Privacy
Privacy policy
This page describes, in plain language, what AslTime collects across our desktop, web, and mobile apps, what it deliberately never collects, how we use it, and who can see what. AslTime is privacy-first: every monitoring feature is opt-in, visible to the person being tracked, and controlled by their organization.
01 · What we collect
What we collect
- Account information: name, email, and organization membership.
- Tracked time intervals, labeled with project and task.
- An Activity Score derived only from tracked input — a neutral signal of active time, never a judgment of work quality.
- Optional screenshots — only while the timer is running, and only at the interval your organization configures.
- Optional photos you choose to attach to a time entry as proof of work.
- Optional location — recorded only at timer start/stop and photo upload, and only if your organization has enabled location tracking.
- Organization and project metadata (names, roles, settings).
- Basic device and diagnostic information needed to run and secure the app.
- Billing information, handled by Stripe — AslTime does not store card numbers.
02 · What we never collect
What AslTime will never collect
Keystroke logging— never builtMouse tracking— never builtWebcam or mic capture— never builtClipboard capture— never builtFull URL & window-title recording— never builtStealth or hidden background tracking— never builtOff-timer screenshots— never builtContinuous or background location— never built
These aren't settings you toggle. They were never built.
03 · How we use your data
How we use your data
- To run the service: record time, build timesheets, and show activity to you and your organization.
- To provide optional work-proof features (screenshots, photos, location) when your organization enables them.
- To authenticate you and keep your account and organization secure.
- To process billing through Stripe.
- To provide support and to fix and improve the app.
We do not use your tracked data for advertising, and we do not build advertising profiles.
04 · We never sell your data
We never sell your data
AslTime does not sell your personal data and does not share it with third parties for their own advertising or marketing. The only third parties involved are the subprocessors below, which operate the service on our behalf.
05 · Where your data lives
Where your data lives
AslTime runs entirely on Cloudflare's global network — Workers, D1, and R2 — with no separate external database. Data is encrypted in transit.
06 · Retention
Retention
Each organization configures a screenshot and activity retention period; expired data is automatically deleted. Audit log depth depends on the organization's billing plan. When an account is deleted, its data is removed as described in "Deleting your account and data" below.
07 · Who can see what
Who can see what
Access is role-based within each organization. Every screenshot view is itself written to an audit log. The person being tracked can see everything recorded about them — the same data their managers see.
08 · Mobile app permissions
Mobile app permissions
Our iOS and Android apps request device permissions only for the features you use, and only when you use them:
- Camera / Photos — only when you choose to attach a photo to a time entry as proof of work.
- Location — recorded only at timer start/stop and photo upload, and only if your organization has enabled location tracking. You can deny location and still track time.
You can change or revoke these permissions at any time in your device settings.
09 · Subprocessors
Subprocessors
AslTime uses Cloudflare (hosting, storage, network) and Stripe (billing) to operate the service. Neither is used for advertising or analytics on your tracked data.
10 · Deleting your account and data
Deleting your account and data
You can request deletion of your account and associated personal data at any time by emailing privacy@asltime.com from your account email, or by asking your organization owner to remove your account.
On deletion we remove your personal profile, tracked time, screenshots, photos, and location records. We complete deletion requests within 30 days. Some records may be retained only where required for legal, security, or billing purposes, and are then deleted.
11 · Security
Security
Data is encrypted in transit. Access is authenticated and role-based, screenshot access is audit-logged, and screenshot files are served through short-lived signed URLs. We work to protect your data, though no online service can guarantee absolute security.
12 · Children
Children
AslTime is a workplace tool intended for organizations and their workers. It is not directed to children, and we do not knowingly collect personal data from anyone under 16.
13 · Cookies
Cookies
This marketing site (asltime.com) sets no cookies. The app subdomain (app.asltime.com) uses session authentication only — no advertising or third-party tracking cookies.
14 · Your rights
Your rights
You can request access to, export of, or deletion of your data by emailing privacy@asltime.com.
15 · Controller & processor
Controller and processor
The customer organization is the controller for the time and activity data of the people it tracks. AslTime processes that data on the organization's behalf, under its instructions.
16 · Changes & contact
Changes and contact
We'll update this page as the product changes and note the date below. Questions or requests: privacy@asltime.com.
Last updated: 2026-07-20