Privacy Policy | TimedFlow

Introduction

Welcome to TimedFlow ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our stage management and timer application services.

TimedFlow is operated by Dapols. By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

Email address (for account creation and communication)
Name (optional, for personalization)
Authentication identifiers from providers you choose, including Google and Apple
For Sign in with Apple, an encrypted refresh token retained only to revoke Apple authorization if you delete your account

Usage Data

Timer and room configurations you create
Session data and timing information
Device, operating-system, app-version, and browser information
IP address and approximate location derived from it (such as country or region)

Payment Information

Pro payments are processed by Polar on the web, Apple through the App Store, or Google through Google Play. RevenueCat receives subscription and purchase status from Apple and Google so we can unlock Pro across your signed-in devices. We receive transaction and entitlement records, such as product, status, renewal, and expiration information, but do not receive or store your complete payment-card number.

How We Use Your Information

To provide and maintain our timer and stage management services
To process your subscription and manage your account
To enable real-time synchronization between controller and viewer devices
To send you service-related notifications and updates
To improve our services and develop new features
To respond to your support inquiries
To detect and prevent fraud or abuse

Data Security

We implement industry-standard security measures to protect your personal information:

All data is encrypted in transit using TLS/SSL
Database encryption at rest
Secure authentication through Supabase
Regular security audits and updates
Access controls and monitoring

Chrome extension

The TimedFlow Stage Timer Chrome extension is part of the same product. This section matches the Chrome Web Store data-safety disclosure.

Stored on your device

Signed-in session tokens (local storage only — not synced across devices)
Preferences such as theme, language, and last-used room or template
Offline timer snapshots so a closed popup can resume the clock

What leaves the device

Timer commands sent to timedflow.com when you control a room
Reads of your rooms and live updates from our Supabase project under your account

What we do not collect

Browsing history or page content (the extension has no content scripts)
Data sold or transferred to third parties for advertising

More detail: timedflow.com/chrome-extension.

Data Sharing and Third Parties

We do not sell your personal information. We may share your data with:

Supabase: Our database and authentication provider
Polar: Web subscription checkout and billing
Apple: Sign in with Apple and App Store subscription processing
Google: Google sign-in and Google Play subscription processing
RevenueCat: App Store and Google Play subscription status and entitlement synchronization
Vercel: Our hosting and analytics provider
AI model provider: Processes only the rundown brief you submit when you use the optional AI timer planner

Your Rights

Depending on your location, you may have the following rights:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Opt out of marketing communications
Withdraw consent where applicable

You can initiate account deletion in TimedFlow Settings or at timedflow.com/account/delete. To exercise another privacy right, contact us at support@timedflow.com

Cookies and Tracking

The website uses essential cookies for authentication and session management and may use analytics cookies to understand service usage. The mobile app stores session credentials securely on your device and stores preferences, offline timer snapshots, and queued commands locally. TimedFlow does not use this information for cross-app advertising or tracking.

Data Retention

We retain account, room, timer, and entitlement data while your account is active and as needed to provide the Service. When you delete your account, TimedFlow deletes the account and associated service data, including the Apple revocation credential after it is used, subject to limited records we must retain for legal, tax, fraud-prevention, dispute, or transaction-record obligations. Apple, Google, Polar, RevenueCat, and other providers retain information under their own policies. Deleting TimedFlow does not by itself cancel a Polar, App Store, or Google Play subscription; cancel it through TimedFlow account settings or the store that bills you before deleting your account.

Children's Privacy

TimedFlow is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Dapols - TimedFlow

Email: support@timedflow.com