aTimeLogger Pro for iOS — Privacy Policy
Last updated: November 11, 2026
1. Who we are and what this policy covers
This policy explains what personal data aTimeLogger Pro for iPhone, iPad and Apple Watch collects, why, where it is kept and how you control it, including data read from Apple Health.
- Owner and Data Controller: Productive Tools OU
- Contact: support@timetrack.io
- Applies to: the aTimeLogger Pro app for iPhone and iPad (bundle ID
io.timetrack.ios), its Apple Watch app, its widgets, Live Activities, Siri and Shortcuts actions, and the aTimeLogger sync service.
The Android app has its own privacy policy. The rules for using the app are in the Terms of Use. By using the app you acknowledge the practices described here.
2. Information we collect
Most of your data never leaves your device. The app works without an account. Your time log reaches our server only if you sign in to sync. Third parties receive only the limited data listed in section 7.
| Data | Collected when | Where it goes |
|---|---|---|
| Time-tracking data you enter: activity types, activities and their intervals, comments, tags, custom fields, goals, reports, places, to-dos, Pomodoro settings | Always | Your device. Our server if you sign in to sync (see section 6 for what syncs). |
| Account data: email, password, and your name if you add it to your profile | Only when you create an account or sign in | Our server, to create the account and sign you in |
| Apple Health data: sleep, workouts, heart rate, resting heart rate, workout routes | Only if you turn on sleep or workout import and allow access | Read on your device only. See section 3. |
| Location | Only if you create places and allow location access | Used on your device to notice when you arrive at or leave a place. See section 4. |
| Calendar events | Only if you link activity types to a calendar | Read from and written to the calendars you choose on your device |
| Purchase data: App Store receipts, subscription status, a purchase account ID | When you buy a subscription or restore purchases | Apple and RevenueCat |
| Usage statistics: onboarding, sign-up, paywall and purchase events, your plan, a few settings flags, device and OS details, a random analytics ID. Not your email or your time log. | While you use the app | Mixpanel |
| Advertising attribution: the Apple Ads attribution token; the advertising identifier (IDFA) only if you allow tracking | After installation; the IDFA only after you allow tracking | RevenueCat and Apple. See section 8. |
| Crash reports: crash and freeze details, device model, OS and app version, app session start and end, and your email if you are signed in | When the app crashes or stops responding | Sentry |
| Device data for sync: device ID, push token, platform | When you sync | Our server, to send sync notices |
| iCloud data: your plan, and signals that a widget started or stopped an activity | When you are signed in to iCloud on the device | Your private iCloud database, which only your devices can read |
| Diagnostic logs | Always, stored on your device (the last 3 daily files) | Leave the device only if you tap Send Log file and email them to support |
We do not access your contacts, photo library, camera, microphone or motion data.
3. Apple Health data
The app only reads data from Apple Health, only after you allow it, and never writes to it. Health data is processed on your device. It is never sent to our server, to analytics, to crash reporting, to advertising partners or to your Apple Watch, and it is never stored in iCloud.
What we read and why
| Data | Health permission | What the app does with it |
|---|---|---|
| Sleep: time in bed, time asleep and sleep stages | Sleep | Suggests sleep entries; shows sleep details and sleep statistics |
| Workouts: type, start and end time, duration, distance, energy burned, and the temperature and humidity your watch recorded | Workouts | Suggests workout entries; maps workout types to your activity types; shows workout details and statistics |
| Heart rate samples | Heart Rate | Shows the heart rate chart and zones for a workout or a night; can estimate your maximum heart rate from your past readings |
| Resting heart rate | Resting Heart Rate | Calculates heart rate reserve zones |
| Workout routes | Workout Routes | Shows the route on a workout's details. The map is drawn by Apple Maps, which loads map images for that area from Apple. |
The app asks for heart rate, resting heart rate and routes only when you first open details or statistics that need them. We do not read steps, weight, nutrition, medications, clinical records or any other Health data type.
When we read it
- Only while the app is open. There is no background reading.
- To find new sleep and workouts: the days since the last check.
- To show details and statistics: the entry or the period you open.
What is stored on your device
The app does not store Health readings in its database. It stores only:
- links between your activities and Apple Health record IDs, so a session is not suggested twice;
- your import settings, such as which workout types map to which activity types and which tags to add;
- your heart rate zone settings, such as the age or maximum heart rate you enter;
- a cache in the app's Caches folder, so statistics open quickly: nightly and workout summaries computed from Health by day, and your maximum and resting heart rate, kept for up to 24 hours. iOS may clear this cache at any time. It is not included in device backups and is never synced.
What can leave your device
When you accept a sleep or workout suggestion, or apply Health times to an activity, the app creates or updates an ordinary activity entry: the activity type, its start and end time and its tags. From then on it is your time-tracking data, like any entry you type by hand. If you sync, it is uploaded to our server. It can also appear in your linked calendar, exports and backups. No heart rate, sleep stage, distance, energy or route values are copied into it.
