TIMEMATE PRIVACY POLICY

Last updated: November 3, 2026

1. GENERAL INFORMATION

This Privacy Policy defines the rules for processing and protecting data in the TimeMate mobile application (hereinafter: "Application").

Data Administrator:

• DKJ Daniel Kurasiński
• Tax ID (NIP): 7962951334
• REGON: 388939653
• Address: ul. Jastrzębia 3/35, 26-600 Radom, Poland
• Email: support@listymate.com

The Administrator has not appointed a Data Protection Officer, as they do not process sensitive data or data on a large scale. For all matters regarding data protection, you can contact the Administrator directly.

2. LEGAL BASIS

Data processing is carried out in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
• The Data Protection Act
• The Act on Providing Services by Electronic Means

3. APPLICATION OPERATING MODEL - PRIVACY FIRST

3.1. Fully Offline Application

The application works fully offline and does not require a user account.

1. No Registration: The application does not require creating an account, providing an email address, password, or other personal data.
2. No Server: The application does not connect to the Administrator's server to synchronize user data. All task-related data is stored exclusively locally on the user's device.
3. Full User Control: The user has 100% control over their data. Data never leaves the device unless the user chooses to export a backup (a backup file saved locally or in a location selected by the user).
4. Privacy: The Administrator has no access to the data entered by the user into the Application (task titles, frequency, completion dates, photos, etc.).

3.2. What does this mean for the user?

• Your tasks, reminders, descriptions, photos, and all other data remain only on your device.
• No one but you has access to them.
• You don't need to trust any server or "cloud" with your private data.
• Deleting the application means deleting all data (unless you have created a backup).

4. WHAT DATA WE COLLECT

4.1. User-entered data (stored only locally)

The user can enter the following data into the Application, which is stored exclusively locally on the device:

• Tasks: title, category, frequency (days, months).
• Completion history: dates and times of the last task completions.
• Photos: photos attached to individual task completions (PRO feature).
• Statistics and Heatmap: automatically generated data about task completion regularity (PRO feature).
• Reminder settings: configuration of local alarms.
• Holiday preferences: to suggest a default country for the holiday display, the app reads your device language/region and, if needed, the SIM/network country code, locally on the device. Your holiday settings (on/off, country, region) are stored only on the device and nothing is sent anywhere. The holiday data is bundled with the app and derived from Nager.Date and OpenHolidays.

IMPORTANT: The Administrator does not have access to the above data. This data is never sent to the Administrator's server.

4.2. Data collected automatically by Google services

The application uses Google services that collect limited technical and analytical data:

• Technical data: device model, operating system version, application version.
• Analytical data: information about how the Application is used (via Firebase Analytics).
• Crash data: error reports (via Firebase Crashlytics).
• Advertising data: advertising ID, interactions with ads (via AdMob - free version only).
• Transactional data: information about purchasing the PRO version or subscription (via Google Play Billing and, on iOS, the Apple App Store).

NOTE: The above data is processed by Google LLC. The Administrator only has access to anonymized aggregate reports.

4.3. Purchases: Google Play, Apple App Store and RevenueCat

Payments for TimeMate PRO are processed by Google Play or the Apple App Store. The Administrator does not receive your payment card or other payment details. To verify purchases and manage access to PRO functions, the Application uses RevenueCat (RevenueCat, Inc.) as a purchase processor. RevenueCat receives:

• an anonymous app user ID generated by RevenueCat (no account, name or email address is used);
• purchase receipts and transaction data from the store (product, purchase status and time);
• basic device and platform information (e.g. operating system, application version).

RevenueCat is the source of truth for your PRO status, which allows PRO to be restored on a reinstalled application or a new device. More information: RevenueCat Privacy Policy.

4.4. Data NOT collected by the Application

The Application does NOT collect:

• Email addresses and passwords.
• First and last names.
• Phone numbers.
• Location data (GPS).
• Content of your tasks and photos on external servers.

5. PURPOSE AND LEGAL BASIS OF DATA PROCESSING

5.1. Data stored locally on the device

We process data locally based on:

• Performance of a contract (Art. 6(1)(b) GDPR): providing Application services – enabling task tracking and reminders.

5.2. Data collected by Google services and purchase processors

We process limited technical data based on:

• Performance of a contract (Art. 6(1)(b) GDPR): handling payments and access to PRO functions (including purchase validation by RevenueCat).
• Legitimate interests (Art. 6(1)(f) GDPR): ensuring security, fixing bugs, analytics, and displaying ads in the free version.
• Consent (Art. 6(1)(a) GDPR): regarding notifications or personalized ads.

6. DATA RETENTION

6.1. Local storage (user data)

All data entered by the user is stored exclusively locally on the device in a SQLite database and internal memory (photos).

Data remains on the device until:

• The Application is deleted.
• Data is manually cleared in the system settings.

NOTE: Deleting the application without a prior backup export means irreversible data loss.

6.2. Data retention period by Google

• Firebase Analytics: 2 months by default.
• Firebase Crashlytics: 90 days.
• Transactional data: period required by accounting regulations (up to 5 years).

7. DATA SECURITY

The Administrator takes care of the application's security, however, due to its offline nature, the security of your data mainly depends on the protection of the device itself (PIN code, biometrics).

8. BACKUPS

The application allows for manual backups. The Administrator does not create automatic backups of your data in the cloud. The User is responsible for the security and storage of the backup file.

9. DATA SHARING AND INTERNATIONAL TRANSFERS

The Administrator does not share data entered by the user (tasks, photos) with third parties because they do not have access to it.

Technical and analytical data may be transferred to Google LLC (USA) based on standard contractual clauses and the Data Privacy Framework program.

Purchase data (see section 4.3) is shared with Google Play or the Apple App Store, which process the payment, and with RevenueCat, which validates the purchase and manages PRO access. RevenueCat processes this data in accordance with its own privacy policy: https://www.revenuecat.com/privacy.

10. USER RIGHTS

Under the GDPR, the user has the right to:

• Access data (exercised independently by browsing the Application).
• Rectify data (by editing tasks).
• Delete data (by deleting tasks or the Application).
• Data portability (via the backup export function).
• File a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

11. COOKIES AND SIMILAR TECHNOLOGIES

The application does not use cookies. It uses:

• Local database to store tasks.
• Shared Preferences to store settings.
• Advertising identifier (AdMob) in the free version.

12. AGE RESTRICTIONS

The application is not intended for children under 16 years of age. The Administrator does not knowingly collect data from persons under this age.

13. CHANGES TO THE PRIVACY POLICY

The Administrator reserves the right to make changes to the Policy. Users will be informed about changes in the update description in Google Play or through a notification in the Application.

14. CONTACT

In matters regarding data protection:

Email: support@listymate.com