Privacy policy

Draft · last updated 31 October 2026

bountime is a planner: tasks, routines, your day and your week. To do that it keeps what you put into it, and very little else. This page says what is kept, where, why, for how long, and how to see, take or delete it.

Who we are

bountime is run by [owner's name or company, and address], the controller of your data under the UK GDPR and the EU GDPR. Write to [support email] about anything on this page.

What we keep, and why

Your account

• Your email address, to sign you in (we send a sign-in link; there is no password) and to write to you about your account.
• When the account was made and when you last signed in, kept by the sign-in service.

Why: to give you the service you signed up for (a contract between us).

What you put in

• Tasks and notes, with their dates, times, priorities, estimates, labels and repeats.
• Labels and areas, routines and habits, the days you tick habits, your week plan (when you wake and sleep, fixed blocks), days that differ, and events.
• Settings that follow you from device to device: the theme, how the day is named (unless it's by the prayers), today's cards, your intention for the day, quotes and words, and how the next task is suggested.

Why: so your planner is there on every device you sign in on (a contract between us).

Kept only on your device

Some things never leave the device you use:

• Your place (a city, or your location rounded to about a kilometre) and its time zone. Sun and prayer times are worked out on the device from it.
• Naming the day by the prayers, with the calculation method and the Asr school. That choice says something about your faith, so it isn't sent to us at all; each device keeps its own.
• Where the app opens, the focus sound and its volume, a focus session that's running, snoozed suggestions and time spent in routines.
• The sign-in session, so you stay signed in.

These sit in your browser's or phone's storage. There is no advertising in bountime.

Usage counts, if you allow them

After you sign in, bountime asks once whether it may count which parts get used. Only if you say yes, it uses Google Analytics for Firebase to count things like which places you open (Today, Tasks, Routines, Week), that a task or note was made, that a task was done, and that a focus session began, along with the usual technical details (device type, browser, rough country). It never sends what you write, your place, your prayer settings, your email or your account. On the web it sets Google Analytics cookies (named _ga). Google signals and ad personalisation are switched off, and the counts are kept for [2] months.

Why: your consent. You can change your answer any time in Settings → Account → Share usage counts; saying no removes the cookies on that device. Say no and nothing is sent to Google at all.

The waiting list

If you joined the waiting list: your email, the tag of the link you came from, and your answers if you gave them, kept with your consent only to tell you when bountime opens and to learn what to build first. The list is deleted after launch.

When something breaks

If a page of bountime stops working while you are signed in, it sends us a short report so we can fix it: the error's own words, where in the code it happened, the page, which version of the app, and your browser's name. It never sends what you write; email addresses and anything after a ? or # in an address are taken out first. The report is linked to your account so it goes when the account does. At most 20 a day are kept for one account. Why: our legitimate interest in keeping bountime working.

Logs

Like every website, the services we use keep short-lived technical logs (IP address, time, the page asked for) to run and protect the service. Why: our legitimate interest in keeping bountime working and safe.

What we never do

• We don't sell your data or share it for advertising.
• We don't read your tasks or notes, except when you ask us to help with a problem and agree to it.
• We don't use your content to train AI.

Who handles it for us

A few companies store or carry your data for us, under contracts that bind them to protect it and to use it only to provide their service:

• Supabase: the database and sign-in, including the sign-in emails. Data stored in London, in the UK.
• Vercel: hosts the website and the app's files.
• Google (Google Analytics for Firebase): usage counts, only if you allow them.
• Paddle: takes payments on the web as the seller of record, once there are paid plans. We never see your card.
• Apple and Google: take payments in their app stores, under their own privacy policies.

Where one of them handles data outside the UK or the EU (for example in the United States), it's protected by the safeguards the law requires, such as the standard contractual clauses or the UK and EU adequacy decisions.

How long we keep it

• Your account and everything in it: until you delete the account.
• A task, note or label you delete is hidden at once, and removed for good 30 days later.
• Reports of a page that stopped working: 90 days.
• Usage counts at Google: [2] months.
• Backups: up to [number] days, then they're overwritten.
• Payment records: as long as tax law requires (in the UK, six years).

Your rights

You can, at any time:

• See and take your data: Settings → Account → Export my data gives everything as one file, and your tasks as a spreadsheet.
• Correct it: edit anything where it shows.
• Delete it: Settings → Account → Delete my account deletes the account and everything in it at once.
• Withdraw consent you gave for usage counts or the waiting list, without affecting what was done before.
• Object to or restrict how we use it, or ask anything else about it, by writing to [support email].

We answer within a month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk) in the UK, or to the data protection authority where you live in the EU.

Security

Everything travels encrypted. In the database each row belongs to one account and can only be read or changed with that account's own sign-in; the app holds no key that could open other people's data.

Children

bountime isn't meant for children under 13 (or the age of digital consent where you live). We don't knowingly keep their data.

Changes

If this page changes in a way that matters, we'll tell you in the app or by email before it takes effect. The date at the top says when it last changed.