Privacy policy

This policy explains what TimeMastery (run by Theivendran Immanuel Aaron) keeps about you when you use timemastery.app and the installed app, why, and what you can do about it. In short: we keep what the app needs to work, we don’t sell your data, and there are no ads or ad trackers.

What we keep

• Your account: your name, email address and profile picture from Google when you sign in. We also keep when you last used the app, and the IP address, country and browser you used it from.
• What you add to the app: goals, time entries, habits, tasks, notes, diary entries, moods, reflections, settings and photos you attach, so they stay in sync across your devices.
• Orders (if you start buying a pass): your mobile number, and for every order, paid or not, the pass, the amount, the email you used, your country and the order’s status. Card, UPI and bank details go to Cashfree, never to us.
• Feedback you send us: your message, your rating, any screenshots, and an email address if you give one. We also keep the page you sent it from, a visitor id (a random number saved in your browser), your account if you’re signed in, your IP address, the country it maps to and your browser’s user agent.
• Visits and usage: when you open a page of the site or the app, or do things like add a goal or start a timer, we log what happened (never what you wrote), the page, the page that sent you here, a visitor id, your account if you’re signed in, your IP address, the country it maps to and your browser’s user agent. This happens whether or not you’re signed in.
• Reminders: if you turn on reminders, your browser’s push address and, for each reminder due on that device, its title, text and time. We delete a reminder a day after it’s due.
• Without an account: if you use the app without signing in, what you add stays in your browser on that device only, and we don’t receive it until you sign in.

Why we keep it

• To run the app for you: sign you in, save and sync your data, send the reminders you set up.
• To process a payment and unlock the pass you bought.
• To keep the service safe and to improve it.
• To answer you when you contact us.

We rely on your consent when you sign up and use the app, and on our legal duty to keep payment records.

Who else handles it

We don’t sell or rent your data, and we don’t share it with advertisers. These services process it for us:

• Railway: hosts the website, the app’s server and the databases where all of the above is kept.
• Google (Firebase Authentication): Google sign-in.
• Cashfree Payments: takes payments for passes. It receives your name, email address and mobile number with each order.
• findip.net and freeipapi.com: on your first visit, and each time you start a payment, we send your IP address to findip.net (or to freeipapi.com if that doesn’t answer) to work out your country, so prices show in the right currency.
• Google Analytics: counts visits to our landing page and to the app, including which tab you open, so we can see what people use. It never sees what you write in the app. In the EU, UK and Switzerland it sets no cookies until you allow it, but it still sends a basic count of the visit that isn’t tied to a cookie.
• Your browser’s push service (Google, Apple, Mozilla or Microsoft): delivers reminders, if you turn them on.

We may disclose data if the law requires it.

Cookies and storage

The app uses cookies to keep you signed in, and one more that remembers your country for a year, so we don’t have to look it up again. Google Analytics sets its own cookies to count visits. There are no advertising cookies. The app also saves a few things in your browser, like your theme, a visitor id (a random number) and your data if you use it without an account.

How long we keep it

• Your account and what you add: until you delete them, and 14 days more after you delete your account.
• Visits and usage: about 180 days.
• Feedback: up to 2 years, or until you delete your account if you sent it while signed in.
• Reminders: a day after each one is due. Your browser’s push address stays until you turn reminders off or delete your account.
• Orders and the free-trial record: kept after you delete your account (see below).

Your choices and rights

• Get a copy: Settings › Download backup gives you everything you added, as a file.
• Correct it: edit anything in the app; your name and email come from your Google account.
• Delete it: Settings › Delete all data removes what you added, straight away. Settings › Delete my account removes your account too and signs you out everywhere. Deleting your account takes effect after 14 days: sign in before then and you can restore it, and after that it’s deleted for good. Deleting your account also deletes the feedback you sent while signed in, and removes the IP address and browser details from your visits.
• What we keep after you delete your account: a one-way scrambled code (a SHA-256 hash) of your Google account id and the date you first signed in. It lets us see that the free trial was already used, so it can’t be started again. It can’t be turned back into your name or email. We also keep all your orders, paid or not (the pass, the amount, your country, the order’s status, the date and the email you used), because the law requires us to keep tax records.
• Ask us: for anything else (or if you can’t sign in), email support@timemastery.app. We answer within 30 days.

Security

Your data travels over a secure connection, and only you can reach it. No system is perfectly secure, so please keep your Google account safe too.

Children

TimeMastery is not meant for children under 13. If a child under 18 uses it, a parent or guardian should agree to it.

Changes

If we change this policy, we’ll update the date above, and tell you in the app if the change matters.

Contact and grievances

Questions or complaints about your data: support@timemastery.app. Grievance officer: Theivendran Immanuel Aaron. See also our contact page.