Your time data stays on your device.

Information the app stores

Everything below is written to a local SQLite database in an App Group container that the app shares with its Home Screen widget extension. The container lives on your device and no other app can read it:

• The categories you create, including their name, color, icon and the order you arrange them in.
• The activities you create inside those categories.
• Time records: an activity identifier plus a start time and, when you stop the timer, an end time.
• App preferences, such as whether Records uses the grid or list layout.

Beside the database the app writes a small, read-only snapshot: activity and category names, their colours and icons, whether a timer is running, when it started and how much time it has tracked today. It contains nothing that is not already in the database; it exists so a Home Screen widget can draw without opening the database.

The app does not request or access your contacts, photos, camera, microphone, location, health data, motion data, calendars or advertising identifier. It does not use cookies or web beacons. The app performs no network requests of its own: its only interaction with the network is the optional one-time purchase, which is handled by Apple's StoreKit and the App Store on the device — the app receives a signed entitlement and nothing else is sent to the developer.

What leaves your device

Nothing is transmitted to the developer or to third parties by the app. Data leaves the device only when you explicitly export a backup and then choose a destination in the iOS share sheet — for example “Save to Files”, AirDrop or Mail. In that case the file is handled by the destination you selected, under that service’s own privacy terms.

The App Group container is part of the app’s data on your device. iOS lets the app and its own widget extension read it; it is not shared with any other app, and no server receives it.

Backups and restore

Settings → Backup can create a complete copy of the database (a single .sqlite file). The most recent prepared backup is also written to the app’s Backups folder. When you import a backup, the file you pick is validated and copied over the live database, and a safety copy of the previous database is kept in the same folder. Exported backups are not encrypted by the app; store them somewhere you trust.

Home Screen and Lock Screen widgets

Spendly Time Track offers two widgets: Timer, bound to one activity, and Category Timers, bound to one category and showing its activities. Both are drawn from the read-only snapshot described above. A start or stop button performs the same action as tapping a tile in the app — it writes the timer to the database and updates the Live Activity and any focus reminder — so the widget and the app cannot disagree. The Timer widget also sits on the Lock Screen, as a circular glyph or a rectangular row; there the whole control is the button, and the tap is performed by the app so the Live Activity can follow it. Nothing about a tap leaves your device.

The widgets need no account and no network connection. Until the app has been opened once and has written the snapshot, a widget shows “Not synced yet” rather than stale content.

Live Activities

While a timer is running, the app shows a Live Activity on your Lock Screen and in the Dynamic Island: the activity icon, its name, when it started and how much of today is tracked. The Lock Screen card and the compact island use fixed labels rather than a running counter; expanding the island adds the live elapsed time, which the system ticks forward on its own. All of it is rendered on your device from the local database. None of it is sent to the developer, to any server or to any third party, and the app performs no network requests to keep it up to date. The app has no server at all; the optional one-time purchase is processed by the App Store. Stopping the last timer ends the activity.

Notifications

If you give an activity a focus block, the app schedules a single local notification for the moment that block is complete. Notifications are created and delivered by iOS on your device: the app has no server, sends no push notifications and uploads nothing. No notification permission is requested until you turn a focus reminder on, and you can turn it off at any time in iOS Settings → Notifications.

Data retention and deletion

• Records stay on your device until you delete them.
• Deleting an activity or category deletes its time records as well.
• Deleting the app removes the database, the read-only widget snapshot and the in-app backups from your device; iOS also removes the shared App Group container once the app that uses it is gone.
• Backup files you exported to Files, iCloud Drive or another location are outside the app and must be deleted there.

Because the developer never receives your data, there is no server-side copy to request or erase.

Security

The database and the widget snapshot are protected by the iOS sandbox and App Group isolation, and by your device passcode and encryption. Only Spendly Time Track and its widget extension can read them. Time records are not sent over the network. Exported backup files are ordinary SQLite files, so only share them with people and services you trust.

Children

Spendly Time Track is a general productivity tool and is not directed at children under 13. The app collects no personal information from anyone, including children.

This website

This policy and the support page are static pages hosted with GitHub Pages. When you open them, GitHub may process standard web request information (such as an IP address and user agent) in order to serve the page. The app itself does not open these pages automatically; they are opened only when you tap a link in Settings → About.

Changes to this policy

If the app’s data practices change, this page will be updated and the effective date above will change. Material changes will also be described in the App Store release notes.

Contact