Privacy Policy
Last updated: 2026-08-14 · Applies under the EU General Data Protection Regulation (GDPR)
1. Who is responsible for your data
This Time Management System is a multi-tenant application: each family or office ("Organization") has its own separate, isolated data. For members of an Organization, that Organization's Admin is the data controller — they decide who has an account, what work is logged, and how long people stay on the system. The platform operator (Your organization/operator name) acts as the technical processor hosting the system on the controller's behalf, and does not access one Organization's data to service another.
Questions about this policy, or about a specific Organization's data, can be sent to privacy@example.com.
2. What data we collect and why
| Data | Purpose | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Name, email, password (hashed) | Account login and identification | Contract / legitimate interest in running the Organization |
| Time entries (date, times, description, project, value rating) | Time tracking, reporting, approvals | Contract (employment/household management) / legitimate interest |
| Tasks (title, notes, due date, assignment) | Work planning and follow-up | Contract / legitimate interest |
| Login attempts, IP address, user agent, security audit log | Account security, abuse prevention, incident investigation | Legitimate interest (security) |
| Timezone, profile preferences | Displaying times correctly | Legitimate interest |
We do not collect payment details, special-category data (Art. 9), or biometric data. We do not use tracking/advertising cookies — the only cookie set is a strictly-necessary session cookie needed to keep you logged in, which does not require consent under the ePrivacy rules.
3. Children's accounts (family Organizations)
Family Organizations may include accounts for children. These accounts are created and managed entirely by the family's Admin (a parent/guardian), who authorizes the account and can view, edit, or delete it at any time — this parental control is the basis on which a child's data is processed (GDPR Art. 8). A child's account should only ever be created by their own parent or legal guardian.
4. How long we keep data
- Active accounts and their time entries/tasks: kept for as long as the Organization keeps the account active.
- Deleted time entries/tasks: kept for 90 days after deletion (to allow recovery from mistakes), then permanently purged.
- Security audit log: kept for 730 days, then purged, unless needed longer for an active investigation.
- Password reset links: expire after 60 minutes and are purged shortly after.
5. Your rights
Under GDPR Articles 15–21, you have the right to:
- Access & portability — download a copy of your data at any time from Profile → Download my data.
- Rectification — correct your name/timezone yourself from your Profile; ask your Admin to correct anything else.
- Erasure — request account deletion from Profile → Request account deletion. Your Organization's Admin (the data controller) will action it. Deletion anonymizes your name/email/login credentials; time/task records your Organization legitimately needs to keep (e.g. for its own records) are retained but no longer identify you personally.
- Restriction & objection — contact your Admin, or privacy@example.com if your Admin is unresponsive.
- Complain to a supervisory authority — you may lodge a complaint with your national Data Protection Authority.
6. Security
Passwords are hashed with Argon2id and never stored or logged in plain text. All data access is scoped per
Organization at the database layer. Connections should be served over HTTPS in production. See our
Accessibility Statement and the project's SECURITY.md for our
vulnerability-reporting process.
7. International transfers
This system is typically self-hosted by each Organization's operator. If hosted outside the EU/EEA, the operator is responsible for ensuring an appropriate transfer safeguard (e.g. adequacy decision or Standard Contractual Clauses) is in place.
8. Changes to this policy
If this policy changes materially, the "Last updated" date above will change and users will be shown the updated policy at next login.