Legal
TimeBill app privacy policy
Last updated:
This notice explains how personal data is processed when you use TimeBill for macOS. It covers the App Store edition and, where expressly stated, the Setapp edition. Information about optional features applies only if your installed version includes those features and you use them.
1. Who is responsible for your data
TimeBill is provided by the following person, who is the controller for the processing within our responsibility described in this notice:
Adrian Lohr, Lohr Software
Arnheidstr. 3
13467 Berlin, Germany
Email: mail@lohrsoftware.com
You can use this address for privacy questions and to exercise your rights. For help with the app, you can also contact support@lohrsoftware.com.
2. Local app and external services
TimeBill does not require a user account with Lohr Software. Your work data is processed on your Mac. We do not operate a server for this data, receive an automatic copy, or have remote access to it. TimeBill does not provide its own cloud synchronisation.
The app has no advertising networks. Lohr Software does not operate its own usage analytics or automatic crash-reporting service in the app. Separate from this are Apple's services for app distribution and purchases, the licence and usage reports in the Setapp edition, and messages you choose to send us. These are explained below.
Local technical logs may be created during operation, for example about errors and purchase status. TimeBill has no feature that automatically sends these logs to Lohr Software.
3. Work data processed on your Mac
Depending on what you enter or import, TimeBill processes in particular:
- projects, tasks, descriptions, notes, dates and assignments;
- time entries with start, end and duration, hourly rates, costs and payment status;
- customer and contact details, such as names, addresses and email addresses;
- your business, tax and bank details, such as tax number, VAT ID, IBAN and BIC;
- invoices, timesheets, templates, logos, background documents and app settings.
This information is used to track time, manage projects and create your documents. It is stored in local databases, settings and files. TimeBill does not automatically transmit invoice contents or bank details to us, payment services, authorities or invoicing networks. A payment QR code on an invoice contains the payment details used to create it; generating it does not initiate a payment or transmit data.
You decide what content to enter. If you process personal data about customers, employees or other people for your work, you are responsible for its lawful use, any required notices and retention. We do not receive that data simply because you store it in TimeBill.
4. Optional automatic time tracking
When you start Auto-Track, TimeBill records the foreground app's name and identifier, timestamps and durations, and activity and idle states during the session. It also records counts of keyboard, click and scroll events, switches between macOS desktops, and the approximate duration for which a microphone is detected as active. This information helps distinguish work from breaks and assign time to a task.
It does not record typed characters, passwords, window contents or titles, browser addresses, screenshots or audio. Microphone activity detection reads its usage state, not its audio. Activity data stays on your Mac and is not sent to us.
Detection uses system information provided by macOS and does not request screen recording, audio recording or Accessibility access for this purpose. You can pause or end Auto-Track at any time and track time manually instead. This stops active recording but does not delete saved sessions or time entries you have already accepted.
Sessions awaiting assignment are stored locally for later review. After you successfully apply or discard a session, its record is removed; accepted time entries remain and may contain the name of the app used in their notes.
5. Features using local Apple Intelligence
On supported Macs, TimeBill can use Apple's on-device language model through the Foundation Models framework. If you enable invoice text polishing, the project name, invoice notes and line-item descriptions and notes are processed to suggest improved wording.
When you review an Auto-Track session, TimeBill may also automatically prepare task assignment suggestions. If Apple Intelligence is available, it processes project and task text along with the recorded app names, app identifiers, durations and activity values locally. You decide whether to accept the assignments.
These features do not send their inputs to Lohr Software or an external AI service. TimeBill uses the on-device model for these features, without a cloud AI service. Apple is responsible for providing Apple Intelligence itself, for example downloading the model. You can leave text polishing off and disable Apple Intelligence in macOS System Settings.
6. Mac App Store, purchases and Apple diagnostics
When you obtain TimeBill from the Mac App Store or purchase Premium, Apple handles the download, payment and any subscription through your Apple Account. TimeBill uses StoreKit to check which features are unlocked. The app processes the purchase information supplied by Apple, in particular the product, purchase date, validity and any expiry date. Lohr Software does not operate a separate server for these checks.
This does not give us your payment details or Apple Account credentials. Through its developer services, Apple may make sales and subscription reports available to us and, depending on your sharing preferences, usage statistics and diagnostic reports. Subscription reports may include a developer-specific subscriber identifier and your country or region. This information supports accounting and identifying app problems; it is not an automatic transfer of your TimeBill work data to us.
Apple is independently responsible for processing within its platform. Information about data, retention, international transfers and your choices is available in Apple's App Store & Privacy notice and Privacy Policy. You can manage diagnostic sharing in the macOS Analytics & Improvements settings.
7. Additional processing in the Setapp edition
Only the edition distributed through Setapp includes the Setapp framework. It communicates with Setapp for activation and licence checks and reports app usage, including for remuneration within the Setapp service. According to Setapp, this may involve device and installation identifiers, IP address, app and operating system information, and usage and technical log data. This is separate from the locally stored work contents of your projects and invoices.
