Privacy policy
Last updated:
The short version: we keep only what we need to run Tyme, we store it in the EU, we never sell it, and you can take it with you or have it deleted.
Who we are
Tyme is a time-tracking service run by Tyme (tyme.co). In this policy, “we” and “us” mean Tyme. You can reach us through the contact form.
Who controls your team’s data
When a company or team uses Tyme, the workspace owner decides who is invited, what is recorded and how long it is kept. For the time entries, projects and people in a workspace, the workspace owner is in charge of the data, and we look after it for them. If you are a member of someone else’s workspace, questions about your time records are best sent to your workspace owner first. We will help either of you.
What we collect
- Your account: your name, email address and password. Passwords are stored only as a secure hash, never in plain text.
- What you put into Tyme: time entries and notes, projects, clients, tasks, tags, rates, budgets, capacity, time off, teams and roles.
- Sign-in details: when you log in, we store the session along with the IP address and browser type it came from, so you stay logged in and we can spot misuse.
- Change history: Tyme records who changed a time entry and when, so a team can trust its numbers.
- Messages you send us: if you use the contact form, we keep your name, email address and message so we can reply.
We do not collect anything from other websites, and we do not buy data about you from anyone.
How we use it
- To run Tyme for you and your team, and keep it secure.
- To send emails the service needs, such as invites and password resets.
- To answer you when you contact us.
We use your data because we need it to provide the service you signed up for, and, for security, because we have a legitimate interest in keeping accounts safe. We do not use it for advertising, and we do not sell, rent or share it for anyone’s marketing.
Cookies
Tyme uses only essential cookies: a login cookie that keeps you signed in, and a small cookie that remembers which workspace you opened last. There are no analytics, advertising or tracking cookies, and no third-party scripts on our pages. Because these cookies are needed for the service to work, we do not show a cookie banner.
Where your data is stored
Tyme and its database are hosted in the European Union, with Railway, in the Netherlands. Railway provides the servers Tyme runs on. If we use an email delivery service to send invites or password resets, it receives only the recipient’s address and the message itself.
How long we keep it
We keep your data while your account or workspace exists. When a workspace owner deletes data, or asks us to delete a workspace, we remove it from Tyme. Messages sent through the contact form are kept only as long as we need them to deal with your request.
Your rights
You can:
- Export your time records at any time, as CSV or Excel from the reports.
- See and correct your account details and your own time entries.
- Delete your data. Ask us, or your workspace owner, and we will delete your account and the data that belongs to it.
- Ask questions or object to how we use your data, through the contact form.
If you are in the EU or UK and are unhappy with how we handle your data, you can also complain to your local data protection authority. We would appreciate the chance to put it right first.
Security
Connections to Tyme are encrypted, passwords are hashed, and each workspace’s data is kept separate from every other workspace. Only the people a workspace owner invites can see that workspace, and rates and money are hidden from roles that should not see them.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change matters for how your data is used, we will tell workspace owners before it takes effect.