Privacy Policy

The short version

• We collect the account details Google or Apple share when you sign in, the work you track, and your subscription status.
• We do not use analytics, advertising, or tracking software. There is none in the app or on the site.
• We never see your card number. Stripe and Apple handle payment details directly.
• We do not sell your data, and we do not share it with data brokers or advertisers.
• You can delete your account, and everything in it, from inside the app at any time.

What we collect

Account details. You sign in with Google or with Apple. From Google we receive your name, email address, profile picture, and Google’s identifier for your account. From Apple we receive Apple’s identifier for your account, an email address, and your name if you choose to share it.

If you choose Hide My Email when signing in with Apple, the address we get is a private relay that Apple forwards to you, and we never see your real one. Apple also tells us if you turn that forwarding off, so we stop emailing an address that would bounce. For Apple sign-ins we keep a token Apple issues, stored encrypted, so that deleting your account can also revoke Hourly’s access to your Apple ID.

We note which of the two you signed up with, and whether that was on the web or in the iPhone app. We also store the timezone your device reports, so that a day starts and ends where you are rather than at UTC.

The work you track. Clients (name, contact email, notes), projects (name, colour, hourly rate), tasks, and time entries (start and end times, notes, whether the entry is billable, and its rate). This is the content of the service — it is stored so we can show it back to you.

Subscription status. If you subscribe, we store an identifier from the payment provider — a customer and subscription ID from Stripe on the web, or a transaction identifier from Apple in the iOS app — along with your plan, its status, and the renewal date. Card numbers, bank details, and billing addresses never reach our servers.

Email. We use your address to send a welcome when you sign up, a reminder or two if you have not tracked anything yet, the weekly summary each Monday morning, and, only if you turn it on, an end-of-day reminder on weekdays with nothing tracked (in the iPhone app it comes as a notification instead). Whether you want the weekly summary and the end-of-day reminder is stored with your account, and you can turn either off in Settings at any time.

What we do not collect

There is no analytics SDK, no advertising SDK, and no crash-reporting service in Hourly. We do not track you across other apps or websites, we do not build advertising profiles, and we do not collect your location, contacts, photos, health data, or device identifiers used for tracking.

Why we hold it

To run the service — to show you your hours, add them up, and export them; to take payment and know which plan you are on; to send the weekly summary and the end-of-day reminder if you have asked for them; and to keep the service secure and working.

We do not use your tracked hours for anything other than showing them to you. We do not read them, mine them, or use them to train machine-learning models.

Who else touches it

These companies process data on our behalf so that Hourly can work. There is no one else.

• Google — sign-in, if you choose it. They confirm who you are; we receive your name, email, picture, and Google’s identifier for your account.
• Apple — sign-in, if you choose it, where we receive Apple’s identifier for your account, an email address (possibly a private relay), and your name if you share it. Also purchases made inside the iOS app, and the receipts that confirm them.
• Stripe — payments made on the web, and the card details we never see.
• Amazon Web Services — hosting and the database, plus delivery of the emails we send (Amazon SES).
• Cloudflare — domain routing and email forwarding.

We will also disclose data where the law genuinely requires it, and if Hourly is ever sold or merged, your data would transfer with it — you would be told before that happened.

Where it lives

On Amazon Web Services infrastructure in the United States (us-east-1): the app runs on a server there, and your data is kept in a Postgres database (Amazon RDS) that is not reachable from the public internet. If you are using Hourly from elsewhere, your data is transferred there. It is encrypted in transit with TLS, both between your device and our server and between our server and the database.

The database is backed up automatically, and a further copy of it is saved on our app server each time we update Hourly, so the service can be put back after a failure. Backups are deleted within 30 days, and they are never used to bring back a single account.

We never store a password for you, because we never ask for one — Google or Apple handles signing in.

Deleting your account

Open Settings in the app and choose Delete account. This removes your account and every client, project, task, and time entry attached to it. It takes effect immediately and cannot be undone, so export anything you want to keep first.

Copies in our backups are gone within 30 days, as those backups expire. Payment providers keep their own records of completed transactions for as long as tax and accounting law requires; that part is outside our control. Cancelling a subscription bought through Apple is done in your Apple account settings, and deleting your Hourly account does not cancel it for you.

You can also email us and we will do it for you. Whatever your local law entitles you to — a copy of your data, a correction, deletion, or an objection to how it is handled — ask and we will honour it. The app exports your entries to CSV whenever you want one, and Settings → Your data downloads everything in your account as one JSON file, on every plan.

How long we keep it

For as long as you have an account. Delete the account and it goes with it, and from our backups within 30 days. If you simply stop using Hourly, your data stays until you ask us to remove it.

Children

Hourly is a tool for working professionals and is not directed at children. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, write to us and we will remove it.

Changes

If this policy changes, the date at the top changes with it. If a change materially affects how your data is handled, we will tell you by email rather than quietly editing the page.

Contact

Questions, requests, or complaints: hello@hourlylogs.com. Our Terms of Use cover the rest of the relationship.