Privacy policy

What we collect

• Your account: your email address, used to sign you in with a one-time code or link, and an account ID.
• If you continue with Google, Apple or Microsoft: that company tells us your email address and its ID for your account, and may include your name and a link to your profile picture. We use only the email and ID, to sign you in. We never get your password or anything else in that account. With Apple you can hide your email, and we get a private relay address instead.
• Age check: your birth year and month, only to confirm you are 13 or older. We never ask for a full birthdate. If you are under 13 we save nothing.
• Your settings: an optional display name, your timezone, sleep times, busy hours, break style and focus timer lengths.
• What you plan: tasks (with any notes, estimates and deadlines), goals, fixed events, and the time blocks of your plan.
• Focus sessions: when they ran, planned and actual minutes, how it went, and an optional energy level (low, OK or high). This is how Hourstone learns how long things really take you.
• Feedback you choose to send, with the page you sent it from.
• AI usage counts: which AI action ran, its size in tokens, and whether it worked, to apply the weekly limit. Not what you typed.
• Your AI choice: the time you agreed to AI planning, if you did.

We never collect health data, diagnoses, location, contacts or photos. Some choices, like whether block reminders are on, stay only on your device.

How we use it

Only to run Hourstone for you: signing in, building and fixing your plan, the focus timer, learning your estimates, reminders you turn on, and answering your messages. We don't use your data for advertising and we don't sell or share it for marketing.

Where it is stored

Your account and plan are stored by Supabase (database and sign-in), and the Hourstone website and app screens are served by Vercel. Every table is protected so that only your account can read or change your rows. Like any web service, these providers keep short-lived technical logs, such as IP addresses and request times, for security and reliability.

Google Calendar

Connecting Google Calendar is optional. If you connect it, with Google's permission screen:

• What we read: your list of calendars, and the times (and, unless you turn titles off, the names) of events in the calendars you choose. All-day events and events marked “Free” are skipped.
• What we write: your planned tasks, into a separate “Hourstone” calendar we create, and changes you make in Hourstone to an imported event.
• What we store: your Google email address, which calendars you chose, imported events, and Google's access token, encrypted, readable only by our server. We use this data only to show and plan your day, and never for ads, selling or training AI. Imported event names are never sent to the AI.
• Disconnect: Settings, Connected calendars. We delete the “Hourstone” calendar, every imported event and the token, and revoke our access. Deleting your account does the same.

Hourstone's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Payments

If you choose Hourstone Plus, you pay on a page run by Stripe. Stripe collects your card details and billing address; Hourstone never sees or stores them. From Stripe we keep only your plan, its status, when it renews, and Stripe's customer and subscription ids, so we know you are on Plus. Stripe handles your payment information under the Stripe privacy policy. Deleting your account cancels Plus.

AI processing

The Plan screen uses Anthropic's Claude AI to turn what you type into a suggested plan. Before the first request, Hourstone asks for your OK; without it nothing is sent.

• What is sent: the text you type on Plan (or, for a goal breakdown, the goal and its sub-tasks), today's date and time, your timezone, sleep times and busy hours. Never your name or email.
• Hourstone does not store your messages or the AI's replies. Only the tasks, goals and events you confirm are saved.
• Anthropic processes the request under its commercial terms, which do not allow it to train its models on this data. See Anthropic's privacy policy.
• You can withdraw your OK any time in Settings, under AI planning. You can always add and plan tasks by hand without AI.

Notifications

In the iPhone app you can turn on block reminders. They are scheduled on your phone from your plan; no push service or third party is involved. Turn them off in Settings, under Reminders.

Keeping, exporting and deleting your data

• We keep your data until you delete it or delete your account.
• Export: Settings, Your data, Export my data gives you everything stored about you as one file.
• Delete: Settings, Danger zone, Delete my account removes your account and all of its data straight away. Copies in our providers' backups are overwritten on their regular schedule.

Teens

Hourstone is for people 13 and older. We don't knowingly collect data from children under 13; if you believe a child has signed up, write to us and we will delete the account.

Contact

Questions or privacy requests: use Feedback, at the bottom of the sidebar (the speech-bubble button at the top on a phone). If this policy changes, we will update the date at the top. The rules for using Hourstone are in the Terms of use.