Terms & Conditions and Privacy Policy

1. Acceptance and scope

These Terms & Conditions (the "Terms") are a binding agreement between you and tigran, doing business as Timely ("Timely", "we", "us", or "our"), and they govern all access to and use of Timely Teams (the "Service") — including the Teams features of the Timely apps for iPhone and iPad, the Timely web app, shared kiosk devices, widgets and notifications, the Timely app for Mac where Teams features are available there, and the Timely Teams pages on timelyapp.net.

You accept these Terms by doing any of the following: creating a team; joining a team; accepting a team invitation or entering a team join code; recording a punch on a Timely kiosk device; being granted a manager or admin role in a team; or continuing to use the Service after these Terms are updated.

If you are accepting these Terms on behalf of a company, partnership, sole proprietorship or other organisation, you represent that you have the authority to bind that organisation, and "you" refers to that organisation.

These Terms apply to Timely Teams specifically and take precedence over our general Terms of Service to the extent of any conflict. The general Terms continue to apply to your personal, non-team use of Timely.

2. Definitions

Team Owner (or "Owner")

The account that creates a team. In practice the Owner is the business, or someone acting for it, and is the employer or engager of the people in the team.

Manager

Any member the Owner has granted elevated capabilities through Role Access — for example reviewing timesheets, correcting punches, operating a kiosk, or removing members. References to what the "Owner" can see or do include Managers to the extent the Owner has granted them that capability.

Member (or "Employee")

Any person who joins a team, whether an employee, contractor, or other worker.

Team Data

Data created in the context of a team — post-join work sessions, live clock status, schedules, pay rates set by the Owner, timesheets, payroll snapshots, punch edit history, kiosk records, activity logs, and job site definitions.

Personal Data (of a Member)

Everything a Member records for themselves, including all work sessions created before joining the team, savings goals, expenses, notes and tags, and any income or pay stub the Member enters in their own app. Personal Data is not Team Data and is never disclosed to the Owner by the Service.

Owner-Issued Pay Records

Extra income an Owner records against a Member — a bonus, tips-out, shift premium, reimbursement or similar — together with the amount, date and the reason or description the Owner attaches. Owner-Issued Pay Records are created by the Owner, belong to the Owner's business, and are Team Data.

3. Eligibility and accounts

• You must be at least 16 years old to hold a Timely account or to be a Member of a team. A Team Owner must not attempt to track workers under 16 through the Service, and must not create accounts on their behalf.
• For Members aged 16 or 17, the Owner is responsible for complying with all applicable child-labour, working-hours and parental-consent requirements. Timely does not enforce, monitor or verify any of them.
• You are responsible for the accuracy of the information on your account and for keeping your credentials confidential. You are responsible for activity that occurs under your account, except activity resulting from our own failure.
• Accounts are personal to one individual. Accounts must not be shared. The one exception is a kiosk device operated under Section 9, where a single device is used by multiple Members who each authenticate with their own PIN.
• We may refuse, suspend or close an account or a team that we reasonably believe violates these Terms or presents a risk to other users.

4. What Timely Teams is — and what it is not

Timely Teams is a time-tracking and shift-record tool. It helps a business capture clock-ins, breaks, schedules and shift history, and organise them into records that can be reviewed and exported.

Timely Teams is expressly NOT any of the following, and you agree not to rely on it as such:

• Not a payroll provider. We do not calculate, withhold, file or remit wages, taxes, benefits or garnishments, and we do not send money to anyone. Any earnings figure shown in the Service is an estimate produced from the rates and rules the Owner entered.
• Not your legal system of record. Wage and hour law requires employers to keep their own time and payroll records, generally for two to three years. Timely may prune, archive or delete data as described in the Privacy Policy. The Owner must maintain independent records and must not rely on Timely as their only copy.
• Not a compliance product. Overtime rules, rounding rules, break rules, pay periods and job sites are settings the Owner chooses. Some configurations that the Service permits are unlawful in some jurisdictions — time rounding in particular is restricted or prohibited in several states. We do not review, validate or warn about the lawfulness of a configuration.
• Not legal, tax, HR or accounting advice. Nothing in the Service or on our website is advice. Consult your own professionals.
• Not an authoritative timekeeping device. Clock-ins depend on phones, network connectivity, location hardware, operating-system permissions, background execution limits and third-party services, all of which can fail or be delayed. Missed, late, duplicated or inaccurate punches will happen. The Owner must review hours with the affected worker before relying on them.

Before paying anyone, the Owner must independently verify the hours. Approving a timesheet in Timely is an internal workflow step; it is not a determination that the hours are correct or that the resulting pay is lawful.

5. Team owner responsibilities

If you create a team, you are the Team Owner, and you are solely responsible for the matters in this Section. You acknowledge that you, not Timely, are the employer or engager of the Members in your team.

