aTimeLogger Pro for Android — Privacy Policy
Last updated: October 4, 2026
1. Who we are and what this policy covers
This policy explains what personal data aTimeLogger Pro for Android collects, why, where it is kept and how you control it, including data read from Health Connect.
- Owner and Data Controller: Productive Tools OU
- Contact: support@timetrack.io
- Applies to: the aTimeLogger Pro app for Android (package
io.timetrack.timetrackapp), its Wear OS app, its home-screen widgets and the aTimeLogger sync service.
This Android policy adds platform-specific detail to the general aTimeLogger Pro Privacy Policy. Where the two differ for the Android app, this policy applies. By using the app you acknowledge the practices described here.
2. Information we collect
Most of your data never leaves your phone. The app works without an account. Data reaches our server only if you sign in to sync, and third parties receive only the limited data listed in section 6.
| Data | Collected when | Where it goes |
|---|---|---|
| Time-tracking data you enter: activity types, activities and their intervals, comments, tags, custom fields, goals, reports, to-dos, Pomodoro settings | Always | Your device. Our server if you sign in to sync. |
| Account data: email, first and last name, password | Only when you create an account or sign in | Our server, to create the account and sign you in |
| Health Connect data: sleep, exercise, heart rate, resting heart rate, distance, active calories | Only if you connect Health Connect and grant access | Read on your device only. See section 3. |
| Calendar events | Only if you link an activity type to a device calendar | Read from and written to your device calendar |
| Purchase data: subscription status, anonymous purchase ID, Google Play receipts | When you buy a subscription | Google Play and RevenueCat |
| Usage statistics: app events, settings flags, device and OS details, an anonymous account ID | By default; you can turn it off | Firebase Analytics and Mixpanel |
| Crash reports: error details, device model, OS and app version, screen layout (no screenshots), anonymous account ID | When the app crashes | Sentry |
| Device data for sync: device ID, push token, platform | When you sync | Our server, to deliver sync notices |
| Diagnostic logs | Always, stored on your device for 7 days | Leave the device only if you tap Send logs and email them to support |
We do not collect your location, contacts, photos, camera or microphone input, and we do not use an advertising ID.
3. Health Connect data
The app only reads health data from Health Connect, only after you grant access, and never writes to it. Health readings are processed on your device and are never sent to our server, to analytics or crash reporting, or to your watch.
What we read and why
| Data | Health Connect permission | What the app does with it |
|---|---|---|
| Sleep sessions and sleep stages | Read sleep | Suggests sleep entries; shows sleep stages on the activity details |
| Exercise sessions: type, title, start and end time, source app | Read exercise | Suggests workout entries; maps workout types to your activity types |
| Heart rate samples | Read heart rate | Shows the heart rate chart and zones for a workout or sleep; estimates your maximum heart rate from the last 365 days |
| Resting heart rate (optional) | Read resting heart rate | Calculates heart rate reserve zones |
| Distance | Read distance | Shows the distance of a workout |
| Active calories burned | Read active calories burned | Shows the energy burned during a workout |
| Data older than 30 days (optional) | Read health data history | Shows details for entries made before you connected Health Connect |
We do not read steps, weight, nutrition, medical records or any other data type.
When we read it
- Only while the app is open. There is no background reading.
- To find new sleep and workouts: the last 7 days on the first run, then the time since the last check.
- To show details: the hours around the activity you open. To list your workout types: the last 90 days.
What is stored on your device
Raw readings, such as sleep stages, heart rate, distance and calories, are read on demand, shown on screen and not stored. The app stores only:
- links between your activities and Health Connect record IDs, so a session is not suggested twice;
- your import settings, such as which workout types map to which activity types;
- the age you enter for heart rate zones, and your maximum and resting heart rate, cached for up to 24 hours.
What can leave your device
When you accept a sleep or workout suggestion, or apply Health Connect times to an activity, the app creates or updates an ordinary activity entry: the activity type, its start and end time and its tags. From then on it is your time-tracking data, like any entry you type by hand. If you sync, it is uploaded to our server; it can also appear in your linked calendar, exports and backups. No heart rate, sleep stage, distance or calorie values are copied into it.
Diagnostic logs on your device may record the time and type of imported sessions. They leave the device only if you send them to support yourself.
Limited Use
The use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. We do not:
- sell health data or transfer it to advertising platforms, data brokers or information resellers;
- use it for advertising, including personalized or interest-based ads;
- use it to determine credit-worthiness, insurance eligibility, employment suitability or for lending;
- share it with anyone without your explicit, informed consent;
- let people read it, unless you ask us to for support, it is needed for security, or the law requires it.
Your control
- Grant or revoke each data type at any time in Health Connect (Android Settings > Security & privacy > Privacy > Health Connect > App permissions > aTimeLogger Pro). The app's Open Health Connect button leads there.
- Turn sleep or workout suggestions off in the app's Health Connect screen.
- Delete imported activities like any other entry. Clearing the app's data or uninstalling it removes the stored links, settings and cached values.
