Privacy policy

Timelin is a macOS day-planner with a built-in focus timer, plus a website at timelin.app that offers a free in-browser Pomodoro timer. Timelin is built by Leonel Meque, an independent developer. This policy explains what data Timelin handles, where it lives, and the choices you have.

The short version: Timelin is local-first. Your planning data lives on your own Mac by default, and you can use the app without an account. Some information is only involved if you choose to sign in, sync, or subscribe.

Data that stays on your device

When you use the desktop app, your planning data (tasks, days, focus sessions, and related content) is stored in a local database on your Mac. It is not sent to us, and we cannot see it. A cloud copy is only ever created if you are on a Pro plan with sync turned on. On the free plan, and whenever you are signed out, your data never leaves your device.

The free web timer

The free Pomodoro timer on timelin.app runs in your browser. Using it does not require an account. Basic anonymous analytics may be collected as described under “Product analytics” below.

Account data

If you choose to sign in (to buy Pro or use Pro features like cloud sync), we create an account for you. Sign-in is passwordless: you receive a 6-digit code by email, or you sign in with Apple or Google where that option is available. We do not create or store passwords.

The main piece of account data we hold is your email address, used to sign you in and to send you essential account and transactional messages.

Cloud sync

Cloud sync is part of Pro. It only runs when you are signed in, on a Pro plan, and have turned sync on. When it is on, a copy of your planning data is stored in the cloud so it can stay current across your devices. On the free plan nothing is synced — your data stays on your Mac.

Optional end-to-end encryption

Timelin offers an optional end-to-end encryption mode for cloud sync. When it is enabled, the cloud copy of your data is encrypted with a key derived from you, so we cannot read it. Your local copy on your Mac remains unencrypted so the app can work normally on your device. This mode is your choice to turn on.

Payments

Pro subscriptions are sold and processed through Paddle, which acts as the Merchant of Record. This means Paddle is the seller of record and handles payment, billing, tax, and invoices. Your payment details (such as card information) are provided to and handled by Paddle. Timelin does not receive or store your full payment details.

You can read Paddle's privacy policy to see how they handle your payment information.

Product analytics and error monitoring

We use anonymous product analytics and error monitoring to understand how Timelin is used and to find and fix bugs. Our analytics are hosted in the EU.

• Your name is never sent to analytics or error tools.
• We use a random per-install identifier (a UUID generated on your device) as the analytics identity, rather than your name or email.
• Analytics and error data are used to improve the product, not to build advertising profiles.

We do not sell your personal data.

Cookies on this website

The timelin.app website uses cookies. Strictly necessary cookies (such as remembering your cookie choice and keeping you signed in) are always on. Analytics cookies from Google Analytics help us understand how the website is used — they stay off until you accept them in the cookie banner.

• No analytics cookies are set until you accept them. Until then, Google Analytics runs in a cookieless consent mode.
• You can change or withdraw your choice at any time using the “Cookie settings” link in the site footer.
• Google Analytics is used only on the website; the Timelin app itself uses the anonymous product analytics described above.

Third-party processors

We use a small set of third-party services to run Timelin. Each only handles the data needed for its role:

• Authentication — signing you in and storing your account email.
• Cloud sync storage — storing your synced planning data on Pro (encrypted when end-to-end encryption is on).
• Payments — taking payment and handling billing, tax, and invoices, as our Merchant of Record.
• Product analytics — anonymous usage analytics, hosted in the EU.
• Website analytics — Google Analytics, to understand how the marketing website is used. Only loaded after you accept analytics cookies.
• Error monitoring — anonymous crash and error reports.
• Email delivery — sending transactional email such as your sign-in codes.

Data deletion

You can close your account at any time. When you do:

• Your Pro subscription is cancelled.
• Your cloud account and any cloud copy of your data are deleted.
• Your local data stays on your Mac. It is under your control, and you can delete it yourself by removing the app’s local data.

Cloud data exists only while you are on Pro with sync turned on. If your Pro subscription ends and you do not resubscribe, your cloud database is deleted after 30 days. Your local data on your Mac is never affected.

If you have never signed in, or you use the free plan, your data stays only on your device — there is no cloud copy.

Your requests

If you have a question about your data, or want to make a privacy request such as access or deletion, contact us at hello [at] timelin.app and we will help.

Children

Timelin is not directed to children and is intended for general audiences.

Changes to this policy

We may update this policy as Timelin evolves. When we make meaningful changes, we will update the date at the top of this page.

Contact

Questions about privacy? Email hello [at] timelin.app.