The setting Include Health data in export is off by default. If you turn it on, CSV files you export also carry Health details for linked entries, such as sleep stages and heart rate. These files are created only when you ask and go only where you send them.
Diagnostic logs on your device may record the time and type of imported sessions. They leave the device only if you send them to support yourself.
Our commitments
We follow Apple's rules for HealthKit data. We do not:
- sell Health data or give it to advertising platforms, data brokers or information resellers;
- use it for advertising or marketing;
- share it with anyone without your explicit permission;
- store it in iCloud or on our server.
Your control
- Allow or revoke each data type at any time in Settings > Privacy & Security > Health > aTimeLogger Pro.
- Turn sleep or workout suggestions off in the app's Apple Health settings.
- Delete imported activities like any other entry. Deleting the app removes the stored links, settings and cache.
4. Location
The app uses your location only for the places you create. It notices when you arrive at or leave a place, so it can check you in, start or stop an activity, or remind you. To do that while the app is closed, iOS asks you to allow location access "Always".
- The app does not record a location history. Check-ins (the time and coordinates of an arrival or departure) are stored on your device only.
- The names, coordinates and actions of the places you create are synced to our server if you sign in, so your other devices know them.
- Location is never sent to analytics, crash reporting or advertising partners.
- You can change or revoke access at any time in Settings > Privacy & Security > Location Services > aTimeLogger Pro.
5. How we use information
We use your data to run the app's features, keep it working, improve it and measure our own advertising. We do not show ads in the app, and we do not sell your data.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Time tracking, statistics, goals, reports, reminders, widgets, Apple Watch | Time-tracking data | Performance of our agreement with you |
| Sync between your devices and account management | Account data, time-tracking data, device data for sync, iCloud data | Performance of our agreement with you |
| Sleep and workout suggestions, health details and statistics | Apple Health data | Your consent, given in the Health permission |
| Place check-ins and place notifications | Location, places | Your consent, given in the location permission |
| Calendar integration | Calendar events, time-tracking data | Your consent, given in the calendar permission |
| Subscriptions and Premium features | Purchase data | Performance of our agreement with you |
| Finding and fixing crashes and freezes | Crash reports, diagnostic logs you send | Our legitimate interest in a working app |
| Understanding how people sign up and subscribe | Usage statistics | Our legitimate interest; you can object by emailing us |
| Measuring our advertising campaigns | Advertising attribution | Your consent through the tracking prompt for the advertising identifier; our legitimate interest for the Apple Ads token |
| Answering support requests | Your email, logs you choose to send | Performance of our agreement with you |
| Meeting legal obligations | Data the law requires | Legal obligation |
6. Storage, sync, iCloud and Apple Watch
Your data is stored in the app's private storage on your device, protected by iOS. Widgets, Live Activities and Siri and Shortcuts actions read it through a container shared only between the app and its extensions. Copies leave the device only in the cases below.
- Sync (signed-in users). The app uploads your activity types, activities, intervals, comments, tags, custom fields, goals, reports, places and app settings to our server at app.atimelogger.com over HTTPS. Sync keeps your devices in step, and the same account opens the web app at app.atimelogger.pro. Apple Health readings, Health links, Health settings and check-ins are never synced.
- Sync notices. To tell your devices that something changed, our server stores your device's push token and sends notices through Apple Push Notification service.
- iCloud. The app keeps your plan and short "a widget started or stopped an activity" signals in your private iCloud database, so your other devices see them. Apple stores this data in your iCloud account, and we cannot read it.
- Apple Watch. The iPhone sends the watch your activity types (names, colors, icons), your current and recent activities and watch settings. The watch sends back the activities you start, pause or stop. This goes directly between your devices. No Health data is exchanged with the watch.
- Siri and Shortcuts. When you use Siri or the Shortcuts app with aTimeLogger, Apple processes your request under Apple's privacy policy.
- Device backups. If you back up your device to iCloud or to a computer, the backup includes the app's data, except the Health cache. Apple stores iCloud backups under its own privacy policy.
- Exports and backup files. CSV, HTML and backup files are created only when you ask, and go only where you send them.
- Support logs. Logs are emailed to support only when you tap Send Log file and choose to send the email.
- AI assistants. The app sends nothing to ChatGPT, Claude or any other AI on its own. If you connect an AI assistant to your aTimeLogger account, the assistant reads your synced data from our server only when you ask it about your time, under that provider's privacy policy. Apple Health readings are not on our server, so an assistant cannot read them. You can disconnect the assistant at any time in its settings.