4. How we use information
We use your data only to run the app's features, keep it working and improve it. We do not use it for advertising or sell it.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Time tracking, statistics, goals, reports, reminders | Time-tracking data | Performance of our agreement with you |
| Sync between your devices and account management | Account data, time-tracking data, device data for sync | Performance of our agreement with you |
| Sleep and workout suggestions, health details | Health Connect data | Your consent, given in Health Connect |
| Calendar integration | Calendar events, time-tracking data | Your consent, given through the Android permission |
| Subscriptions and Premium features | Purchase data | Performance of our agreement with you |
| Finding and fixing crashes | Crash reports, diagnostic logs you send | Our legitimate interest in a working app |
| Understanding which features are used | Usage statistics | Our legitimate interest; you can object with the in-app switch |
| Answering support requests | Your email, logs you choose to send | Performance of our agreement with you |
| Meeting legal obligations | Data the law requires | Legal obligation |
5. Storage, sync and Wear OS
Your data is stored in the app's private storage on your phone. Copies leave the phone only in the cases below.
- Sync (signed-in users). The app uploads your activity types, activities, intervals, comments, tags, custom fields, goals, reports and to-dos to our server at app.atimelogger.com over HTTPS. Sync keeps your devices in step. Health Connect readings, Health Connect links and import settings are never synced.
- Wear OS watch. The phone sends the watch your activity types (names, colors, icons), current and recent activities and watch settings. The watch sends back the activities you start or stop and, if you ask, its diagnostic logs. This goes directly between your devices through Google Play services. No health data is exchanged with the watch.
- Android backup. If you turn on Android backup, Android may copy the app's database and settings to your Google account and restore them on a new phone. Google stores this backup, encrypted, under its own privacy policy.
- Exports and backup files. CSV, Excel, HTML and backup files are created only when you ask, and go only where you send them.
- Support logs. Logs are emailed to support only when you tap Send logs and choose to send the email.
6. Third-party services
These providers process limited data for us as processors. None of them receives Health Connect data.
| Provider | Purpose | Data they receive | Your control |
|---|---|---|---|
| Google Play Billing | Payments | Purchase data | Needed only to buy a subscription |
| RevenueCat | Subscription status | Anonymous purchase ID, Google Play receipts | Needed only to buy a subscription |
| Firebase Analytics (Google) | Usage statistics | App events, app instance ID, device and OS details, approximate country | Settings > Send anonymous usage statistics |
| Mixpanel | Usage statistics | App events, anonymous account ID, account type, signed-in status | Settings > Send anonymous usage statistics |
| Sentry | Crash reporting | Crash reports with anonymous account ID | Sent only when the app crashes |
| Google Play services | Wear OS connection, sync notices | Watch data in transit, push token | Disconnect the watch; sign out of sync |
| Health Connect (Google, on your device) | Source of health data | Nothing is sent to it; the app only reads | Health Connect app permissions |
The anonymous account ID is a random identifier, not your email or name.
7. Sharing and disclosure
We do not sell your personal data, share it for cross-context advertising or give it to data brokers. We disclose data only:
- to the processors in section 6, for the purposes listed there;
- when you choose to, for example by exporting a file, sending logs or linking a calendar;
- when the law, a court or a public authority requires it, or to defend our legal rights;
- to a successor if Productive Tools OU is merged or sold, under this policy.
Health Connect readings stay on your device, so we hold none that could be disclosed.
8. Retention and deletion
We keep data only as long as you use the app or your account, and you can delete it yourself at any time.
| Data | Kept until | How to delete it |
|---|---|---|
| Data on your device | You delete it, clear the app's data or uninstall the app | In the app, or Android Settings > Apps > aTimeLogger Pro > Storage > Clear data |
| Synced data on our server | You delete your account | Profile > Delete. This deletes your account and all synced data from our server. Data on the phone stays until you remove it. |
| Health Connect access | You revoke it | Health Connect app permissions. Activities you already accepted stay as ordinary entries until you delete them. |
| Health Connect links, settings, cached heart rate | You clear the app's data or uninstall the app | Cached heart rate values also expire after 24 hours |
| Usage statistics and crash reports | The period set by each provider, then deleted | Turn usage statistics off; email us to request deletion |
| Support emails and logs | Your request is resolved | Email us to request deletion |
You can also ask us to delete your data by writing to support@timetrack.io.
9. Security
We protect your data with Android's app sandbox on the device and HTTPS in transit to our server.
- App data lives in private storage that other apps cannot read.
- Sign-in uses a password exchanged for an access token; the app keeps the token, not your password.
- Health Connect readings are not stored or transmitted, which keeps the most sensitive data off our systems.
- Only people who run the service can reach server data, and only when needed to operate it or answer your request.
No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
10. Children
The app is not directed to children under 13, or under 16 in the European Union. We do not knowingly collect personal data from them. If you believe a child has given us personal data, write to support@timetrack.io and we will delete it.
11. Your rights
You can access, correct, export and delete your data, and withdraw consent at any time, free of charge.
Under the GDPR and similar laws you have the right to:
- access your data and get a copy of it;
- correct inaccurate data;
- delete your data;
- restrict or object to processing, including usage statistics;
- receive your data in a portable format;
- withdraw consent, for example to Health Connect or calendar access, without affecting earlier processing;
- complain to your data protection authority.
Most of these work directly in the app: Export for a copy, Profile > Delete for erasure, Settings > Send anonymous usage statistics to object to analytics, and Health Connect app permissions to withdraw consent. For anything else, email support@timetrack.io. We reply within 3 days.
California residents: we do not sell or share personal information as the CCPA defines those terms, and we do not use sensitive personal information to infer characteristics about you.
12. Changes and contact
We may update this policy when the app or the law changes. The date at the top shows the latest version. We will announce material changes in the app or by email, and ask for new consent where the law requires it, for example before reading a new type of Health Connect data.
Questions, requests or complaints: Productive Tools OU, support@timetrack.io.