Privacy Policy | TIME by RKOSPL

1. Introduction

TIME by RKOSPL ("we", "our", "us") is a time-allocation and availability-sharing tool operated by RKOSPL. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

We collect only the minimum data necessary to provide our service:

Email address — used for account authentication and login.
Display name — shown on your profile and public availability page.
Time allocation data — the tasks, hours, and time entries you create within the app.
Session Notes — the text notes you log for your time entries.

We do not collect:

Payment or financial information
Location data
Voice audio data (voice dictation is processed entirely locally on your device via the Web Speech API; no audio recordings are ever transmitted to or stored on our servers)
Device fingerprints or advertising identifiers
Data from third-party sources

3. How We Use Your Data

To authenticate your account and maintain your session.
To display your time allocations and availability on your personal dashboard.
To render your public availability page (if you choose to make it public).

We do not use your data for advertising, profiling, or any purpose beyond operating the service.

4. Data Storage & Security

Your data is stored securely on Supabase (powered by PostgreSQL) with Row Level Security (RLS) enabled on all tables. This ensures that each user can only access their own data. All data is transmitted over HTTPS (TLS encryption in transit).

5. Cookies

We use only essential authentication cookies to maintain your login session. We do not use tracking cookies, analytics cookies, or any third-party cookies.

6. Data Sharing

We do not sell, rent, or share your personal data with any third parties. Your public availability page displays only the information you choose to make public (task names, allocated hours, and availability). Your email address is never displayed publicly.

7. Data Retention & Deletion

Your data is retained only for as long as your account exists. When you delete your account through the "Danger Zone" in Settings, all of your data is permanently and immediately deleted, including:

Your profile and display name
Your email from our authentication system
All tasks, time entries, and call-to-action data
Your public availability page

This deletion is irreversible. We do not retain backups of deleted user data.

8. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access — View all data we hold about you (visible in your dashboard and settings).
Rectification — Update your data at any time through Settings.
Erasure — Delete your account and all associated data instantly.
Data portability — Your data is accessible via your dashboard.
Withdraw consent — You can delete your account at any time without restriction.

9. Children's Privacy

Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or your data, please contact us at rkospl.com.