Privacy Policy

The short version

Time Penny stores your tasks. If you sign in, they sync to your account so they reach your other devices. If you don't sign in, they never leave your phone.

We do not track you across other apps or websites. There is no advertising in Time Penny, and no outside analytics company watching what you do. If the app crashes, a technical report goes to a service that helps us fix it — it is set up so it cannot carry what you write.

We do count some things about how the app is used — how many people finish setup, whether the reminder test worked — so we can tell which parts help. That stays in our own database, never includes anything you write, and you can switch it off in Settings.

Some optional features use AI. When, and only when, you tap one of those buttons, the text or photo you chose is sent to Anthropic to produce the answer. Nothing is sent unless you ask for it, nothing is sent in the background, and you never have to use those features to use Time Penny.

What we collect

If you use Time Penny without an account, everything stays on your device. We receive nothing.

If you create an account, we store:

We do not collect: your name, phone number, location, contacts, calendar, photos, health records, or any diagnosis. Time Penny never asks whether you have ADHD or any other condition, and there is no field in which to record one.

Your calendar (optional, Premium). If you switch on Your calendar in Today or Leave-by reminders, Time Penny reads today’s and tomorrow’s appointments from your phone’s own calendar so it can show them beside your tasks and remind you when to get ready. This happens entirely on your phone. Your appointments are never sent to us or to anyone else, never stored by Time Penny, and never synced. Time Penny only reads your calendar; it cannot add, change or delete anything in it. You can switch these features off in Settings, or remove calendar access in your phone’s settings, at any time.

How the app is used — our own measurements

To find out which parts of Time Penny help and which get in the way, the app records a short list of things that happen while you use it. This is written to our own database and goes nowhere else.

What is recorded:

What is never recorded: what you write. Your task titles, notes, first steps, routine names and reminder text are never part of this and never leave your phone except to sync to your own account. (One exception you control: if you switch on the weekly recap email, the names of your money deadlines go to the email service that sends it — see Resend below.) Nor is your location, your contacts, your email address, or an advertising identifier — there isn't one in this app.

Each record is a fixed label and a number or a yes/no. Not free text. The app is built so there is nowhere for what you write to go, and it is checked again before storage and a third time on arrival.

How long: 90 days, then deleted.

Turning it off: Settings → Help improve Time Penny → Off. Everything in the app keeps working exactly the same. Anything already waiting to be sent is discarded at that moment.

The anonymous identifier is created on your phone, is not linked to your name or email unless you sign in, is replaced with a new one when you sign out, and is deleted entirely if you choose "remove from this device". It is not shared with anybody and cannot be used to recognise you in any other app.

What we do not do

• We do not sell your data, and we do not share it with advertisers or data brokers. Ever, to anyone.
• We do not use it for advertising, and we do not show ads.
• We do not track you across other apps or websites.
• We do not use any third-party analytics service. The measurements described above are our own and stay in our own database.
• We do not use an advertising identifier. There is none in this app.
• We do not read your tasks. They are stored so you can retrieve them.
• We do not send anything to an AI service unless you ask us to, on that occasion, by tapping the button that says so. There is no background processing of your tasks, and nothing you have already written is sent because a feature exists.

The AI features

Three optional features use AI. Each one is something you start deliberately:

How it works. The request goes to our own server first, and our server talks to Anthropic (the company behind Claude). We do this so that the credentials stay on our server rather than inside the app.

What we keep. Nothing you sent, and nothing that came back. Our server does not log the text, the photograph, or the answer. We keep one number per person per month — how many times each feature was used — so we can size the service. That number contains no content of any kind.

Not used to train AI. Anthropic’s commercial terms, which cover our use of its service, do not allow it to train its AI models on what we send it. Time Penny has not opted in to any program that would allow that, and the app has no way to send Anthropic feedback on an answer. See Anthropic’s Commercial Terms of Service.

Speech stays on your phone. Voice capture uses your phone's own speech recognition to turn what you said into text. The audio recording is never uploaded to us or to anyone else. Only the resulting text is sent.

Nothing is saved without you. Every one of these features shows you what it produced and waits. A suggested step is not written into your task, tasks from a voice capture are not created, and a deadline read from a photo is not stored, until you confirm it. You can edit any of it first.

If you never tap them, nothing is ever sent. Apart from the optional weekly recap email (see Resend below), these features are the only part of Time Penny that sends your content anywhere other than your own synced account.

Who can see your data

Row Level Security is enabled on every table, scoped to your account. Another user of Time Penny cannot read your rows — not by accident, and not by trying.

