Protecting privacy · Proof

Don’t take our word for it.

Most privacy pages ask you to trust them. This one asks you to test it. Every promise TimePeace makes about your data is written so you can check it yourself, and so you would know if it were false. Here is exactly how we keep your life yours, what we refuse to do, and how to hold us to it.

If we were breached tonight, this is all a thief would take
Coffee with Sam, told him about the new job.

stored on our servers as
8fb2 · c1a9 · 77de · 03bc · e5f1 · 49a0 · d2c8 · 6b14 · aa37 · 9e0d
Gibberish to everyone but you. Your key never leaves your device.
Five promises, and how to check each one

Your private entries are sealed before they ever leave your device.

Open your browser’s developer tools and watch the network while you save an entry with encryption on. What goes out is scrambled, not your words. Anyone can run that test in a minute.

We cannot read your encrypted entries, even if we were ordered to.

Ask us for a copy of your data under privacy law. For an encrypted account, all we can hand over is the sealed version. Opening it needs your passphrase or your recovery key, which we never hold.

TimePeace does not follow you around the web.

Point any tracker-blocker, or your browser’s own privacy report, at the app. You will find no third-party ad networks and no cross-site trackers. Nothing here is sold or shared.

We collect almost nothing, and only what you allow.

Read the privacy policy and the in-app permission screen side by side. Every category we touch is named in plain words. Switch any of them off and watch the app keep working.

You can take everything and leave whenever you want.

Use Export to download your whole record, then delete your account and check that it is really gone. No retention trap, no exit fee, no data held hostage.

What TimePeace won’t do

These are today’s firm lines. The deeper promise underneath them: you’re in control of your own data, and whichever way you choose to use it, we respect that choice.

The short, specific list
No ads. Nothing on your screen is sold to a marketer.
Nothing sold or shared. Your life isn’t a product handed to a data broker.
No third-party or cross-site tracking. The app does not report your behaviour to anyone.
No reaching into your accounts. You type your numbers by hand; we don’t connect out to read them for you.
No harvesting your contacts. We don’t upload your address book.
No backdoor. There’s no master key or support copy of your passphrase — encryption is a choice you switch on, and once it’s on, only your key opens it.
No quiet changes. We don’t widen what we collect without telling you and asking again.
An outside audit, named and published

TimePeace has not yet been audited by an independent security firm. That is the honest state today, and we would rather say so than let you assume otherwise. When we are audited, we will:

Name the firm we hire, of the calibre of Cure53 or Trail of Bits.
Publish their full report here: the findings we failed alongside the ones we passed.
List the fixes we shipped in response, with dates.

A promise you cannot check is just marketing. An audit you can read is proof. Until then, the page above is the test.

The plain answers

Isn’t a privacy page just words?

That is exactly the problem we are trying to fix. A claim you cannot check is only marketing. So every promise above is written as a test: something you, or a journalist, or a sceptic could run and catch us out on if it were false.

Why tell me what you don’t do?

Because the gaps are where harm usually hides. Most apps quietly collect more than they admit. Naming what we refuse to do, and keeping the list short and specific, is how you can tell the difference between a promise and a slogan.

Has TimePeace actually been audited yet?

Not yet, and we will not pretend otherwise. When we are, we will name the firm and publish the whole report here, good and bad. Until that day, this page is the test, and you are welcome to run every line of it.

Every promise here is one you can check.

Go deeper

Proof, not promises.

Open TimePeace
Free · No ads · No third-party tracking