Privacy Policy

Last updated: October 1, 2026

In short: Timesheep has no accounts and no servers that hold your data. Your Jobs, hours, pay and notes stay on your phone. The app sends a few anonymous usage events, with no personal data in them, so we can see which parts of the app are used. Purchases go through Apple or Google. We never sell data, show ads or track you across other apps and websites.

Who we are

Timesheep is made by an independent developer based in Poland, who is the controller of the personal data described here. Questions about privacy, or requests about your data, go to contact@timesheepapp.com.

The app

Your work data stays on your phone

Everything you enter in Timesheep (your Jobs, Rates and rules, Work Sessions, Breaks, Tips, notes, Days Off, Paychecks and settings) is stored only in a database inside the app on your device. There is no account, and we never receive this data. If you delete the app, the data is deleted with it, unless you kept a Backup.

Backups you make, and your phone’s own backups

Backup files and Timesheets. When you export a Backup or share a Timesheet (PDF or CSV), the app hands the file to your phone’s share sheet. Where it goes, such as your email, a cloud drive or a colleague, is your choice, and the service you pick handles it under its own terms.
Device backups. Your phone may include the app’s data in its own backups: iCloud Backup on an iPhone, and Android’s automatic backup to your Google account. These are set up by you with Apple or Google, are stored in your own account, and are handled under their privacy policies. We cannot read them.

Reminders

Reminders such as “Still clocked in?” are scheduled on your phone. They are not sent through a server, and the app asks for permission before showing any.

Anonymous usage events

To learn which features are used and where new users give up, the app sends a small set of events to PostHog (PostHog Inc.), on its EU servers in Frankfurt, Germany. The events are:

the app was opened; the setup questions were started or finished; the paywall or the special offer was shown; a purchase was completed or restored;
a Job was created (with its kind: paid by the hour or salary with contract hours); a Work Session was added (by the clock, by hand or as a copy); last week was repeated; a Timesheet was shared (PDF or CSV); a Backup was made or restored; the review prompt was shown;
in the setup questions, which of the listed priorities you picked (such as “Never miss Overtime pay”).

Each event carries a random ID made by the app when it is first opened, your device’s operating system and version, the app version and the app’s language. Events never contain your hours, pay, Job names, notes, location, contacts or any other content you enter. The random ID is not linked to your name, email, Apple or Google account, or advertising ID, and PostHog does not build a profile of you. Our PostHog project is set to discard IP addresses.

We rely on our legitimate interest in improving the app (Art. 6(1)(f) GDPR). PostHog keeps events for up to one year. You can object at any time by emailing us with the request; tell us roughly when you installed the app, since we cannot otherwise know which random ID is yours.

Purchases and subscriptions

Subscriptions and purchases are made through the Apple App Store or Google Play, under their terms and privacy policies. We never see your name, email address or payment details.

To check whether you have an active subscription, the app uses RevenueCat (RevenueCat, Inc., USA). RevenueCat receives the store’s purchase records, an anonymous app user ID, technical data about your device and the app, and, as part of each connection, your IP address. It needs these to confirm purchases and restore them on a new phone. We rely on the contract with you (Art. 6(1)(b) GDPR). Data sent to the USA is protected by the EU Standard Contractual Clauses.

Apple and Google

Apple and Google provide the App Store and Google Play and may collect data about downloads and app use under their own policies. If you have agreed in your phone’s settings to share crash reports or usage data with app developers, they may pass us anonymous, aggregated statistics.

What the app does not do

No ads, no advertising ID, and no tracking across other companies’ apps or websites.
No sale or sharing of your data with data brokers.
No artificial intelligence services: nothing you enter is sent to an AI provider.
No access to your location, contacts, photos or calendar.

This website

timesheepapp.com is hosted by Cloudflare (Cloudflare, Inc.). To deliver the pages and protect them from attacks, Cloudflare processes your IP address and technical request data, and keeps them only briefly. The site sets no cookies, has no analytics, and loads no fonts or scripts from other companies. If you close the note that offers the German version, your browser remembers that locally, and it is never sent to us.

Email

If you email us, we use your address and message only to reply and to help you, and delete them when they are no longer needed for that, at the latest two years after our last exchange.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable form. Since your work data never leaves your phone, you control it directly in the app. For anything else, email contact@timesheepapp.com. You can also complain to a data protection authority, such as the Polish President of the Personal Data Protection Office (UODO) or the authority where you live.

Children

Timesheep is meant for people who work. It is not directed at children under 16, and we do not knowingly collect data from them.

Changes

If the app starts handling data differently, for example with automatic Backups, we will update this page before the change is released and change the date at the top.