TimeEd App Privacy Policy

Last updated: 13 October 2026

This policy explains how the TimeEd mobile app for iOS and Android ("the app") handles personal data. The app is provided by TimeEd ehf.

TimeEd is a work tool. The app only stores the data needed to provide the service your team uses. We do not gather data for any other purpose: no analytics about how you use the app, no advertising and no tracking.

1. Who we are

TimeEd ehf, reg. no. 480312-0150, Iceland Email: info@timeed.is

Your employer or team ("your team") sets up your account and decides how TimeEd is used in the workplace.

2. What the app stores to provide the service

Account details. Your team administrator enters them: name, email address, phone number, your kennitala (Icelandic ID number) if your team records it, profile picture, language and time zone. They are used to sign you in and show who did what within your team. If you sign in with your phone number, it is used to send you a one-time sign-in code by SMS.

Work data. What you and your team enter in the app: tasks, projects, customers, time entries, timeclock sessions, comments, photos and files you attach, and absence requests such as vacation or sick days. This is the service itself, used by your team for timekeeping, planning, payroll and invoicing.

Location. When you start or stop a task, the app reads your device's location once and saves the coordinates with that time entry, so your team can see where the work started and ended. It does this only if you have allowed location access. The app never tracks your location in the background or between start and stop.

Camera and photos. The app opens the camera or photo library only when you choose to attach a picture. Only the pictures you select are uploaded.

Notifications. If you allow notifications, the app registers a push token for your device so your team's notifications can reach you. The token is deleted when you log out.

Error reports. When the app crashes or hits an error, a report with the device model, operating system version, app version and the technical details of the error is sent to us. These reports are used only to find and fix problems.

AI suggestions. Some screens have an AI button that suggests a task title or improves a description. Nothing is sent unless you tap that button. When you do, the text you wrote is sent from our server to an AI provider (OpenAI or Anthropic), and the suggestion is returned to the app. The text is used only to produce that suggestion.

What we do not do. We do not sell your data. We do not use it for advertising. We do not use the advertising identifier. We do not gather analytics about how you use the app. We do not track you across other companies' apps or websites.

3. Legal basis

We process your data to provide the service your team has agreed to use (contract), to keep the service secure and working (legitimate interest), and, for location and notifications, on the basis of the permission you give on your device (consent).

4. Who processes data for us

The following service providers process data on our behalf. Each is bound by a written agreement to protect it at least as well as this policy describes, and to use it only for the purpose stated:

Hosting in Europe: our servers and backups, all within the European Economic Area.
Cloudflare: network security and delivery of traffic to our servers.
Sentry (Functional Software, Inc.): error reports.
Google Firebase Cloud Messaging and Apple Push Notification service: delivery of notifications.
Expo (650 Industries, Inc.): delivery of app updates. No personal data.
OpenAI and Anthropic: AI suggestions, only when you tap the AI button.
Twilio: delivery of sign-in codes by SMS to your phone number.
Postmark: delivery of emails sent by the service.

If your team connects TimeEd to a bookkeeping or payroll system (for example DK or Payday), TimeEd sends that system the data your team administrator chooses, such as time entries for invoicing or payroll. Your team administrator controls these connections.

Some of these providers are based outside the EEA. Where data is transferred there, it is protected by appropriate safeguards, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

We may disclose data to authorities only where the law requires it.

5. How long data is kept

Data is kept while your team has an active TimeEd account and you are a member of it.
When your team removes you, or closes its account, your personal data is deleted or anonymised within 90 days.
Records that Icelandic bookkeeping law requires us to keep, such as time entries behind issued invoices, are kept for seven years and then deleted.
Error reports are kept for 90 days.

6. Your choices and rights

Location and notifications: you can turn these off at any time in your device's settings. The app keeps working: time entries are then saved without coordinates, and notifications are not delivered.
Deleting your data: ask your team administrator to remove you from the team, or email info@timeed.is. We reply within 30 days.
Your rights: under data protection law you can ask to access, correct, delete or transfer your data, to restrict or object to processing, and to withdraw consent. To use any of these rights, email info@timeed.is. You can also complain to the Icelandic Data Protection Authority (Persónuvernd, www.personuvernd.is).

7. Security

Data is encrypted in transit, stored on access-controlled servers and backed up daily. No system is completely secure, but we work to protect your data with commercially reasonable measures.

8. Children

The app is a workplace tool and is not directed at children under 16. We do not knowingly process data about children.

9. Changes

If we change this policy, we update the date at the top. We tell users about significant changes by email or in the app.

10. Contact

Questions about this policy: info@timeed.is