Clocked

Privacy policy

Last updated 14 October 2026

This policy describes what Clocked stores, why we store it, and how to get it back or deleted. It is written to be read, not to be survived.

What we store

  • Account details — your email address, name, business name and address, tax identifier and default currency. Used to authenticate you and to render your invoices.
  • Nothing, until you create an account — the desktop and mobile apps keep clients, projects and time entries on your device. Without an account, none of it is sent to us. When you create an account or sign in, the app uploads what is on the device and keeps it in sync from then on.
  • Your business records — clients, projects, time entries, invoice templates and invoices. This is the data you create by using the product.
  • Operational logs — request timestamps, IP address and error traces, retained for a limited period to keep the service running and secure.

What we do not do

  • We do not sell your data, and we do not share it with advertisers.
  • We do not use your business records to train machine learning models.
  • We do not run third-party advertising or analytics trackers, and we do not track you across other sites. The pages you are reading set no cookies.

Website analytics

To learn which pages are useful, the marketing site runs our own analytics, hosted on our own servers. It is cookieless: nothing is stored in your browser, and no data goes to an analytics company. We record the page you viewed, the referring site, campaign tags in the link, your browser and device type, and clicks on buttons such as “Start free”.

Your IP address is used transiently, at the moment of the visit, to work out your country and to compute an anonymous visitor hash that changes every day, so a visit can be counted once without recognising you tomorrow. The IP address itself is not stored with the analytics. If your browser sends Global Privacy Control or Do Not Track, the analytics never starts and nothing is sent.

App usage data

The Clocked apps (web, desktop and mobile) send anonymous usage events to the same self-hosted analytics, such as “a timer was started” or “an invoice was created”, along with the app version and platform. Each install is identified by a random ID generated on the device. When you are signed in, events are also linked to your account’s internal ID so we can see how features are used over time, and our server records account events such as sign-up and changes to your plan.

These events never contain your personal content: no client or project names, notes, amounts, email addresses or invoice details. The same data decides which version of a feature you see when we test improvements. You can turn usage data off at any time in the app under Settings → “Share anonymous usage data”; from then on that app sends no usage events.

Who else processes it

We use a small number of subprocessors: a cloud hosting provider for the application and database, an email delivery provider for transactional messages such as password resets and the invoices you send to clients, and Stripe for online invoice payments. If you connect a Stripe account, Stripe receives the details it needs to onboard you and to process your clients' payments under Stripe's privacy policy; Clocked stores only your Stripe account identifier and the payment reference for each paid invoice. We do not transfer your data to anyone else.

Invoices you send

When Clocked emails an invoice on your behalf, that email contains a link to a hosted invoice page. The link includes a random token. Anyone holding the link can view that single invoice — this is deliberate, so your client does not need an account — but the token grants access to nothing else, and cannot be used to discover other invoices.

Retention

Your business records are kept for as long as your account exists. Deleting your account deletes them, along with any files you uploaded; you can do that yourself from Settings in any of the apps (how). Operational logs are kept for 90 days.

Your rights

You can see and correct your records in any of the apps, and delete your account and everything in it from Settings in the web, desktop or mobile app. For a copy of your data, or for anything you can't do in the app, write to privacy@useclocked.app. If you are in the UK or EU, you also have the right to lodge a complaint with your local supervisory authority.

Changes

If we change this policy materially, we will email account holders before it takes effect rather than quietly updating the date.