Privacy policy

UseHourly is a free time tracking app run by Zontak LLC. This page says in plain words what we keep and why.

What we store

• Your account details: your name, your email address and your sign-in credentials. If you sign in with GitHub, we receive your GitHub name, your verified email address and your GitHub account number, and nothing else; we cannot see your repositories.
• What you enter: clients, projects, time entries, notes, rates and invoices.

What we do with it

• We use it only to run the app for you: to show your timesheets, reports, invoices and exports.
• We do not sell your data, we do not show ads, and we do not share your entries with anyone.
• We count how many times each page of the app is opened, per day, to see which parts are used. The count holds no name, email address, account identifier or anything you type, and uses no cookies.
• If you choose to polish descriptions with your own AI key, the key stays in your browser and is never sent to us. Your browser sends that one description and the project and client names to the service you chose (Anthropic or OpenAI), under your own account with them, and only when you press Polish.
• If you import a calendar file on the Today page, it is read in your browser. Only the title, start and end of recent meetings are kept, in your browser, and they are removed when you log out or remove the calendar. The file itself and the meetings are never sent to us. If you connect a calendar by its private address instead, the address is kept only in your browser, and each time the calendar is read the address passes through our server once, to fetch it from Google, Outlook or iCloud (they do not let a web page read it directly). We do not store or log the address or the calendar. If you press Connect Google Calendar, Google's own sign-in window asks you to allow UseHourly to read your calendar events (read-only). Your browser then reads your events straight from Google; the access Google gives lasts about an hour, is kept only in your browser's memory, and never reaches our servers. Only the title, start and end of recent meetings are kept, in your browser, until you log out or press Disconnect. You can also remove UseHourly's access any time at myaccount.google.com/permissions.
• We may email you about your account (for example, a password reset). We do not send marketing email.

Where it lives

Your data is stored with our hosting provider, Cloudflare. Donations are handled by GitHub Sponsors, which has its own privacy policy; we never see your payment details.

Your choices

• You can export everything you have entered at any time from the Account page.
• You can delete your account yourself at the bottom of “Your data” on the Account page. That removes your clients, projects, time entries, invoices and settings from our database straight away. Backups kept by our hosting provider for disaster recovery expire on their own within 30 days.
• If an email address bounces or is reported as spam, we stop sending reminders to it.

Contact

Questions: admin@zontakllc.com.