5.1 Employment and pay

• Complying with all applicable wage and hour law, including minimum wage, overtime, meal and rest breaks, reporting time, split shifts, pay frequency, itemised wage statements, final pay, recordkeeping and child-labour rules.
• Correctly classifying workers as employees or contractors, and paying all wages and taxes due.
• The accuracy of everything you configure or record: pay rates, overtime rules and thresholds, rounding, break preferences, pay period schedules, job sites, role permissions, and any extra income you record against a Member, including the reason you attach to it.
• Actually paying any bonus, tips-out, premium or reimbursement you record in Timely. Recording it here is a note, not a payment, and does not discharge what you owe.
• Independently reviewing hours and resolving any dispute about them directly with the worker.

5.2 Access and security

• Sharing your six-character team join code only with people you intend to invite, and regenerating it if it circulates further. Anyone with the code and a Timely account can request to join.
• Promptly removing Members who leave your business, and reviewing which roles hold which capabilities under Role Access.
• The physical security of any device you run as a kiosk, and the conduct of anyone you allow to operate it.
• Everything that happens to data after you export it. Once you download a payroll CSV or report, or send it to a bookkeeper or payroll provider, it is outside the Service and outside our control, and you are solely responsible for it.

5.3 Your team's data

• Having a lawful basis to collect, view and retain the work-session, location and status data of your Members in every jurisdiction where you operate.
• Providing your Members with any notice, and obtaining any consent, that the law requires — see Section 6.
• Responding to your workers' requests to access, correct or delete their data, and telling us when you need our help to action one.
• Not using the Service to collect data about anyone who is not a worker in your business, and not using it for purposes unrelated to tracking work time.

6. Monitoring, location and notice

Some Timely Teams features are, in legal terms, electronic monitoring of workers. If you enable them, you are the party doing the monitoring.

Features that may involve monitoring include: live clock status visible to Owners and Managers; location capture at clock-in and clock-out; job sites and geofences, including blocking a clock-in outside a radius and automatically clocking someone out when they leave one; alerts sent to Owners and Managers when a Member clocks in or out away from a job site; overtime alerts; kiosk punch records; and the team activity log.

As a condition of using these features, the Owner represents and warrants that it will, before enabling them:

• Give affected workers clear written notice of what is collected, when, and who can see it — including any prior written notice of electronic monitoring required in states such as New York, Connecticut and Delaware, and any notice or consent required for location tracking under state law (for example California) or under the GDPR/UK GDPR where those apply.
• Obtain consent where consent is the lawful basis relied on, and honour a withdrawal of consent.
• Limit location features to working time, and not use them to determine a worker's whereabouts when they are off the clock. Timely captures location only in connection with a clock event or a geofence for the team's configured job sites, but the Owner is responsible for how the resulting information is used.
• Not use monitoring data to discriminate or retaliate unlawfully, and not use it as the sole basis for discipline without giving the worker a chance to explain.

Members can revoke location permission at any time in their device settings. Where an Owner has set location as a requirement for clocking in, revoking it may prevent clock-in; that consequence is the Owner's configuration, not our decision.

7. Team member terms

If you join a team, you acknowledge and agree to the following. This is the same information the app shows you during the join flow.

7.1 Pay records: what your employer issues vs. what you record

Timely keeps two kinds of pay record apart, and they are treated differently:

• Owner-Issued Pay Records are team records. Where your employer records extra income against you — a bonus, tips-out, shift premium or reimbursement — that entry, its amount and date, and the reason or description your employer attaches, are Team Data. Your employer created them and can see, edit and export them, and they are retained with the team's records under Section 16. They appear in your app so you can see what you were credited with.
• What you record for yourself stays yours. Income, tips, bonuses or pay stubs you enter in your own app are Personal Data. They are not shared with your employer, they are not part of the team's payroll records, and this does not change if the pay came from another job.
• Your employer controls whether you can add your own extra income. Adding your own extra income is one of the features an Owner can switch on or off for members through App Controls, as described below. Where it is switched off, you will not be able to add these entries while you are a Member. Switching it on does not make the entries visible to your employer — anything you record for yourself remains Personal Data.
• Neither record determines your pay. An Owner-Issued Pay Record in Timely is a note of what your employer says they are paying you. It is not a payment, not a wage statement, and not proof of payment. What you are actually owed is governed by your employment terms and by law, not by an entry in this app.

You also agree that:

• Shifts you enter manually or backdate while you are a Member count as team work and are shared with the Owner, even if the shift date falls before you joined.
• While you are a Member, certain settings in your personal app are controlled by the Owner (for example pay rate, break rules, rounding, whether you can add your own extra income, and which other features are available to you). None of this is destructive; your personal settings return when you leave.
• You may leave a team at any time from within the app. Leaving stops all further data sharing immediately.
• Work sessions you recorded while a Member remain visible to the Owner after you leave, and are retained as part of the Owner's business records. See Section 11 and the Privacy Policy for what happens to them and how to ask for their removal.
• The times recorded for you are your own record too. You should review them and raise any inaccuracy with your employer promptly.

