TimeMark Privacy Policy

Last updated: May 20, 2026 · Applies to version 1.0.0 and later

TimeMark is a personal time-tracking app. We do not use advertising tracking, third-party analytics SDKs, or user profiling. Data that can stay on your device is kept on your device by default.

Data We Process

• Your voice or text input may be converted into time entries, including project, activity, time range, tags, category, notes, transcript text, and local recording file references.
• Entries are stored locally in the app sandbox by default. You may also choose a local folder or iCloud Drive folder as your vault.
• Speech input uses Apple's Speech framework. Raw audio may be saved locally in your vault as original input material, and is not uploaded to TimeMark servers by the current version.
• TimeMark sends personal data to cloud AI services only after you give explicit in-app consent. You can revoke this consent in Settings; after revocation, cloud AI will not receive new inputs or time-entry summaries.
• For time parsing, the app may send the current transcript or typed input, timestamp, timezone, input source, and a same-day timeline summary for disambiguation.
• For Ask AI, the app may send your question, query scope, and relevant entry summaries such as date, time range, category, project, activity, and duration. The current version does not send raw audio or full raw transcripts to Ask AI.
• The recipient depends on your AI setting: Kimi mode sends requests directly to Moonshot AI (Kimi) over HTTPS; Gemini, DeepSeek, or a custom provider sends requests to the provider you configure; the default server mode sends requests to https://isaac2024.online and the AI provider used for that request.
• Third-party AI providers receive only the minimum content needed to complete the requested AI feature and are expected to provide the same or equal data protection. We do not intentionally send advertising identifiers, contacts, photos, precise location, health data, or account identity to model providers.

Data We Do Not Collect

• Advertising identifiers or cross-app tracking data
• Contacts, photos, health data, calendar data, or precise location
• Payment information
• Third-party analytics SDK data

Retention

• Local entries, transcript text, and local recording files remain until you delete them, clear app data, remove vault files, or uninstall the app.
• Server-side request content is used to complete the current parsing or question-answering request and is not retained long term.
• Server access logs may include IP address, timestamp, request path, and error information, and may be retained for up to 7 days for troubleshooting, abuse prevention, and security auditing.

Your Controls

• You can view, edit, and delete entries in the app.
• You can clear all records or change/remove the local vault in Settings.
• You can leave third-party API keys empty or clear them at any time.
• You can grant or revoke cloud AI data-sharing consent in Settings.
• You can deny microphone or speech recognition permissions, in which case voice input will not work.

Contact

For privacy questions or deletion requests, contact privacy@isaac2024.online.