Overview
TIM is a local-first iPhone app for tracking daily activity, reviewing weekly patterns, and optionally layering in Apple Health context and Tim AI features. This Privacy Policy explains how TIM, the public marketing site, support communications, and TIM's supporting backend services handle information.
TIM does not require a separate TIM web account to use the core app. Where data leaves the device, this policy describes what is sent, why it is sent, and the choices available to you.
Information you create in the app
TIM stores the core tracking experience on device first. This includes the information you enter directly and the records created as you use the app.
- Activity names, colors, targets, and schedule preferences
- Session start and stop times
- Optional mood scores and notes
- Notification preferences, theme choices, onboarding choices, and Tim AI preferences
Apple Health data
Apple Health access is optional. TIM only reads Apple Health data after you grant permission through Apple's permission flow.
TIM currently reads the Apple Health categories it is built to support, which may include sleep duration, resting heart rate, heart rate variability (SDNN), step count, and workout duration. TIM uses these inputs to improve trend analysis and pattern interpretation inside the app.
Apple Health can contain data from your iPhone, Apple Watch, and compatible third-party apps or devices that you choose to connect to Apple Health. TIM only receives the categories that Apple Health is authorized to share with TIM.
TIM does not use Apple Health data for advertising, marketing profiles, or sale to data brokers. Health permissions can be changed or revoked at any time in the Health app or iOS privacy settings.
Subscriptions and App Store verification
Tim Pro subscriptions are sold and billed by Apple through the App Store. Apple handles payment credentials, billing, renewals, and cancellation controls.
TIM uses StoreKit and Apple's signed transaction data to check whether the current device has an active Tim Pro entitlement. When a Tim Pro feature needs backend access, TIM can send verified transaction data to the TIM backend so the service can issue a short-lived session token for that paid user.
To reduce risk, TIM's backend stores hashed identifiers and operational session records rather than creating a consumer web account for you.
Tim AI processing modes
TIM uses Tim AI Cloud as the default Tim AI mode for Tim Pro. In that mode, the app can send a structured request to the TIM backend for weekly insight generation or Tim AI chat. If cloud processing is unavailable and on-device support exists, TIM may fall back to on-device Tim AI on that device.
If you switch Tim AI to on-device mode in TIM settings on a supported iPhone, Tim AI requests stay on that device and are not sent through the TIM cloud path for that request.
Cloud Tim AI requests may include recent aggregates, activity pacing, limited conversation history, and an optional note summary if you explicitly enable note sharing. TIM excludes note sharing by default and, when enabled, sends a short summary rather than a full note archive.
Tim AI Cloud uses OpenAI through the TIM backend with response storage disabled at the model request level. TIM may still keep limited operational metadata such as request IDs, timestamps, moderation outcomes, token counts, latency, and estimated cost for security, abuse prevention, and service operations.
Tim AI Cloud requests may be refused, moderated, or trimmed if they appear unsafe, abusive, or outside TIM's intended use. Tim AI is designed for productivity coaching and reflection, not crisis support or medical, legal, or financial advice.
How TIM uses information
TIM uses information to operate the app, display your records, analyze activity and Health patterns, verify subscriptions, provide optional Tim AI features, respond to support requests, and protect the service from fraud, abuse, and replay attacks.
TIM may also use de-identified or aggregated operational information to understand reliability, performance, and feature availability, but not to build advertising profiles from your health or app data.
Service providers and recipients
TIM relies on third-party infrastructure and platform providers that process data on TIM's behalf or at your direction.
- Apple for App Store billing, StoreKit verification, on-device Tim AI availability, and optional Apple Health permissions
- Vercel for hosting the TIM backend and this public website
- Postgres for backend session, rate-limit, and Tim AI request logs when database-backed logging is enabled
- OpenAI for Tim Pro Tim AI Cloud responses when cloud mode is used
Website and support data
The marketing site is public and does not create a member account. As of the effective date of this policy, the site does not run customer analytics scripts, advertising trackers, or a public sign-in flow.
If you contact support by email, TIM may receive the information you include, such as your email address, device details, screenshots, and a description of the issue. That information is used to respond to you, troubleshoot the issue, and maintain support records.
Data retention
Core tracking data and Health-derived records imported into TIM remain in the app's local storage until you delete local app data, remove the app, or a later sync updates or removes the mirrored Health record.
Backend session, billing-verification, rate-limit, and security logs are retained only as long as reasonably needed for entitlement verification, abuse prevention, incident investigation, financial reconciliation, and legal compliance.
Your choices and rights
You can use TIM as a core timer without enabling Apple Health, Tim AI, or note sharing. You can revoke Apple Health permissions in the Health app or iOS settings, turn Tim AI off in TIM settings, keep note sharing disabled, and delete local data from your device.
Depending on where you live, you may have rights to request access, correction, deletion, objection, restriction, portability, or complaint handling for personal information processed by TIM. TIM will handle applicable requests in line with the laws that apply to your relationship with the service.
International processing
TIM and its service providers may process limited backend data in countries other than the country where you live. Where this happens, TIM expects providers to use reasonable contractual and technical safeguards appropriate to the service they provide.
Children
TIM is not directed to children under 13 and is not designed as a children's service. If you believe a child has provided personal information to TIM in a way that should not have occurred, contact TIM so the issue can be reviewed.
Policy changes and contact
TIM may update this Privacy Policy as the product, legal requirements, or service providers change. When the change is material, the updated version will be posted on this site with a revised effective date.
For privacy or support questions about TIM, use the support page or the legal contact details listed below.
Legal contact
TIM is operated by Jacob Lanning.
12/4 Bradford Street
Labrador QLD 4215
Australia
jacob.lanning@gmail.com