Protecting privacy · Proof

Don’t take our word for it.

Most privacy pages ask you to trust them. This one asks you to test it. Every promise TimePeace makes about your data is written so you can check it yourself, and so you would know if it were false. Here is exactly how we keep your life yours, what we refuse to do, and how to hold us to it.

Search your diary, and this is what reaches us
Coffee with Sam, told him about the new job.

sent to our servers
nothing
The search runs on your phone. Try it in airplane mode.
Five promises, and how to check each one

Your diary travels encrypted, to your own account and nowhere else.

Open your browser’s developer tools and watch the network while you save an entry. It goes over an encrypted connection to TimePeace’s own servers, into your own account. No ad network and no data broker is on the other end.

Nobody else sees your diary unless you share it.

Look for anywhere your entries could be shown: there is no feed, no public profile and no followers. The only place anyone else sees anything is a group you join, and only what you choose to share there.

TimePeace does not follow you around the web.

Point any tracker-blocker, or your browser’s own privacy report, at this website or the web app. You will find no third-party ad networks and no cross-site trackers. The iPhone app tells one advertiser, Meta, only that it was installed, opened or used to make an account, exactly as the privacy policy says. Nothing here is sold.

We collect almost nothing, and only what you allow.

Read the privacy policy and the in-app permission screen side by side. Every category we touch is named in plain words. Switch any of them off and watch the app keep working.

You can take everything and leave whenever you want.

Use Export to download your whole record, then delete your account and check that it is really gone. No retention trap, no exit fee, no data held hostage.

What TimePeace won’t do

These are today’s firm lines. The deeper promise underneath them: you’re in control of your own data, and whichever way you choose to use it, we respect that choice.

The short, specific list
No ads. Nothing on your screen is sold to a marketer.
Nothing sold or shared. Your life isn’t a product handed to a data broker.
Nothing about how you use the app or what you write goes to an advertiser. The iPhone app tells Meta only that it was installed, opened or used to make an account, so we know which adverts work.
No reaching into your accounts. You type your numbers by hand; we don’t connect out to read them for you.
No harvesting your contacts. We don’t upload your address book.
No quiet changes. We don’t widen what we collect without telling you and asking again.
Four more things we don’t do, and how to check each

We don’t send your searches anywhere.

Switch your phone to airplane mode and search your diary. It works the same, because the searching happens on your phone and nothing is sent out.

We don’t charge for the app lock.

Open Settings and look for App lock. It is there for everyone, with no plan to upgrade to and nothing to pay.

We don’t charge to take your data with you.

Open Settings, go to Privacy & data and tap Download my data. Your whole record, as a full backup file or as your diary in plain text, is free for everyone.

We don’t load code or fonts from anyone else, apart from Cloudflare’s visit counter.

Open the app in your browser and look at the Network list in its developer tools. Every script and font comes from timepeaceapp.com. The one outside address is Cloudflare’s visit counter, which counts visits without cookies and builds no profile of you. Our privacy policy names it.

An outside audit, named and published

TimePeace has not yet been audited by an independent security firm. That is the honest state today, and we would rather say so than let you assume otherwise. When we are audited, we will:

Name the firm we hire, of the calibre of Cure53 or Trail of Bits.
Publish their full report here: the findings we failed alongside the ones we passed.
List the fixes we shipped in response, with dates.

A promise you cannot check is just marketing. An audit you can read is proof. Until then, the page above is the test.

The plain answers

Isn’t a privacy page just words?

That is exactly the problem we are trying to fix. A claim you cannot check is only marketing. So every promise above is written as a test: something you, or a journalist, or a sceptic could run and catch us out on if it were false.

Why tell me what you don’t do?

Because the gaps are where harm usually hides. Most apps quietly collect more than they admit. Naming what we refuse to do, and keeping the list short and specific, is how you can tell the difference between a promise and a slogan.

Has TimePeace actually been audited yet?

Not yet, and we will not pretend otherwise. When we are, we will name the firm and publish the whole report here, good and bad. Until that day, this page is the test, and you are welcome to run every line of it.

Every promise here is one you can check.

Go deeper

Proof, not promises.

Free · No ads · Nothing sold