8. Managers and delegated access

An Owner can grant capabilities to other Members through Role Access — including reading team data, reviewing and approving timesheets, correcting punches, setting vacation and time off, operating a kiosk, and removing Members. Where a capability has been granted, references in these Terms to the Owner include the Member holding it.

The Owner is responsible for who holds which capability and remains responsible for everything those people do in the team. Granting a capability does not transfer the Owner's obligations under these Terms.

9. Kiosk mode

Kiosk mode turns one device into a shared punch clock. Members authenticate with a numeric PIN rather than signing in.

• PINs are stored only as a cryptographic hash. Neither the Owner, a Manager, nor Timely can read a PIN back. A PIN is not a substitute for account security and must not be reused from any other system.
• Punches made on a kiosk are recorded to the team with the operating device attributed as the source, and are written to a kiosk audit log along with PIN changes, resets, lockouts, blocks and failed attempts.
• Repeated incorrect PIN entries lock a Member out temporarily, and an Owner or Manager can block or restore kiosk access and can end a shift left open on the kiosk.
• The Owner is responsible for the kiosk device: its physical security, keeping it in the intended app, and the conduct of whoever operates it. Anyone standing at the device can attempt a punch with a PIN.
• The Owner must tell Members that punches on the kiosk are recorded and audited, and must not use the kiosk to punch on a Member's behalf except to correct an error, which is recorded as an edit under Section 10.

10. Records, corrections and audit

An Owner or a Manager with the punch-editing capability can change a Member's recorded clock-in time, clock-out time and break duration, and can close a shift that was left running.

• Every such change is written to an append-only edit history on the shift, recording who made it, when, the reason given, and the values before and after. A Member's own correction of a shift already shared with the team is recorded the same way.
• Edit history is retained for the life of the team and is not editable or deletable through the Service.
• Approving a pay period freezes a payroll snapshot and locks the shifts inside it against further edits.
• Changing a record in Timely does not change what a worker is legally owed. Editing a punch to reduce recorded time, without the worker's knowledge or agreement, may be unlawful; the Owner is solely responsible for that decision.
• We are not a party to, and take no position in, any dispute between an Owner and a Member about hours or pay. We may, at our discretion and where lawful, provide either party with a copy of the records we hold.

11. Data roles and ownership

• Team Data belongs to the Owner's business. For Team Data, the Owner is the data controller (or, under US state privacy laws, the business), and Timely acts as a processor or service provider on the Owner's documented instructions. Our processing commitments are set out in Section 16 of the Privacy Policy.
• Personal Data belongs to the Member who recorded it. We do not give the Owner a route to it, and we do not use it for the Owner's purposes.
• Account data belongs to the individual. For a person's own account (email, name, sign-in, device and diagnostic information, subscription state and product analytics), Timely is the controller, and our own Privacy Policy governs.
• The Owner grants us the licence necessary to host, process, transmit, back up, display and export Team Data to provide the Service, and to produce anonymised and aggregated statistics that do not identify any person or business.
• The Owner warrants that it has the right to provide us with all Team Data, including personal information about its workers, and that our processing of it on the Owner's instructions will not put us in breach of any law or agreement.

12. Plans, billing and payment

12.1 How Timely Teams is sold

Timely Teams is available either (a) as part of a Timely Elite subscription purchased through the Apple App Store, or (b) under a Founding Partner or other plan billed directly by us. Where a subscription is purchased through Apple, Apple's terms govern billing, renewal, refunds and cancellation, and you manage it in your Apple account settings. The rest of this Section applies to plans billed directly by us.

12.2 Founding Partner plan

• $49 per month, including up to 20 active employees and up to 3 locations. The included allowance is charged in full whether or not you use all of it; we do not bill per employee.
• There is currently no way to exceed the included allowance, and no charge for doing so. A team is capped at 20 active employees and 3 locations, and the service will decline additions beyond that. Support for larger teams is planned; if and when we offer it, any additional fee will be published and agreed with you in advance, and it will never be applied to your subscription automatically.
• An "active employee" is a Member who is not archived or removed for at least one day during the billing month. The employee allowance is shared across all of your locations. Removing and re-adding the same person within a month does not create a second charge.
• Fees are billed monthly in advance, on the card or invoice arrangement on file, and are exclusive of any sales, use or similar taxes, which you are responsible for.

12.3 Trial

Where a free trial is offered, it runs for the stated period — currently 45 days — and begins on the earliest of: the opening date you give us, the first employee clock-in in your team, or 90 days after your account is created. Unless you cancel before the trial ends, the plan converts automatically to a paid monthly subscription at the rate confirmed to you in writing at activation.

