let account holders know. Questions or requests: contact Progress Guide through progressguide.com. See also the Terms of Service.