Privacy Policy

Wheelwe Ltd., a company registered in England and Wales, registered address 86-90 Paul Street, London EC2A 4NE, United Kingdom. You can reach us about privacy at team@wheelwe.com.

Information you provide

• Account information: your email address and a name or pseudonym, obtained when you sign in with Apple or Google. If you choose to add a profile photo or avatar, that image is stored with your account.
• Time-tracking data: the trackers and categories you create (for example productive, break, meeting, distracting), session start and end times and types, manual time entries, daily summaries, streaks, and the goals, goal notes and diary entries you record.
• Support communications: the content of any message you send us, for example a support request or problem report.

Information collected automatically

• Purchase and subscription status: whether you have an active purchase or subscription and which plan (your “supporter” entitlement). Payments are handled by Apple (iOS) or Stripe (web); we do not receive or store your full card number.
• Usage and diagnostic data: basic information about how you interact with the Service and technical logs used to keep it secure and reliable. Product analytics may include a pseudonymous device identifier, your app-specific account identifier, app and operating-system version, language, broad feature events, and coarse duration ranges. We do not send tracker or goal names, notes, calendar-event titles, email addresses, or payment-card data to product analytics. On the web app, analytics loads only after consent.

Optional integrations you can enable

• Google Calendar (iOS and web, optional): if you connect Google Calendar, we request read-only access to your calendar list and events using the “calendar.calendarlist.readonly” and “calendar.events.readonly” scopes. We access calendar identifiers, names and colours; event identifiers, titles, start and end times; all-day, busy, cancelled and transparency status; attendee presence; and your response status. We use this data only to let you select calendars, apply rules you configure, and create or update derived time-tracking sessions. Calendar data is cached on your device or browser, and derived sessions and calendar references may be synced through Supabase across your devices. We never create, edit or delete Google Calendar events.
• Camera and photos (iOS, optional): if you add a photo to your profile or a goal, we access the image you select or capture. Images are used only for that purpose.
• Focus Shield (iOS, optional): this feature uses Apple’s Screen Time / Family Controls framework to help you limit distracting apps. Your app selections are handled on your device by iOS and are not transmitted to or readable by us.

Google API Services User Data Policy

Where's my time's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features that you request. We do not sell it, use it for advertising or lending, use it to train general-purpose AI or machine-learning models, or transfer it to third-party AI services for model training.

We use your personal data to:

• provide, operate and maintain the Service, including saving and syncing your time data across your devices and showing your statistics, goals and streaks;
• process purchases and manage your subscription or lifetime access;
• respond to your support requests and communicate with you about the Service;
• keep the Service secure, prevent abuse, and diagnose and fix problems; and
• comply with our legal obligations.

Legal bases (UK GDPR). We rely on: performance of our contract with you (to provide the Service and process payments); our legitimate interests (to secure and improve the Service); your consent (for optional features such as Google Calendar, camera/photos, and non-essential analytics and cookies on the web, which you can withdraw at any time); and compliance with legal obligations (for example keeping transaction records).

Your account and time data are stored in our backend, which runs on Supabase (managed PostgreSQL). Data is encrypted in transit (TLS) and at rest. Access is protected by row-level security so that your records are accessible only to your authenticated account. On iOS, your session tokens are stored in the device Keychain; on the web, in your browser.

Some of our providers (listed under “Third-party services and integrations” below) are located outside the UK, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision, as applicable.

We do not sell your personal data. We share it only with the service providers (sub-processors) below, who process it on our behalf or as independent controllers for the purposes described. Each provider handles data under its own privacy policy, which we encourage you to review.

Analytics on iOS. We use Amplitude to measure product usage and improve the app. Amplitude processes product interactions, session data, and pseudonymous identifiers in the EU. Product analytics is off by default, runs only after you enable it in Settings, and can be disabled there at any time. This data is not used for advertising or cross-app tracking. We may also receive aggregated performance data from Apple if you enable “Share With App Developers” in your device settings. We may disclose information where required by law or to protect our rights, users or the Service.

On the web app we use strictly necessary cookies to keep you signed in and maintain your session; these are always on because the Service cannot function without them. With your consent we also use analytics storage (Google Analytics and Amplitude) to measure and improve the site. You can refuse or delete this storage in your browser settings, though some features may not work correctly. The iOS app does not use cookies.

We keep your personal data for as long as your account is active. You can delete your account at any time — in the iOS app under Settings, in the web app under your account settings, or by emailing us. When you delete your account, we remove or irreversibly anonymise your identifying information and delete your time-tracking data, except where we are legally required to retain certain records (for example, transaction and tax records). Our deletion process records a deletion reference, the date, and the lawful basis and period for any limited retention. Backups are purged on a rolling schedule.

Subject to applicable law, you have the right to access your personal data; to rectify inaccurate data; to erase your data; to restrict or object to processing; to data portability; and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at team@wheelwe.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

The Service is intended for general audiences and is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Effective date” above. If we make material changes, we will provide a more prominent notice where appropriate. Your continued use of the Service after an update means you accept the revised policy.

Data controller: Wheelwe Ltd., 86-90 Paul Street, London EC2A 4NE, United Kingdom.

Privacy enquiries and requests: team@wheelwe.com — Website: https://whereismytime.xyz