Privacy Policy

Effective date: July 13, 2026

Time Lance ("Time Lance", "we", "us") provides a time-tracking service at time-lance.com and its companion mobile app (together, the "Service"). This policy explains what information we collect, why we collect it, and the choices you have.

1. Information we collect

We collect only what the Service needs to function:

• Account information: your email address, used to sign you in via a one-time code or link (we don't store passwords). If you're added to an organisation, we also store the name you're invited under.
• Time-tracking data: the projects you create, and the time entries you log — start/end times, duration, and any notes you add.
• Organisation data: if you create or join an organisation, we store its name, its member list (email, name, role), and which projects each member can access.
• Technical data: standard server logs (IP address, timestamps, request metadata) generated by our hosting providers for security and reliability — we don't run analytics or tracking scripts on the Service.

We do not collect location data, payment/card details, or device contacts.

2. How we use your information

• To authenticate you and keep your session secure.
• To store and display your projects, time entries, and exports.
• To operate organisation features — invitations, membership, and per-project access.
• To send transactional email: login codes/links and organisation invitations. We do not send marketing email.
• To maintain and secure the Service (debugging, abuse prevention).

3. Who we share it with

We don't sell your data. We use a small number of infrastructure providers to run the Service, each acting on our behalf under their own data-processing terms:

• Supabase — authentication and database hosting (Postgres).
• Resend — delivery of login and invitation emails.
• Railway — hosting for our API server.
• Cloudflare — hosting and delivery of the web app.

If you belong to an organisation, the people you share it with (its admins and, depending on its settings, other members) can see the time entries and projects that organisation gives them access to — this is a core function of the Service, not third-party sharing.

We may also disclose information if required by law, or to protect the rights, property, or safety of Time Lance, our users, or the public.

4. Data retention

We retain your data for as long as your account is active. If you delete your account, we permanently delete your personal workspace(s) and everything in them. Time entries you logged in an organisation's projects are de-identified (disconnected from your name/email) rather than deleted, so the organisation's billing history stays intact.

5. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Export your data (via the Service's built-in export feature).
• Object to or restrict certain processing.

You can delete your own account at any time from Settings in the web or mobile app — this is instant and does not require contacting us. For any other request, email [email protected].

6. Security

We use industry-standard measures to protect your data in transit (TLS) and at rest (managed database encryption via our hosting provider), and we scope API access so that you can only see data belonging to workspaces you're a member of. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

7. International transfers

Our infrastructure providers may process and store data outside your country of residence, including in the United States and the European Union. Where required, we rely on those providers' standard contractual safeguards for cross-border transfers.

8. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the effective date above. Continued use of the Service after a change means you accept the updated policy.

10. Contact

Questions about this policy or your data? Email [email protected].