12.4 Renewal, changes and cancellation

• Subscriptions renew automatically each month until cancelled. You may cancel at any time, effective at the end of the current billing period, by writing to timelytrackyourhours@gmail.com or using any cancellation control we provide.
• Fees already paid are not refundable, and we do not provide partial-month or unused-seat refunds, except where a refund is required by law or we choose to give one.
• Seat counts are recalculated at each renewal. Adding employees mid-month may increase the following invoice.
• Founding Partner pricing is honoured for the introductory period we confirm to you in writing at activation. After that, or for any other plan, we may change pricing on at least 30 days' notice, effective at your next renewal; you may cancel before it takes effect.
• If payment fails or an invoice is more than 10 days overdue, we may suspend the team after notice to you. During suspension, Members cannot record new team shifts and Owners retain read and export access for 30 days. See Section 16.

12.5 Subscription lapse

Timely Teams requires an active subscription on the Owner's account. If it lapses, Members will be unable to record new shifts to the team until it is reactivated. Data already recorded is retained in accordance with Section 16 and the Privacy Policy.

13. Acceptable use

You agree not to, and not to permit anyone else to:

• Use the Service to monitor any individual without the notice or consent the law requires, or to monitor anyone who is not a worker in your business.
• Access, or attempt to access, a team you have not been invited to; guess, enumerate or brute-force team join codes or kiosk PINs; or use another person's account or PIN.
• Falsify a time record, forge or suppress an activity log or audit entry, impersonate another Member, or punch in or out on someone else's behalf other than as a recorded correction.
• Use the Service to track time for unlawful activity, or in a way that violates labour, privacy, or anti-discrimination law.
• Reverse engineer, decompile, scrape, or attempt to derive source code from the Service; probe or test its security without our written permission; or circumvent any limit, gate or entitlement check.
• Resell, sublicense, white-label, or provide the Service to third parties as a service bureau, without our written agreement.
• Interfere with, overload, or disrupt the Service or the infrastructure behind it.

14. Availability and changes to the Service

We do not commit to any particular level of uptime or availability. The Service depends on third-party platforms and on your own devices and connectivity. We may add, change, suspend, or discontinue features. Where a change materially reduces functionality you are paying for, we will give reasonable notice, and you may cancel under Section 12.

Features labelled beta, preview, or early access are provided as-is, may change or be withdrawn without notice, and are excluded from any commitment in these Terms.

15. Third-party services

The Service relies on third parties including Apple, Google (Firebase and analytics), RevenueCat, PostHog, Supabase, Resend and Vercel. Your use of the Service is also subject to their terms where applicable. We are not responsible for third-party outages, changes, or acts, and their failure does not create liability for us beyond what Section 18 allows.

16. Term, suspension and termination

• These Terms apply for as long as you use the Service.
• A Member may leave a team at any time. An Owner may remove a Member at any time. An Owner may delete a team at any time.
• We may suspend or terminate a team or an account, with notice where practicable, for breach of these Terms, non-payment, or where we reasonably believe there is a risk to other users, to workers, or to us.
• Deleting your account: if you are a Member, you are removed from the team, and Team Data you recorded remains with the Owner as their business record. If you are an Owner, the team is deactivated and its join code is disabled.
• After termination or non-payment suspension, the Owner has 30 days to export Team Data. After that we may delete it, and we will delete or return it in accordance with the Privacy Policy. Export your records before you cancel — this is your responsibility, not ours.
• Sections 4, 10, 11, 13, and 17 through 22 survive termination.

17. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT.

Without limiting that, we do not warrant that the Service will be uninterrupted, secure, or error-free; that any time record, location determination, overtime calculation, earnings figure, alert or notification will be accurate, timely, complete, or delivered at all; that data will not be lost; or that the Service, or any configuration of it that you choose, complies with any law that applies to you.

18. Limitation of liability

To the maximum extent permitted by law, Timely will not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, goodwill, business, or data, arising out of or relating to the Service or these Terms, even if we were advised such damages were possible.

This exclusion applies expressly, and without limitation, to: unpaid or underpaid wages, overtime, premiums or penalties; wage and hour claims, statutory penalties, fines, back pay, interest, liquidated damages, settlements, or legal fees; regulatory investigations or enforcement; claims by a worker against an Owner; missed, late, duplicated, or inaccurate clock-ins or clock-outs; failed or incorrect geofence determinations; undelivered alerts or notifications; and any loss, deletion or corruption of records.

Our total aggregate liability for all claims arising out of or relating to the Service or these Terms will not exceed the greater of (a) the total fees you paid us for the Service in the 12 months immediately before the event giving rise to the claim, or (b) one hundred US dollars ($100).

