Privacy Policy

Who we are

TimeKnot is a time-tracking and task management tool built for individuals and teams. We connect with Notion and Clockify to keep your work and time data in sync. This policy explains what data we collect, why, and how we handle it.

What we collect

We only collect what's necessary to run the service.

• Account data — your email address and name, provided when you sign up or via Google OAuth.
• Profile photo — if you choose to upload one. Stored in Supabase Storage and never shared.
• Timer sessions — start time, end time, duration, and the description you give each session. This is the core of the service.
• Workspaces — names and icons you create, and which members belong to them.
• Integration credentials — your Notion OAuth token (when you connect Notion) and your Clockify API key (if you choose to connect Clockify). These are stored securely and used only to sync data on your behalf.
• Tasks and projects — if you use native workspaces, your task names, descriptions, statuses, and project names are stored in our database.

What we do not collect

• We do not use advertising trackers or sell your data to third parties.
• We do not use third-party analytics services (no Google Analytics, Mixpanel, or similar).
• We do not read the content of your Notion pages beyond what you explicitly connect to a TimeKnot workspace.

How we use your data

• To authenticate you and run your account.
• To display your tasks, timers, and reports.
• To sync your time entries to Clockify if you have connected it.
• To send account-related emails (email verification, password reset). We do not send marketing emails without your consent.

Sub-processors

We use the following third-party infrastructure to operate the service:

• Supabase — authentication, database, and file storage. Your data is stored in Supabase-managed infrastructure. Supabase is GDPR-compliant and offers a Data Processing Agreement.
• Vercel — application hosting and edge network. Processes request metadata (IP, user agent) to serve responses.
• Notion — only accessed when you explicitly connect a Notion workspace. We read and write only the databases you select.
• Clockify — only accessed when you connect your Clockify account. We create and update time entries on your behalf.
• Google Analytics (GA4) — anonymised usage analytics. No personally identifiable data is shared.
• Microsoft Clarity — anonymised usage analytics for product improvement. No personally identifiable data is shared.

Data retention

Your data is kept for as long as your account is active. When you delete your account from Settings, all your data — timer sessions, workspaces, profile, and integration credentials — is permanently removed from our database within 30 days.

Your rights (GDPR)

If you are based in the European Economic Area, you have the following rights:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data from your Settings page.
• Erasure — delete your account and all associated data from Settings.
• Portability — export your time history as a CSV from the Reports page.
• Objection — contact us to raise any objection to how we process your data.

To exercise any of these rights, email us at hello@timeknot.app.

Cookies & analytics

We use the following cookies and analytics tools:

• Supabase session cookie — keeps you signed in. Essential for the service to function.
• Google Analytics (GA4) — collects anonymised usage data such as page views and session duration to help us understand how the product is used. No personally identifiable information is shared with Google.
• Microsoft Clarity — collects anonymised usage data to help us understand how the product is used and identify usability improvements. See Microsoft's privacy statement for details.

You can acknowledge our cookie use via the banner shown on your first visit. You may also opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

Changes to this policy

If we make material changes, we will update the date at the top of this page. Continued use of TimeKnot after changes means you accept the updated policy.

Contact

Questions about this policy? Email hello@timeknot.app.