Time PennyPrivacy Policy
Last updated 16 August 2026 · Highline Digital Holdings LLC, a Colorado limited liability company · support@highlinedigitalholdings.com
The short version
Time Penny stores your tasks. If you sign in, they sync to your account so they reach your other devices. If you don't sign in, they never leave your phone.
We do not track you across other apps or websites. There is no advertising in Time Penny, and no outside analytics company watching what you do.
We do count some things about how the app is used — how many people finish setup, whether the reminder test worked — so we can tell which parts help. That stays in our own database, never includes anything you write, and you can switch it off in Settings.
Some optional features use AI. When, and only when, you tap one of those buttons, the text or photo you chose is sent to Anthropic to produce the answer. Nothing is sent unless you ask for it, nothing is sent in the background, and you never have to use those features to use Time Penny.
What we collect
If you use Time Penny without an account, everything stays on your device. We receive nothing.
If you create an account, we store:
| What | Why |
|---|---|
| Your email address | To sign you in. There is no password. |
| Your tasks, routines, reminders and daily capacity check-ins | So they sync across your devices |
| A record of when you used the Shame-Free Reset | So the feature works consistently across devices |
We do not collect: your name, phone number, location, contacts, photos, health records, or any diagnosis. Time Penny never asks whether you have ADHD or any other condition, and there is no field in which to record one.
How the app is used — our own measurements
To find out which parts of Time Penny help and which get in the way, the app records a short list of things that happen while you use it. This is written to our own database and goes nowhere else.
What is recorded:
| What | Why |
|---|---|
| That the app was opened, and how many days since you installed it | Whether people come back |
| Which onboarding screens you reached, and whether you skipped a question | Where setup loses people |
| Whether the reminder test worked, failed, or was skipped | How many people actually have working reminders |
| That a first task was created | Whether people get to the point of the app |
| That the Shame-Free Reset was offered, and which of its options you chose | Whether that screen is doing its job |
| Which premium features are used *(once there are any)* | What to build next |
| An anonymous identifier for this installation | So two of these records can be recognised as the same phone |
What is never recorded: what you write. Your task titles, notes, first steps, routine names and reminder text are never part of this and never leave your phone except to sync to your own account. Nor is your location, your contacts, your email address, or an advertising identifier — there isn't one in this app.
Each record is a fixed label and a number or a yes/no. Not free text. The app is built so there is nowhere for what you write to go, and it is checked again before storage and a third time on arrival.
How long: 90 days, then deleted.
Turning it off: Settings → Help improve Time Penny → Off. Everything in the app keeps working exactly the same. Anything already waiting to be sent is discarded at that moment.
The anonymous identifier is created on your phone, is not linked to your name or email unless you sign in, is replaced with a new one when you sign out, and is deleted entirely if you choose "remove from this device". It is not shared with anybody and cannot be used to recognise you in any other app.
What we do not do
- We do not sell your data. Ever, to anyone.
- We do not use it for advertising, and we do not show ads.
- We do not track you across other apps or websites.
- We do not use any third-party analytics or crash-reporting service. The measurements described above are our own and stay on our own systems.
- We do not use an advertising identifier. There is none in this app.
- We do not read your tasks. They are stored so you can retrieve them.
- We do not send anything to an AI service unless you ask us to, on that occasion, by tapping the button that says so. There is no background processing of your tasks, and nothing you have already written is sent because a feature exists.
The AI features
Three optional features use AI. Each one is something you start deliberately:
| Feature | What is sent | When |
|---|---|---|
| Suggest a first step | The title of that one task | When you tap "Suggest one for this" |
| Voice capture | The text of what you said — not the recording | When you finish speaking |
| Photograph a deadline | The photo you chose | When you tap "Use photo" |
How it works. The request goes to our own server first, and our server talks to Anthropic (the company behind Claude). We do this so that the credentials stay on our server rather than inside the app.
What we keep. Nothing you sent, and nothing that came back. Our server does not log the text, the photograph, or the answer. We keep one number per person per month — how many times each feature was used — so we can size the service. That number contains no content of any kind.
Speech stays on your phone. Voice capture uses your phone's own speech recognition to turn what you said into text. The audio recording is never uploaded to us or to anyone else. Only the resulting text is sent.
Nothing is saved without you. Every one of these features shows you what it produced and waits. A suggested step is not written into your task, tasks from a voice capture are not created, and a deadline read from a photo is not stored, until you confirm it. You can edit any of it first.
If you never tap them, nothing is ever sent. These features are the only part of Time Penny that sends your content anywhere other than your own synced account.
Who can see your data
Row Level Security is enabled on every table, scoped to your account. Another user of Time Penny cannot read your rows — not by accident, and not by trying.
Service providers we rely on:
- Supabase — hosts the database and handles sign-in. supabase.com/privacy
- Resend — sends your sign-in code. Receives your email address for that purpose only. resend.com/legal/privacy-policy
- RevenueCat *(once subscriptions launch)* — manages subscription status. Receives an anonymous account identifier, never your email or tasks. revenuecat.com/privacy
We may disclose data if legally compelled. We will tell you unless prohibited from doing so.
How long we keep it
Your data stays until you delete it. Delete your account and it is removed from our servers — every table cascades from your account record, so nothing is left behind.
Deleting the app from your phone does not delete your account. Use Settings → Delete my account for that.
The usage measurements described above are kept for 90 days and then deleted. If you were signed in when they were recorded, deleting your account removes them immediately along with everything else.
Your choices
Export everything. Settings → Export my data. Free, no account needed, works offline.
Delete your account. Settings → Delete my account. Immediate and permanent. No email to support, no waiting.
Use the app without an account. Permanently supported. Nothing is withheld except syncing across devices.
Stop the usage measurements. Settings → Help improve Time Penny → Off. Takes effect immediately, and nothing about the app changes.
Depending on where you live you may have additional rights — access, correction, portability, erasure, or objection. The export and delete controls above cover most of these directly. For anything else, email us.
Children
Time Penny is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes materially we will say so in the app before the change takes effect, rather than quietly updating a date at the top.
Contact
support@highlinedigitalholdings.com
Highline Digital Holdings LLC, Colorado, USA