The provider is MacPaw Way Ltd., Cyprus. Setapp processes data for its platform under its own responsibility; reports about use of and remuneration for our app may be made available to us. See the Setapp Privacy Notice for recipients, retention, international transfers and your rights. This Setapp processing does not occur in the App Store edition.
8. Contact and email support
If you contact us, we receive your email address, any name you provide, message content, attachments and technical details you include. The app's support command opens an email draft containing the app version, build and macOS version. You can edit it before sending; TimeBill does not send the message automatically.
We use this information to handle your request and, where relevant, investigate an issue. Please send only what is needed and remove other people's details where possible. If attachments contain such details, we receive them from you as the sender, not through remote access to the app.
Our mailboxes are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. As our email service provider, IONOS processes messages and the connection data needed for delivery, storage and security. Further information is available in the IONOS privacy notice.
9. Purposes, legal bases and recipients
Where we process personal data as controller, the following legal bases apply:
- Providing the app functions you request, checking your licence and providing contract-related support rely on Article 6(1)(b) GDPR. Local storage and access strictly necessary for a function you expressly request rely on section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
- Handling other enquiries and evaluating diagnostic and platform reports made available to us rely on Article 6(1)(f) GDPR where they contain personal data. Our legitimate interests are responding to enquiries, maintaining the app's functionality, and checking its use and the remuneration due to us.
- Legally required retention and disclosures rely on Article 6(1)(c) GDPR. Where data is needed to establish or defend legal claims, we rely on Article 6(1)(f) GDPR and our interest in protecting our legal position.
- Where processing is based on your consent, Article 6(1)(a) GDPR applies. A technical macOS permission does not automatically replace any consent required under data protection law.
Information for local projects and voluntary enquiries is not generally required by law or needed for an account with us. However, without information needed for a particular function or enquiry, that function or request may not be available or may be limited. Purchases and the Setapp licence require the respective platform services.
Recipients, where necessary for the particular activity, are the platform and email providers named above, legally authorised public bodies, or advisers dealing with a specific legal matter. We do not sell personal data or share local work contents for advertising. The local processing described here does not cause a transfer to a third country. The independently operated Apple and Setapp services may process data outside the EU or EEA, particularly in the United States. Apple identifies EU Standard Contractual Clauses among its safeguards. Setapp's Data Processing Agreement also provides for Standard Contractual Clauses for relevant third-country transfers. The privacy notices linked above explain their respective transfers and how to obtain information about the safeguards or a copy.
We do not make solely automated decisions about you that produce legal or similarly significant effects within the meaning of Article 22 GDPR. Local text and task assignment suggestions are tools to assist your work.
10. Retention, export and deletion
Local work data remains stored until you delete it using the relevant features or remove the corresponding local app data. Archiving or marking an item as completed or paid is not deletion. If your version includes the Invoice Vault, invoices stored there remain after a project or customer is deleted and must be deleted separately. Unreadable recovery files may be kept locally to allow data recovery.
You can use the available export features. A single export does not necessarily include every type of data, in particular the complete invoice archive. Exported files, print jobs and content shared through other apps are then also subject to your chosen storage or recipients. For example, a cloud folder or a service used to back up your Mac may receive copies.
Uninstalling TimeBill does not reliably remove all settings, saved documents, exports or backups. You need to consider these separately for complete removal. We cannot remotely delete data stored only on your Mac. You can contact support for help locating it.
We retain support messages and files you voluntarily send for as long as needed to handle and document the resolution of the particular request. Once that purpose ends, we delete the data unless a legal retention obligation or necessary retention for a legal dispute applies. In that case, we restrict further use to that purpose. The applicable retention and limitation periods depend on the particular matter. We retain personal data in platform reports we receive only for as long as needed for the relevant licence, usage or accounting checks, or the legal obligations described above. Platform data held by Apple or Setapp is subject to their own retention rules.
11. Your rights
Subject to the applicable legal conditions, you have rights of access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20).
Right to object: If processing is based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. We will then stop processing unless we demonstrate compelling legitimate grounds that override your interests or the processing is needed for legal claims.
You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. To make a request, email mail@lohrsoftware.com. For data held only locally, the app provides editing, export and deletion features. For data Apple or Setapp controls independently, you can contact the relevant provider directly.
You may also complain to a data protection supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. Our competent authority is the Berlin Commissioner for Data Protection and Freedom of Information. You do not have to contact us before making a complaint.
12. Website and changes to this notice
When you open the website, help pages or this notice from the app, your browser connects to the website. This involves website access data, such as your IP address. For information about the website, including the Vercel services used there, see the website privacy policy. Vercel's management of our domain does not mean your local app work data is sent to Vercel.
We update this notice when data processing or legal requirements change. The date above identifies the current version. Changing this notice does not replace any required consent.