Privacy, in plain words.

A tracker that watches how you work has to earn trust by being exact about what it collects. This page lists everything the TimeUno desktop app and browser extension send, who processes it, how long it’s kept, and how to switch parts off.

Who we are

TimeUno is run by Kopilot Web LLC, the controller of the personal data described here. On a team plan, your workspace’s owner decides to use TimeUno for the team; we process the team’s data on their behalf. Questions or requests: support@timeuno.io.

Kopilot Web LLC, a Wyoming limited liability company
1021 E Lincolnway #10466, Cheyenne, WY 82001, USA

What the desktop app sends

• The app in front, its window title, and how long you were idle in it
• How many seconds in each window had any keyboard or mouse input (a count only, never what you typed or where you clicked)
• For browsers: the site and address of the active tab, passed on by the extension. The address keeps its query string and anchor, but parameters that carry sign-in secrets (tokens, codes, keys, passwords and the like) are removed first
• For editors: the name of the project folder you’re in (the name only, never its path or files)
• AI-tool sessions (Claude Code, Cursor, …): start and end, working/waiting state, model, token counts, cost, the project folder path and the conversation title
• A live status every ~30 seconds while the app runs (tracking on/off and the app and title in front), so the dashboard can show your current session and pause remotely
• Icons of the apps you use, for the dashboard
• When you connect it: your computer’s name and operating system

Screenshots and on-screen text

On Windows, macOS and Linux desktops, the app also takes a screenshot of the window you’re using about once a minute, and reads the text on screen (OCR, done on your computer). That’s how TimeUno sees AI tools running inside a terminal: Claude Code over SSH, for example. On a Mac this needs the Screen Recording permission, which you grant in System Settings.

Be aware: whatever is on your screen is in that screenshot and text, including a prompt or an AI's answer if a chat or terminal is in front. Up to 4,000 characters of on-screen text go with each activity record. Screenshots are stored privately and aren't shown in the dashboard.

Both are on by default and can be switched off at any time on each computer: Settings → Capture screenshots and Settings → Read on-screen text. The workspace owner or an admin can also switch either off for everyone under Settings → Privacy & capture in the dashboard; then none of it is stored.

What the browser extension sends

• The site, address and title of the tab you’re using, and up to 4,000 characters of the page’s visible text. The address keeps its query string and anchor, minus parameters that carry sign-in secrets. What you type into fields, passwords included, is never part of the text
• On AI sites (ChatGPT, Claude, Gemini, …): also whether the AI is generating and whether that tab is the active, focused one
• Audio or video playing in a background tab: its site, address and title
• In Chrome, the icons of sites you visit, for the dashboard

While the desktop app runs, this goes to the app on your own computer, which uploads it as described above. Without the app, the extension uploads it itself.

Be aware: the page text is whatever the page shows, including an email you're reading, or your prompt and the AI's answer on an AI site. It follows the same switches and retention as on-screen text: Settings → Read on-screen text in the desktop app or the extension, and Settings → Privacy & capture in the dashboard for the whole workspace.

The AI-tool integrations in the desktop app and the server agent (Claude Code, Cursor, …) send metadata only: tests plant marker text in place of prompts and fail our build if any of it leaks into what they upload. If you turn on Match AI chats to projects (off by default), TimeUno matches chat text to your projects on your device and sends only the matching project.

Who else processes it

• TypeSafe: classifies activity our own rules can’t place. For those records it receives the window title and site path (each shortened to 300 characters), up to 500 characters of on-screen or page text, and your project names, and returns a category.
• Cloudflare: the network in front of TimeUno, screenshot storage (R2), and our email.
• Creem: the seller on the charge. Creem issues the invoice. We never see your full card number.
• Hetzner Online GmbH (Germany): hosts TimeUno’s servers and database.
• Roko Studio: runs our in-app live chat and feedback board. It receives your name, email and whatever you write there.
• Bugwatch: our error monitor. When the dashboard, the desktop app or the browser extension crashes, it receives the error message and where in our code it happened, the app version and operating system. Before sending, we strip page addresses down to the site, and remove email addresses; window titles and screen text are never included. The Firefox extension sends no crash reports.
• PostHog (EU Cloud, Frankfurt): product analytics: which pages and features are used (for example “opened Settings”, “connected a device”, “started a trial”), with your account ID, workspace ID and plan. Never your tracked activity, window titles, sites, page text or project names, and no cookies. Turn it off under Settings → Usage analytics. On timeuno.io itself PostHog counts visits without cookies or an ID.
• Google Analytics (Google Ireland Ltd and Google LLC, USA): Google Analytics 4 on timeuno.io and app.timeuno.io, with the cookies _ga and _ga_<id>. It sees which pages you view, how you arrived (the referring site and any campaign tags in the link), your approximate location derived from your IP address (Google Analytics 4 doesn’t store the IP address itself), your device and browser, and the same feature events PostHog receives. Never your account ID or your tracked activity. In the EU/EEA, the UK and Switzerland nothing is stored in your browser until you choose; elsewhere it’s on by default. Without your consent, Google receives only cookieless pings with no identifier. Change your choice any time under Cookie settings in the footer of timeuno.io or under Settings in the dashboard. If you’ve turned off Settings → Usage analytics, the dashboard sends nothing to Google either.
• AI apps you connect (for example Claude or ChatGPT, through our MCP server): only if you allow them, and only what you ask them to look up: your time totals, timeline and projects. Never screenshots or on-screen text. Disconnect them under Settings → Connected AI apps.

With your consent, Google may use cookies on timeuno.io to measure and personalise our ads. We never sell data, and never share tracked activity.

Why we may use it

To provide the service you signed up for (the contract with you or your team), to keep it secure and working, and to improve how it classifies activity and which features work for people (our legitimate interest in a product that works). Analytics and advertising cookies rely on your consent where the law requires it, and you can withdraw it any time under Cookie settings. Screenshots, on-screen text and usage analytics are optional and can be switched off.

How long it’s kept

• Raw activity (window titles, on-screen text, screenshots, AI-session titles, notes) is deleted after 90 days by default. The workspace owner or an admin can choose 30, 90, 180 or 365 days.
• The totals built from it (time per category and project) stay while your account exists, so your history and reports keep working.
• What the classifier learned from a window is forgotten once that window hasn’t been seen for 90 days.
• Database backups are kept for 14 days.
• Google Analytics keeps its data for 14 months.
• Your cookie choice is kept in the tu_consent cookie for 6 months.

Your data, your rules

• Download everything TimeUno holds about you, or delete your account and its data, yourself: Settings → Your data in the dashboard. Deletion is immediate and includes your usage-analytics history; copies in backups disappear as those backups expire.
• Disconnect a single computer or browser under Settings → Devices. It stops sending at once.
• Prefer to ask, or want something corrected? Email us and we do it the same day.
• If you’re in the EU/EEA or UK you can also complain to your data-protection authority.
• Team connector API keys are stored encrypted (AES-256-GCM) and never shown again.

Questions

Write to support@timeuno.io. A human answers.