Privacy policy
Time Tracker is a personal time-tracking tool made of an open-source server and an open-source app. This policy explains what it accesses in your Google account, where your information is kept, who can see it, and how to remove it.
Who runs Time Tracker
There is no central Time Tracker service. Each copy of the server is set up and run by the person who uses it, on hosting of their choosing. The person who runs a copy is its operator and the only person with access to what it handles. If someone else has set up a copy for you, they are its operator, and this policy describes how the software behaves in their hands.
What Time Tracker accesses in your Google account
When you connect Time Tracker to Google, it asks for two permissions:
| Permission | What it allows | Why Time Tracker needs it |
|---|---|---|
calendar.app.created |
See, create and change events only on calendars that Time Tracker itself created. | Time Tracker makes one calendar for your tracked time and reads and writes the events on it. It cannot see your primary calendar or any calendar you made yourself. |
drive.file |
See, create and change only the files in Google Drive that Time Tracker itself created. | Time Tracker makes one Google Sheets spreadsheet, next to its calendar, for your actions, people, places, notes, goals, habits and related records. It cannot see your other Drive files. |
Time Tracker does not access your email, contacts, photos, location history or any other Google data.
What information Time Tracker handles
- Time records you enter. Notes about what you are doing, events with their start and end times, and the actions, people, groups and places you associate with them.
- Plans you make. Goals, habits, traits, travel times and similar records, together with the judgements and scores derived from your time records.
- Operational records. The server keeps a short health log of its own calls and memory use, stored in a tab of the same spreadsheet, to help its operator keep it running.
- Sign-in details. The server uses WorkOS AuthKit to sign in the app and other clients. It records the user identifiers that the operator has allowed, and checks each request against that list.
- Approximate location, optionally. If you turn on the weather display in the Android app, the app asks for coarse location and sends approximate coordinates to Open-Meteo to fetch a forecast. The coordinates are not stored by Time Tracker. Leaving the weather off means no location is used.
- Device calendar, optionally. If you turn on showing your phone's synced calendar events in the Android app, the app reads them on the device to display them. They are not uploaded anywhere.
Where your information is kept
- In your Google account. All of your time records and plans live in the calendar and spreadsheet that Time Tracker created there. They are subject to Google's own privacy policy.
- On the server, briefly. While the server runs it keeps a working copy of the spreadsheet's tabs in memory, so it can answer quickly and write only what changed. That copy is discarded when the server stops. The server also stores the Google access and refresh token that let it act on your behalf, as a secret file on its host.
- On your device. The app keeps its sign-in token and a cache of recent data on your phone or computer, so it can show your days while offline and refresh in the background.
Time Tracker does not run its own database and does not copy your Google data anywhere else.
Who can see your information
Only you and the operator of your copy of the server. Time Tracker does not sell, rent, share or disclose your information to anyone, does not show advertising, and does not use your information to build profiles or to train machine-learning models.
The following services process information in the ordinary course of running Time Tracker, each under its own terms:
- Google (Calendar, Sheets and Drive), which stores your records.
- WorkOS, which handles sign-in for the app.
- The server's hosting provider, chosen by the operator. The reference setup uses Render.
- Open-Meteo, only if you turn on the weather display, as described above.
If you choose to connect your server to an AI assistant such as Claude, the assistant's provider receives whatever your conversation and the tools you use send it, under that provider's terms. That connection is yours to make or not, and Time Tracker does not make it for you.
Google API Services user data policy
Time Tracker's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Removing your information and revoking access
- Revoke Time Tracker's access to your Google account at any time from myaccount.google.com/permissions. The server can then no longer read or write anything.
- Delete your records by deleting the Time Tracker calendar in Google Calendar and the spreadsheet named "Calendar Metadata (do not edit by hand)" in Google Drive. Since Time Tracker keeps no other copy, that removes everything.
- Remove the app from your device to delete its local cache and sign-in token.
- Stop the server if you run it yourself, and delete the token file from its host.
Children
Time Tracker is not directed at children under 13 and does not knowingly collect information from them.
Changes to this policy
If this policy changes, the new version will be published at this address with a new effective date. Changes that materially affect how your information is handled will be called out in the project's release notes.
Contact
Questions about this policy or about Time Tracker's handling of your information can be sent to privacy at timetracker dot tools.