Privacy policy

This policy explains what TimeMastery keeps about you when you use timemastery.app and the installed app, why, and what you can do about it. In short: we keep what the app needs to work, we don’t sell your data, and there are no ads or ad trackers.

What we keep

• Your account: your name, email address and profile picture from Google when you sign in, and when you first signed in.
• What you add to the app: goals, time entries, habits, tasks, notes, diary entries, moods, reflections, settings and photos you attach. These are kept so they’re there on every device you sign in on.
• Payments (if you buy a pass): your mobile number (the payment provider requires it), the pass you bought and the order’s amount and status. Card, UPI and bank details go to Cashfree, never to us.
• Visit logs: your IP address, the country it’s in, your browser and device type, the page, and simple counts of actions such as “a goal was created” (never what you wrote). These keep the service safe and help us improve it. They are deleted after 180 days.
• Feedback you send us: your message, any screenshots, and an email address if you give one.
• Reminders: if you turn on reminders, your browser’s push address and the reminders due on that device.
• Without an account: if you use the app without signing in, what you add stays in your browser on that device only, and we don’t receive it until you sign in.

Location is country-level only (worked out from your IP address), never GPS or your city.

Why we keep it

• To run the app for you: sign you in, save and sync your data, send the reminders you set up.
• To process a payment and unlock the pass you bought, and to keep payment records the law requires.
• To keep the service safe (stop abuse and spam) and to fix and improve it.
• To show prices in your currency.
• To answer you when you contact us.

We rely on your consent when you sign up and use the app, and on legal duties for payment records.

Who else handles it

We don’t sell or rent your data, and we don’t share it with advertisers. These services process it for us:

• Google (Firebase Authentication): Google sign-in.
• Railway: hosts the website, the server and the database where your data is kept.
• Cashfree Payments: takes payments for passes.
• Google Analytics: counts visits to our pages (which pages, your device and browser type, and roughly where you are), so we can see what people use. It never sees what you write in the app.
• Your browser’s push service (Google, Apple, Mozilla or Microsoft): delivers reminders, if you turn them on.
• DB-IP / MaxMind: a country lookup file on our own server; your IP address isn’t sent to them.

We may disclose data if the law requires it.

Cookies and storage

The app’s own cookies are only the ones it needs: one that keeps you signed in, and one that remembers what your account may do. Google Analytics sets its own cookies to count visits. There are no advertising cookies. The app also stores some things in your browser (your theme, a random visitor id for counting visits, and your data if you use it without an account).

How long we keep it

• Your account and what you add: until you delete it or delete your account.
• Visit logs: 180 days.
• Payment records: as long as tax law requires, even after an account is deleted.
• Feedback: until it has been dealt with, at most two years.

Your choices and rights

• Get a copy: Settings › Download backup gives you everything you added, as a file.
• Correct it: edit anything in the app; your name and email come from your Google account.
• Delete it: Settings › Delete all data removes what you added. Settings › Delete my account removes your account too, signs you out everywhere, and removes the IP addresses and device details kept with your visits.
• Ask us: for anything else (or if you can’t sign in), email [email protected]. We answer within 30 days.

Security

Data travels over HTTPS. Your sign-in is a secure, httpOnly cookie, and only you can reach your data. No system is perfectly secure, so please keep your Google account safe too.

Children

TimeMastery is not meant for children under 13. If a child under 18 uses it, a parent or guardian should agree to it.

Changes

If we change this policy, we’ll update the date above, and tell you in the app if the change matters.

Contact and grievances

Questions or complaints about your data: [email protected]. See also our contact page.