Service providers we rely on:

• Supabase — hosts the database and handles sign-in. supabase.com/privacy
• Resend — sends your sign-in code and, only if you switch it on, the weekly recap email (Premium). For the sign-in code it receives your email address. For the recap it also receives what that email contains: the names, amounts and due dates of your money deadlines, and your penny count. The recap is off until you turn it on, and you can turn it off at any time in Settings → Weekly recap email. resend.com/legal/privacy-policy
• RevenueCat — manages subscription status. Receives an anonymous account identifier, never your email or tasks. revenuecat.com/privacy
• Sentry — receives a report when the app crashes, so we can fix it. A report contains the technical details of the failure and facts about the device, such as the model and operating system version. It is deliberately configured so that it cannot carry what you write: personal-identity data is switched off, performance and session tracking are switched off, and the app’s own diagnostic log lines are dropped before a report is assembled — because a log line could otherwise contain a task title. sentry.io/privacy
• Anthropic — receives only what you send by using one of the AI features described above, and only at the moment you tap the button. anthropic.com/legal/privacy

We may disclose data if legally compelled. We will tell you unless prohibited from doing so.

If the business is sold. Highline Digital Holdings builds apps and intends to sell them. If Time Penny, or the company, is ever sold, merged, or transferred — or while a buyer is evaluating it — your data may pass to the buyer as part of that transaction. We are telling you this now rather than burying it later, because it is a real intention and not a hypothetical. Any buyer takes on the promises made in this policy; if they ever want to use your data differently, they have to come and ask you, not quietly change this page.

How long we keep it

Your data stays until you delete it. Delete your account and it is removed from our servers — every table cascades from your account record, so nothing is left behind.

Deleting the app from your phone does not delete your account. Use Settings → Delete my account for that.

The usage measurements described above are kept for 90 days and then deleted. If you were signed in when they were recorded, deleting your account removes them immediately along with everything else.

Your choices

Export everything. Settings → Export my data. Free, no account needed, works offline.

Delete your account. Settings → Delete my account. Immediate and permanent. No email to support, no waiting.

Use the app without an account. Permanently supported. Nothing is withheld except syncing across devices.

Stop the usage measurements. Settings → Help improve Time Penny → Off. Takes effect immediately, and nothing about the app changes.

Correct anything wrong. Your tasks are editable in the app. Email us for anything else.

Several US states also give you rights over your data — to know what we hold and who received it, to get a copy, to correct it, to delete it, and to opt out of sale, targeted advertising and profiling. We give everyone these rights regardless of where they live, because sorting users by state to decide who deserves them is not a thing we want to build. The controls above deliver most of them without asking us, and there is nothing to opt out of: we do not sell your data, share it for targeted advertising, or profile you.

If we turn down a request, you can appeal it. Reply to our decision and we will look again and write back with the outcome and our reasoning. If we still say no, you can complain to your state Attorney General, and we will tell you how at that point.

For anything a button does not cover, email support@highlinedigitalholdings.com. We respond within 45 days, and in practice much sooner.

Health-related things you might type

Time Penny is a planner, not a health app. It asks you nothing about your health and never examines what you write to work out anything about you.

But you can type anything into a task, and some people will type “refill prescription” or “therapy Thursday”. Washington and Nevada have laws that treat that as consumer health data even when a company never looks at it — and those laws apply from the first user, with no revenue or size threshold to grow into.

So there is a separate page for it: Consumer Health Data Privacy Notice. It says what we may hold, who it reaches, what we never do with it, and how to delete it. Short version: we never read it, never sell it, never advertise on it, and you can erase all of it from Settings without asking us.

This website

The app and timepenny.app are different places with different rules, and it is worth being clear about which is which.

Today the website carries no analytics, no cookies, no tracking pixels and no third-party scripts at all. Like every web host, ours keeps standard server logs — your IP address, the page requested, the time and your browser type — for security and to count visits. We do not use them to identify you or for advertising.

That may change, and this paragraph exists so the change is not a surprise. If we advertise Time Penny — on TikTok or anywhere else — we may add measurement to the marketing website so we can tell whether an advert worked. That could involve cookies or a pixel from an advertising platform, and it would mean that platform learns you visited. If we do it, this page will say so before it starts, and the website will ask for your consent where the law requires it.

None of that would apply inside the app. The app has no advertising SDK and no tracking pixel, and we are not planning to add either. The app and the website are separate, and the app is the one holding your tasks.

Children

Time Penny is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes

If this policy changes materially we will say so in the app before the change takes effect, rather than quietly updating a date at the top.

Contact

support@highlinedigitalholdings.com

Highline Digital Holdings LLC, Colorado, USA