Some jurisdictions do not allow certain exclusions or limitations, so parts of this Section may not apply to you; in that case our liability is limited to the smallest extent permitted by law. These limitations are a fundamental basis of the bargain between us, and apply even if a limited remedy fails of its essential purpose.

19. Indemnification

If you are a Team Owner, you agree to defend, indemnify and hold harmless Timely and its owner, contractors and suppliers from and against any claim, demand, action, investigation, loss, liability, damage, fine, penalty, cost and expense (including reasonable legal fees) arising out of or relating to:

• Your use of the Service, including any configuration you chose;
• Any claim by a Member, worker, former worker, union, or government agency about wages, hours, breaks, overtime, classification, recordkeeping, discipline, or termination;
• Your monitoring of workers, including location tracking, geofencing, live status, kiosk records, or activity logs, and any failure to give the notice or obtain the consent required by law;
• Your access decisions, including sharing a join code, granting a role or capability, or failing to remove a departed Member;
• Any correction, edit, deletion or approval of a time record made by you or by someone acting for you;
• Data you export from the Service and anything that happens to it afterwards; and
• Your breach of these Terms or of any applicable law.

We will notify you of any such claim, may participate in its defence with counsel of our choosing at our own expense, and you will not settle any claim in a way that imposes an obligation or admission on us without our prior written consent.

20. Dispute resolution and arbitration

Please read this Section carefully. It affects how disputes between us are resolved, and it limits your right to a jury trial and to participate in a class action.

1. Talk to us first. Before starting any formal proceeding, you agree to send a written description of the dispute to timelytrackyourhours@gmail.com and to try in good faith to resolve it informally for 30 days.
2. Binding individual arbitration. If we cannot resolve it, any dispute arising out of or relating to the Service or these Terms will be resolved by final and binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, before a single arbitrator, seated in Clark County, Nevada. Judgment on the award may be entered in any court of competent jurisdiction.
3. Class-action and jury waiver. Disputes will be brought only in an individual capacity. You and we each waive any right to a jury trial and any right to bring or participate in a class, collective, consolidated or representative action. If this waiver is held unenforceable as to a particular claim, that claim proceeds in court and the rest of this Section still applies.
4. Small claims. Either party may bring an individual claim in small claims court instead, if it qualifies.
5. 30-day opt-out. You may opt out of arbitration by emailing timelytrackyourhours@gmail.com with your account email and the words "arbitration opt-out" within 30 days of first accepting these Terms. Opting out does not affect the rest of these Terms.
6. Time limit. Any claim must be brought within one year after it arises, or it is permanently barred, to the extent the law allows a contractual limitation period.

21. Governing law

These Terms are governed by the laws of the State of Nevada, without regard to its conflict of law rules. Subject to Section 20, the state and federal courts located in Clark County, Nevada have exclusive jurisdiction, and you consent to their personal jurisdiction and venue. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

22. General

• Changes. We may update these Terms. We will change the effective date at the top and, for material changes, give notice in the app or by email at least 30 days before they take effect. Continuing to use the Service after that means you accept the updated Terms.
• Entire agreement. These Terms, the Privacy Policy, and any written plan confirmation are the entire agreement between us on this subject and supersede any prior discussion, proposal or marketing statement.
• Severability and waiver. If any provision is unenforceable, the rest stays in force. Not enforcing a provision is not a waiver of it.
• Assignment. You may not assign these Terms without our written consent. We may assign them to a successor in connection with a merger, acquisition or sale of assets.
• Force majeure. Neither party is liable for a failure caused by events beyond its reasonable control, including outages of third-party platforms, network failures, natural events, or government action.
• Notices. We may give notice by email to your account address or in the app. Notices to us go to timelytrackyourhours@gmail.com.
• Relationship. Nothing here creates an employment, agency, partnership, joint venture, or joint-employer relationship between Timely and any Owner, Member or worker. Timely is not a joint employer of anyone in a team, and does not direct or control any worker.
• Interpretation. Headings are for convenience. "Including" means "including without limitation".

23. Contact

Questions about these Terms: timelytrackyourhours@gmail.com.

1. Scope

This Privacy Policy explains how tigran, doing business as Timely ("Timely", "we", "us"), handles information in connection with Timely Teams — the Teams features of the Timely apps for iPhone and iPad, the Timely web app, shared kiosk devices, widgets and notifications, the Timely app for Mac where Teams features are available there, and the Timely Teams pages on timelyapp.net, including the demo request form.

Personal, non-team use of Timely is covered by our general Privacy Policy. Where both could apply, this policy governs anything to do with a team.

