TrackTime is a time-tracking service for professionals who bill by the hour. This policy explains what we collect, why, and what we never collect. The short version: we capture metadata, never content.
Using TrackTime Lite from the Play Store? Lite has a narrower set of permissions and no auto-detection. See the Lite privacy policy for the version that applies to that app.
TrackTime is operated by TripleDot LLC. References to “we,” “us,” or “TrackTime” in this policy refer to TripleDot LLC. Contact us through our contact form.
To deliver TrackTime, we collect:
We use your data to provide the service: showing you your time entries, generating invoices, syncing across your devices, sending receipts and security notifications. We do not sell your data, and we do not use your data to train AI models.
38AA B7D0 0D13 E4C2 378E 2B4A DA51 1391 662B 70DD. Before relying on a signed document, verify its signature against this fingerprint as published here, not against a copy sent alongside the document.We share data only with vendors required to run the service:
We do not share your data with advertisers or data brokers under any circumstances.
You can export every time entry, client, and invoice you've created. You can delete your account at any time; access ends immediately and all account data is permanently deleted from our systems 30 days later. Individual time entries you delete are permanently removed within 30 days. Backups are encrypted and destroyed after 90 days. To request export or deletion, use our contact form.
We use first-party, HTTP-only session cookies for authentication (an access token, a refresh token, and a CSRF token). We do not use third-party advertising or behavioral analytics cookies. Aggregate usage telemetry (page views, feature usage counts) is collected only to size capacity; no individual user is identified in those aggregates.
TrackTime is a professional product and is not directed at children under 16. We do not knowingly collect data from minors.
Our infrastructure is located in the United States. If you sign up from outside the US, your data is transferred to the US for processing. We rely on Standard Contractual Clauses where required by GDPR.
The TrackTime Android app requests the following permissions. Each one maps to a specific feature; we do not request a permission “just in case.”
READ_PHONE_STATE, READ_CALL_LOG) — detect that a call started/ended and read its duration and contact identifier, so we can suggest a draft time entry. We never record audio.READ_SMS) — count SMS messages sent/received per contact for time-entry suggestions. Message bodies are never stored or transmitted. As described in section 1, the first few words of an incoming message may appear briefly on the on-device confirmation popup, held in memory only.READ_CONTACTS, optional) — match captured phone numbers and email addresses to a client name you've saved. If you decline this, captures still work; they just show the raw number/address instead of the contact name.BIND_NOTIFICATION_LISTENER_SERVICE) — detect sent-mail confirmations from Gmail and Outlook, incoming RCS messages via Google Messages, and incoming WhatsApp, Signal, and Telegram messages. Notifications from any other app are ignored without being inspected. Replies sent from the notification's quick-reply action are also detected. We keep only the sender identifier, originating app, and time; message body content is never stored or transmitted, though the first few words may appear briefly on the on-device confirmation popup as described in section 1.BIND_ACCESSIBILITY_SERVICE) — detect outgoing email sends. Outgoing email events are not exposed via the notification system on Android, so the Accessibility framework is the only API surface that allows the app to detect them. The service is restricted at the operating-system level to Gmail, Outlook, and Google Messages and receives nothing from any other app. Within those apps it reads only the recipient and subject fields of an email being composed and the conversation title in Google Messages; the recipient becomes the client match, and the subject is used only for the on-device popup and is never stored or transmitted. It does not read message or email bodies, capture keystrokes, or perform any action on screen, and it persists nothing beyond the timestamp, counterparty identifier, and originating app.FOREGROUND_SERVICE) — keep the capture service alive while the app is in the background, with a persistent system notification visible to you at all times.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS) — prevent Android Doze from killing the capture service. Without this, captures stop a few hours after the screen turns off.Before requesting any of the restricted permissions above (Accessibility, Notification Listener, SMS, Call Log), TrackTime shows an in-app disclosure explaining what the permission enables and what is and is not accessed. You may revoke any permission at any time from Android Settings; the app degrades gracefully and continues to function with reduced capture coverage.
We'll email all account holders at least 30 days before any material change to this policy. Non-material changes (clarifications, typo fixes) may be made without notice but are reflected in the “Last updated” date above.
Questions or requests: send a note via our contact form.