7. Third-party services
These providers process limited data for us. None of them receives Apple Health data or your location.
| Provider | Purpose | Data they receive | Your control |
|---|---|---|---|
| Apple (App Store) | Payments | Purchase data | Needed only to buy a subscription |
| RevenueCat | Subscription status, purchase attribution | App Store receipts, a purchase account ID, your email if you have an account, the device's vendor identifier, the Apple Ads attribution token, the Mixpanel analytics ID, and the IDFA if you allow tracking | Needed to buy a subscription; the IDFA only with your permission |
| Mixpanel | Usage statistics | The events listed in section 2, a random analytics ID, your plan, settings flags, device and OS details, approximate location derived from your IP address | Email us to object or to request deletion |
| Apple Ads | Measuring our Apple Ads campaigns | The attribution token Apple creates on your device, sent through RevenueCat | The token does not identify you; Apple's privacy policy applies |
| Sentry | Crash reporting | Crash and freeze reports (no screenshots), device model, OS and app version, app session start and end, your email if you are signed in | Sent only when the app crashes or stops responding; email us to request deletion |
| Amazon Web Services | Delivering sync notices | Push token | Sign out of sync |
| Apple (iCloud, Push, Watch, Siri, Maps) | Platform services described in section 6 | As described in section 6 | Your iOS settings |
These providers may process data in the United States and other countries.
8. Tracking and advertising
- We do not show ads in the app, and the app contains no advertising or social network SDKs. We use attribution only to measure our own ad campaigns.
- The app asks whether it may track you once, after you have used it a few times. It does not ask in the China mainland App Store.
- If you allow tracking, the advertising identifier (IDFA) is sent to RevenueCat to attribute installs and purchases to our ads.
- If you do not allow tracking, the IDFA is not collected. Apple Ads attribution still works, because Apple's token does not identify you.
- You can change your choice at any time in Settings > Privacy & Security > Tracking.
9. Sharing and disclosure
We do not sell your personal data or give it to data brokers. We disclose data only:
- to the providers in section 7, for the purposes listed there;
- when you choose to, for example by exporting a file, sending logs, linking a calendar or connecting an AI assistant;
- when the law, a court or a public authority requires it, or to defend our legal rights;
- to a successor if Productive Tools OU is merged or sold, under this policy.
Apple Health readings stay on your device, so we hold none that could be disclosed.
10. Retention and deletion
We keep data only as long as you use the app or your account, and you can delete it yourself at any time.
| Data | Kept until | How to delete it |
|---|---|---|
| Data on your device | You delete it or delete the app | In the app, or by deleting the app |
| Synced data on our server | You delete your account | Account > Delete Account. This deletes your account and all synced data from our server. Data on the device stays until you remove it. |
| Apple Health access | You revoke it | Settings > Privacy & Security > Health. Activities you already accepted stay as ordinary entries until you delete them. |
| Health links, settings and cache | You delete the app | iOS may also clear the cache on its own |
| iCloud data | You delete it from iCloud | In your iCloud settings |
| Usage statistics, attribution data and crash reports | The period set by each provider, then deleted | Email us to request deletion; turn tracking off to stop sharing the IDFA |
| Support emails and logs | Your request is resolved | Email us to request deletion |
You can also ask us to delete your data by writing to support@timetrack.io.
11. Security
We protect your data with the iOS app sandbox and data protection on the device, and with HTTPS in transit to our server.
- App data lives in private storage that other apps cannot read.
- Sign-in uses a password exchanged for an access token. The app keeps the token in the iOS Keychain, not your password.
- Apple Health readings are not stored on our systems or transmitted, which keeps the most sensitive data off our servers.
- Only people who run the service can reach server data, and only when needed to operate it or answer your request.
No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
12. Children
The app is not directed to children under 13, or under 16 in the European Union. We do not knowingly collect personal data from them. If you believe a child has given us personal data, write to support@timetrack.io and we will delete it.
13. Your rights
You can access, correct, export and delete your data, and withdraw consent at any time, free of charge.
Under the GDPR and similar laws you have the right to:
- access your data and get a copy of it;
- correct inaccurate data;
- delete your data;
- restrict or object to processing, including usage statistics;
- receive your data in a portable format;
- withdraw consent, for example to Apple Health, location, calendar or tracking, without affecting earlier processing;
- complain to your data protection authority.
Most of these work directly in the app or in iOS: Export or Backup for a copy, Account > Delete Account for erasure, and Settings > Privacy & Security for Health, location, calendar and tracking permissions. For anything else, including objecting to usage statistics, email support@timetrack.io. We reply within 3 days.
California residents: we do not sell personal information. If you allow tracking, the advertising identifier is used only to measure our own ad campaigns, and you can stop it at any time in Settings > Privacy & Security > Tracking. We do not use sensitive personal information to infer characteristics about you.
14. Changes and contact
We may update this policy when the app or the law changes. The date at the top shows the latest version. We will announce material changes in the app or by email, and ask for new consent where the law requires it, for example before reading a new type of Apple Health data.
Questions, requests or complaints: Productive Tools OU, support@timetrack.io.