2. Who is responsible for your data

• Team data — your employer decides. When a business creates a team, that business is the data controller (the "business" under US state privacy laws) for the team's data. They choose whether to enable location, what rates and rules apply, who is a manager, and how long they keep their records. Timely acts as their processor or service provider, handling that data on their instructions. Our commitments to them are in Section 16.
• Your own account — we decide. For your Timely account itself (email, name, sign-in, device and diagnostic data, subscription state, product analytics) and for our website, Timely is the controller.
• Your private history — you decide. Anything you recorded outside team scope is yours. We give no employer a route to it.

3. If you are an employee, read this

4. Information we collect

4.1 Account information

• Email address, display name, occupation if you set one, and profile photo if you upload one. Profile photos are stored in Google Cloud Storage.
• Authentication identifiers, including your Apple ID relay address if you use Sign in with Apple.
• Account creation date, sign-in events, and the platforms you use.

4.2 Team membership

• Which team you belong to, your role and capabilities, the date you joined, and join requests you make.
• The hourly rate and pay settings your employer assigns to you.
• Your assigned job sites, schedules, availability and time off.

4.3 Work sessions shared with your team

For shifts created after you join: clock-in and clock-out times, total duration, gross duration, break duration, the employer-set hourly rate, the calculated earnings figure, when the record was created and synced, and whether it came from a kiosk. Notes, tags and expenses attached to a shift are not shared with the team.

4.4 Live status

Whether you are clocked in, on break, or off the clock, and when that last changed, for as long as you are an active member.

4.5 Location — only when your employer enables it

• Your device's location at the moment of a clock-in or clock-out, used to check it against the team's job sites.
• Entry into and exit from a job site radius, where automatic clock-in or clock-out is enabled. This may require background location permission.
• When a clock event happens away from a job site, a record of the event type, the distance in metres, and the nearest site name. This is sent to the Owner as an alert and written to the team activity log, which every member of the team can read.
• Job site definitions (name, coordinates, radius) created by the Owner.

Your coordinates are never uploaded. The comparison between your location and a job site happens on your device; what leaves your device is the result — inside or outside, and how far. We do not track location continuously, we do not store a trail of your movements, and location is not collected at all when your employer has location features switched off. You can revoke location permission in your device settings at any time; if your employer requires location to clock in, revoking it may prevent clock-in.

4.6 Kiosk

• A one-way cryptographic hash of your kiosk PIN, salted with your account identifier. The PIN itself is never stored and cannot be recovered by your employer or by us.
• Failed attempt counts, lockout expiry, blocked status, and whether a PIN is temporary.
• Punches recorded on the kiosk, with the punching account, the device or operator that recorded them, and a kiosk audit log of PIN changes, resets, lockouts, blocks and access restorations.

4.7 Records management

• Timesheets, approvals, pay periods, and frozen payroll snapshots.
• Extra income your employer records against you — bonus, tips-out, premium, reimbursement — with the amount, date, and the reason or description they attach. These are your employer's records, created by them, and are treated as team data. Extra income you record for yourself is not part of this and stays private to you.
• Punch edit history: who changed a shift, when, the stated reason, and the values before and after.
• Reports and payroll CSV files generated for the Owner. Once exported, those files leave the Service and are under the Owner's control.

4.8 Team activity log

Actions taken in the team — joining, leaving, clock events, settings changes, role and access changes, location alerts — recorded with the acting person, the time, and the platform and app version they acted from. The log is visible to every member of the team, cannot be edited, and is deleted automatically 90 days after an entry is created.

4.9 Notifications

We generate notifications to Owners, Managers and Members — live status, overtime alerts, location alerts, timesheet and payroll events, clock-in reminders — and we store the notification record and whether it has been read. To deliver push notifications we store a notification token for your device on your account.

4.10 Device and diagnostic information

App version, operating system version, device model, language, time zone, and IP address, collected through our analytics tools. We also receive crash reports from Apple where you have chosen to share diagnostics with developers; those are provided to us in aggregate. We use this to keep the Service working and to debug problems.

4.11 Product analytics

We use PostHog and Google/Firebase Analytics to understand how the app is used — app opens, which features are used, and whether a flow succeeds or fails. Analytics events are associated with your account identifier so we can investigate a specific report and measure retention. Google/Firebase Analytics also measures app installs and which campaigns bring people to Timely.

We do not use the advertising identifier (IDFA), we do not ask for app tracking permission, we do not show ads in Timely, and we do not track you across other companies' apps or websites. We do not use analytics to build advertising profiles, and we never send an employer analytics about a specific worker.

4.12 Subscription information

Subscription and entitlement state through RevenueCat, which we identify you to using your account identifier and email address, and, for directly billed plans, billing contact and payment status. We do not receive or store full payment card numbers.

4.13 Website, cookies and local storage

The signed-in pages of our web app, and our help page, use browser storage and cookies: strictly necessary storage to keep you signed in and to cache your own shifts so the page works offline, plus Google/Firebase Analytics to measure usage. Our marketing pages do not load analytics or set tracking cookies. We do not use advertising or third-party tracking cookies anywhere.

