Protecting privacy · Transparency

What we can see, and what we can’t.

We think you should know exactly what reaches us. TimePeace is built to need very little: most of your life stays on your device or scrambled to your key. Here is the honest list: what we can see, what we never can, and why the small amount we do see is there to help you, not us.

What reaches our servers

14 Junediary entry

We see that you wrote, never what you wrote.

The honest list

What we can see

Your account email, to sign you in.

Which features you use, only if you opt in. A one-way code, never your name or words.

That an entry exists, and its date, so your diary syncs across devices.

Anything you send to support, only when you choose to.

What we can’t see, ever

Your encrypted entries: diary, mood, health, the notes on your people. Not even us.

Your money. You type it in by hand; we never read it from your accounts.

Your contacts. We never read your address book.

You, across the web. No ad trackers, nothing sold or shared.

The plain answers

Why can you see anything at all?

Three reasons only: to sign you in, to sync your diary across your devices, and, if you allow it, to learn what to improve. Never to profit from you. There is no ad business and no data sale here, so there is no reason to hoard your life.

What is in “anonymous analytics”?

Events, not content: that a screen was opened, a feature used. Who did it is a one-way code computed on our server, not your identity, and never what you wrote. It is off unless you turn it on, and you can turn it back off whenever you like.

Can I check, export, or delete what you hold?

Yes, any time: download everything, delete anything, and it is really gone, and withdraw any permission as easily as you gave it.

What we can see, and what we can’t.

Why can you see anything at all?

What is in “anonymous analytics”?

Can I check, export, or delete what you hold?

If we don’t need it to run TimePeace, we don’t want it.

Yours to check, anytime.