Privacy Policy

We collect the information you provide directly when you create an account, such as your name, email address and password (stored as a one-way hash). We also collect the content you create in the app — projects, tasks, notes, time entries and the like — so we can show it back to you across your devices.

To keep the service reliable and secure, we automatically collect technical information such as your IP address, browser type, device information and basic usage analytics.

We use your information to operate, maintain and improve TodoTimeTracker, to communicate with you about your account, to send service-related emails, to prevent fraud and abuse, and to comply with our legal obligations.

We do not sell your personal data. We share information only with vetted service providers (such as cloud hosting, error monitoring and email delivery), and only to the extent required to operate the service. These providers are bound by contract to keep your data confidential.

We keep your account data for as long as your account is active. You can delete your data at any time from your account settings, and your information will be removed from our active systems within 30 days, except where we are required to keep records by law.

We use industry-standard safeguards including TLS in transit, encryption at rest, row-level security in the database and audited access controls. No system is perfectly secure, but we work hard to protect your data.

Depending on where you live, you have rights to access, correct, export or delete the personal data we hold about you. You can exercise these rights from within the app or by contacting us at privacy@todotimetracker.com.

We may update this policy from time to time. When we make material changes, we will notify you in the app or by email at least 14 days before the changes take effect.