4.14 Demo requests

If you submit the Timely Teams demo form, we collect your name, business name, email address, phone number if given, preferred contact method, business type, city and state, opening timeline, expected employee count, number of locations, trial interest, any message you write, and the page you submitted from. We use it only to evaluate and respond to your request and to contact you about Timely Teams, as you consented on the form. It is stored in our Supabase database and we contact you by email or phone using the method you chose.

5. What we never collect

• No biometrics. Kiosk punches use a numeric PIN. We do not collect fingerprints, face scans, or any other biometric identifier.
• No continuous location, no location history, and no location when your employer has location features off.
• No screenshots, keystrokes, browsing history, use of other apps, or message content. Timely has no monitoring of your device outside the app.
• No camera or microphone monitoring. The camera is used only if you choose to take a profile picture; there is no document or pay-stub scanning, and no audio is ever recorded.
• No access for employers to a worker's private financial data — savings goals, expenses, Paycheck Match records, or any income and pay stub the worker records for themselves, including earnings from another employer. An employer sees only the pay records they created themselves.
• No sale of personal information, and no disclosure of personal information to data brokers.

6. How we use information

• To provide the Service: recording time, syncing across devices, showing live status, producing timesheets, exports and reports.
• To enforce the settings an Owner configured, including access, rates, rounding, overtime, pay periods and job sites.
• To authenticate people, protect accounts, detect abuse, and investigate security incidents.
• To send notifications and reminders you or your Owner enabled.
• To bill for the Service and manage subscriptions.
• To support you when you contact us, and to fix bugs and improve the product.
• To comply with law and to establish, exercise or defend legal claims.

7. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on: contract (providing the Service to you or your employer), legitimate interests (security, abuse prevention, debugging, product improvement, and defending claims), legal obligation, and consent where we ask for it — for example device location permission or marketing contact. Where Timely acts as a processor for a team, the Owner is responsible for identifying the lawful basis for processing worker data, including any consent or notice required for monitoring.

8. Who we share it with

• Your team. Team data is visible to the Owner and to Managers to the extent the Owner granted them capabilities. Some information is visible to every member of your team, not only management: your entry on the team roster (display name, email address, profile photo, role, join date, and any vacation or leave dates set for you), your profile record (display name, email address, profile photo, occupation if set, and technical fields such as your notification token), and every entry you generate in the team activity log, including location alerts. Your work sessions, live clock status, pay rate and payroll records are readable only by you and by management — not by your co-workers.
• Sub-processors that run the Service on our behalf, listed in Section 9.
• Legal requests. We may disclose information where we reasonably believe it is required by law or legal process, or necessary to protect the rights, safety or property of a person, of our users, or of Timely. Where we are permitted to, we will tell the affected Owner first.
• Business transfer. If Timely is acquired or its assets transferred, information may transfer as part of that transaction, subject to this policy.
• We do not sell personal information, and we do not share it for cross-context behavioural advertising.

9. Sub-processors

• Google (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Remote Config, Firebase/Google Analytics) — authentication, database, profile photo storage, scheduled backend jobs, push notifications, feature configuration, and analytics.
• Apple — Sign in with Apple, push notifications, and App Store subscriptions.
• PostHog — product analytics.
• RevenueCat — subscription and entitlement management.
• Supabase — storage of demo requests submitted on our website.
• Resend — outbound email we send from Timely.
• Vercel — website and web app hosting.

We will give Owners reasonable notice before adding or replacing a sub-processor that handles team data. Email us to be added to the notification list.

10. Where data is stored

Data is stored on cloud infrastructure operated by the providers in Section 9, primarily in the United States. If you use the Service from outside the United States, you understand that your information is transferred to and processed there, where privacy laws may differ. Where required for transfers out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum, which are incorporated into the terms in Section 16.

11. How long we keep it

• Team work sessions and owner-issued pay records are kept for as long as the team exists, and are retained by the Owner as their business record after a member leaves or is removed. Wage and hour law generally requires employers to keep time records for two to three years.
• Team activity logs are deleted automatically 90 days after they are created.
• Punch edit history and kiosk audit records are kept for the life of the team, because they exist to protect both sides in a dispute about hours.
• Live status is overwritten as it changes and is not kept as a history.
• Archived member records — the roster entry and shifts of someone who left — are retained with the team.
• When a member deletes their account, we remove them from the team roster, delete their per-team membership and status records, delete their sign-in account, their profile record, and their personal shift, archived-shift and schedule data. Team-scope shifts they recorded remain with the Owner as the Owner's business record. Any other personal records — savings goals, expenses, pay stubs, Paycheck Match — are no longer reachable by anyone once the account is gone, and we will delete them on request; email us and we will confirm when it is done.
• When an owner deletes their account, the team is deactivated and its join code disabled, and team records are retained in the deactivated team unless the Owner asks us to delete them.
• After a team is terminated or suspended for non-payment, the Owner has 30 days to export. We then delete team data within a further 90 days, except where we must keep it to comply with law or to resolve a dispute, and except for backups that expire on their own cycle.
• Demo requests are kept for up to 24 months after last contact, or until you ask us to delete them.
• Analytics and diagnostic data are retained according to the retention settings of the analytics providers in Section 9. Email us if you want your analytics history deleted.

