Privacy Policy

Who we are

Tiemio is operated by IncubIQ Solutions Ltd, a company registered in England and Wales (Cardiff), company number 08788612 (“we”, “us”). We are the controller of the personal data described here. Contact: hello [at] tiemio.com.

What we collect

• Account data: your email address (and your name, if you add it). Your email is how you sign in: we send a one-time code to it.
• Your DNI or NIE: if you add it to your profile. The employers you work for see it, and it is printed on your monthly timesheets and in their spreadsheet. It is never shown at tiemio.com/verify. You can change or remove it at any time; timesheets already issued keep it as printed, as part of the working-time records.
• Your profile photo: if you add one. Only the employers you work for (or have asked to join) see it, next to your name; it is not printed on timesheets. You can change or remove it at any time, and it is deleted with your account.
• Sign-in data: one-time codes and session records. We store only a one-way hash of each code and session, never the code or token itself.
• Activity data: when your account was created, when it was last used, and whether that was on the website or the iPhone or Android app.
• How you found us: recorded once, when you first sign in, and never updated — the first page of the website you visited and the site that linked to it (without the rest of its address), any campaign tag in that link, your browser's language, the country your connection came from (from Cloudflare, not your precise location), and whether you signed up on the website or in the app, and on what kind of device.
• Screen usage: which screens of the app you open, counted per day under your account. Not what you type or see on them.
• Security log: a record of sign-ins and of changes to your account, plan and data (what happened and when, under your account number), to trace a problem or misuse.
• Usage statistics: once a day we record which accounts were active, on which kind of device and in which language, under an account number rather than your name or email, on our own internal systems. We use them only to understand how the service is used and to improve it.
• Notification data: if you turn on notifications in the app, the device's push token (from Google Firebase) so we can send them. It is removed when you sign out or delete your account.
• Technical data: our hosting provider keeps standard request logs (IP address, browser or device type, date and time) for security and troubleshooting.
• Employer data: if you use Tiemio as an employer, your business's name, tax number and logo (if you add them), its free trial, and the people you add: the name you give each one and the email address or mobile number you enter to send them an invitation.
• Employment data: which employers your account is linked to, when each link started and ended, and who ended it; and, if you ask an employer to add you, the email address and name of the employer you entered (we email them your request).
• Working-time records: each time you start work, pause, resume or finish for an employer: the time it counts at, the time on your device, the time our server received it, whether it was recorded offline and sent later, and whether it was recorded on the web or in the iPhone/iPad or Android app. Each record is linked to the previous one by a checksum, so any later change can be detected. We do not record your location. A correction, asked for by you or proposed by your employer, is kept beside the original, which is never changed: the times asked for, the reason given, who asked, who answered and when. When a monthly timesheet is downloaded, we keep a record of the download (who, when, which month and people) and a fingerprint of its content, so that a copy can be checked as genuine. Anyone holding a copy can check it at tiemio.com/verify with the document number printed on it; that page shows the timesheet's days and totals as issued (not the reasons given for corrections), never who downloaded it.
• Billing data: if you pay for seats, how many, their price and interval, the subscription's status and renewal date, the one-off seats you paid for and the employee each covers, and the reference of your customer record at Stripe. Your card details, billing address and invoices are held by Stripe, not by us.
• App Store purchases: if you subscribe in the iPhone app, the App Store transaction number, the plan, a random number given to Apple to link the purchase to your account (never your name or email), its dates and status, and whether it was a test purchase. Your payment details are held by Apple, not by us.
• Waitlist: if you leave your email on the sign-in page before we open, that email and the language you were reading in. Nothing else, and it is not linked to an account.
• On your device: the app stores your session so you stay signed in, and the website remembers your chosen language. So the app opens and the clock works when our server cannot be reached, it also keeps a copy of the screens you last saw (your employers and your clock; for an employer, the team) and any clock taps not sent yet. Signing out deletes the copies; unsent taps stay until they are sent. We use no advertising or tracking cookies. The sign-in form may use Cloudflare Turnstile, which checks that the request comes from a person.

Why we use it

• To provide the service you signed up for, including signing you in (contract).
• To keep the service secure and working, and to prevent abuse (legitimate interest).
• To measure how the service is used, in aggregate, so we can improve it (legitimate interest).
• To send you a few emails that help you get started, if you have not turned them off (legitimate interest). Each one has a one-click unsubscribe, and the Account page has a switch for them.
• To confirm that you joined the waitlist and to email you when we open (consent). You can withdraw it at any time by writing to hello [at] tiemio.com, and we delete your email.
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

Employers and their employees

The records an employer keeps about the people who work for them (who works for them, and their working-time records) are the employer's. For those records the employer is the controller and we process them on the employer's behalf (as their processor, GDPR art. 28). If you work for an employer and want to see, correct or object to those records, ask your employer; you can also write to us and we will pass your request on. Your own account (sign-in, settings) stays under this policy.

Who else processes it

These providers process personal data on our behalf, under contract:

• Cloudflare, Inc. — hosting of the website, app back end and database, and the Turnstile bot check.
• Amazon Web Services (Amazon SES, EU / Ireland) — sending sign-in codes, other service emails and getting-started emails.
• Google Firebase Cloud Messaging — delivering notifications to the app, when you turn them on.
• Brevo (Sendinblue SAS, France) — sending service emails when Amazon SES is unavailable.
• Stripe Payments Europe, Ltd. (Ireland) — taking payments for paid plans, invoices and VAT; Stripe holds your card details, we never see them.
• Apple Distribution International Ltd. (Ireland) — taking payments for App Store subscriptions bought in the iPhone app; Apple holds your payment details, we never see them.

Some of them may process data outside the UK and the European Economic Area. Where they do, the transfer is covered by appropriate safeguards such as the European Commission's standard contractual clauses.

How long we keep it

• Account data: for as long as you have an account.
• Employer and employment data: for as long as the employer's account exists, and an ended employment for the four years Spanish law requires working-time records to be kept (Estatuto de los Trabajadores, art. 34.9). A deleted account that is linked to an employer or an employment is anonymised (email, name and DNI or NIE removed) rather than deleted, so those records stay intact.
• Working-time records: for as long as the employer's account exists, and at least four years after each was made (Estatuto de los Trabajadores, art. 34.9). They are never changed or deleted, and deleting an account does not delete them.
• Invoices: kept by Stripe for as long as tax law requires, even after your account is deleted.
• Sessions: deleted automatically once expired (sessions last up to 28 days of inactivity).
• One-time codes: valid for 10 minutes, deleted automatically after one day.
• Security log: two years, then deleted — including after your account is deleted.
• Waitlist: until we email you that we are open, and twelve months at most, then deleted.
• Screen usage: 180 days, then deleted.
• Hosting logs: kept by our hosting provider for a limited period.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. You can download a copy yourself from the Account page on the website. For anything else, write to hello [at] tiemio.com. To delete your account, see Account deletion.

You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority of the country where you live.

Security

Data is encrypted in transit (HTTPS). Sign-in codes and session tokens are stored only as one-way hashes. Access to personal data is limited to the people who need it to run the service.

Children

Tiemio is not intended for children under 16.

Changes

We will post any change to this policy on this page and update the date above. If a change is significant, we will also tell you by email.