12. Security

• Data is encrypted in transit, and encrypted at rest by our infrastructure providers.
• Access to team data is enforced server-side by security rules, not just in the app: pre-join personal sessions have no read path from a team, kiosk PIN hashes are readable only by the member and kiosk operators, and payroll and management data is limited to the roles the Owner assigned.
• Kiosk PINs are stored as salted SHA-256 hashes and are never stored or transmitted as digits.
• Administrative access on our side is limited to what is needed to operate and support the Service.
• No system is perfectly secure. If we become aware of a breach affecting team data, we will notify the affected Owner without undue delay and, where we act as processor, give them the information they need to meet their own notification duties.

13. Your rights and choices

• Access, correct, delete and export. You can delete your account from the app's profile settings — see Section 11 for exactly what that removes — and you can export your own shifts, earnings, extra income and savings-goal records from the app at any time. For anything else, email us.
• If the data is your employer's team data, ask your employer first — they decide. We will assist them in responding, and we will not delete their business records on a worker's request without their instruction, except where the law requires us to.
• Location. Grant or revoke permission in your device settings at any time.
• Notifications. Turn them off in the app or in device settings.
• Analytics. Email us to object to product analytics tied to your account, and we will disable it for you.
• Marketing. Every marketing email has an unsubscribe link; service and billing emails are not optional while you have an account.
• Where the GDPR or UK GDPR applies, you also have the rights to restrict or object to processing, to portability, to withdraw consent, and to complain to your supervisory authority.

To exercise any right, email timelytrackyourhours@gmail.com. We may need to verify your identity, and we will respond within the time the applicable law allows.

14. California rights

If you are a California resident, you have the right to know what personal information we collect and why, to access and port it, to correct it, to delete it, and to limit the use of sensitive personal information. We do not sell personal information and we do not share it for cross-context behavioural advertising. We do use install-attribution measurement provided by Apple and Google for our own marketing; if you would prefer we exclude your account from that, email us and we will.

We will not discriminate against you for exercising any of these rights. Where we act as a service provider to a business (a team owner), we process personal information only for the purposes set out in our contract with them, and California workers should direct requests to their employer first.

15. Children

Timely Teams is not directed to children. You must be at least 16 to hold an account or be a team member, and a team owner must not use the Service to track workers under 16. If we learn that we hold personal information from someone under 16, we will delete it.

16. Data processing terms (for team owners)

This Section forms the data processing agreement between Timely (processor / service provider) and the Team Owner (controller / business) for team data, and is incorporated into the Terms & Conditions.

• Instructions. We process team data only to provide the Service, as instructed by the Owner through the Service's settings and features, and as required by law. We will tell the Owner if an instruction appears to breach applicable data protection law.
• Purpose limitation. We do not retain, use or disclose team data for any purpose other than providing the Service, and we do not sell it or combine it with data from other sources except as needed to operate and secure the Service.
• Confidentiality. Anyone with access to team data on our side is bound by confidentiality obligations.
• Security. We maintain the technical and organisational measures described in Section 12.
• Sub-processors. The Owner authorises the sub-processors in Section 9 and any replacement we notify in advance. We remain responsible for their performance.
• Assistance. We will provide reasonable assistance with data subject requests, data protection impact assessments, and regulator enquiries, and will notify the Owner without undue delay after becoming aware of a personal data breach affecting their team.
• Deletion and return. On termination, we make team data available for export for 30 days and then delete it in accordance with Section 11, unless the law requires retention.
• Information and audit. On reasonable written request, and no more than once a year unless a regulator requires otherwise, we will provide the information reasonably necessary to demonstrate compliance with this Section.
• Owner obligations. The Owner is responsible for the lawfulness of its instructions, for the notice and consent required to monitor its workers, and for the accuracy of the personal data it enters.

17. Changes to this policy

We may update this policy. We will change the effective date at the top and, for material changes, notify you in the app or by email before they take effect. Continuing to use Timely Teams after that means you accept the updated policy.

18. Contact

Questions, requests, or privacy concerns: timelytrackyourhours@gmail.com. If you are a worker and your question is about what your employer sees or keeps, contact them first — they control that data — and we will help them answer you.