What we collect, why, and where it lives.

Last updated 29 October 2026

Who we are

Time + Energy is operated by Shadow Culture d.o.o. (legal name Društvo sa ograničenom odgovornošću “Shadow Culture”, a Montenegrin limited liability company, registration number 5 - 1357417 / 001, tax number 03811000; "we", "us"), Blaža Raičevića 109, 81000 Podgorica, Montenegro. Questions about this policy or your data: subscribe@timeplusenergy.com.

What we collect

At checkout: your name, email address and phone number, collected by our payment provider. Card details go to the payment provider only; we never see or store them.
Your login: your email address and a password you choose. Passwords are stored by our authentication provider as one-way hashes; we cannot read them.
What you enter in the app: the time, energy, body, mind and money figures you track, the names and colours of the people in your household, and any notes you type. This is your data; we store it so the app can show it back to you.
Technical: a session token kept in your browser so you stay signed in, and the server logs any web host keeps (request times, addresses, errors) for reliability and security.

We do not use advertising trackers, and we do not build profiles of you from anything outside the app.

Why we use it

To run your subscription: taking payment, knowing who has an active subscription, and sending you your login.
To run the app: showing you and the people you invite the record your household keeps.
To write to you as a subscriber: occasional notices about the product, sent to the address you subscribed with. Every such email carries an unsubscribe link; login and password emails are the only ones you cannot opt out of while you hold an account.

Who processes it for us

Payment provider — takes your payment and tells us it succeeded, renewed, failed or was cancelled, issues your receipt, and holds the checkout details (name, email, billing country, payment method) under its own privacy terms. We receive confirmation of the payment and your email address, never your card.
Supabase — hosts the database and the login system, in the European Union (Frankfurt).
Netlify — hosts the website and the app.
MailerLite — sends subscriber notice emails.
MailerSend — sends your login and account emails.
Anthropic — powers the in-app assistant (Wise AI). When you ask it a question, your question and a short summary of your own data are sent to Anthropic to generate the answer, and used only for that; Anthropic does not use it to train its models.

Each processes data only to provide that service to us. We do not sell your data, and we do not share it with anyone else unless the law requires it.

Our EU and UK representative

If you live in the European Union, the European Economic Area, the United Kingdom or Switzerland, you can contact us about your personal data through our representative, DataRep (Data Protection Representative Ltd, company number 616588, Ireland). DataRep acts as our representative under Article 27 of the GDPR and the UK GDPR.

Email: datarequest@datarep.com, with “Time + Energy (timeplusenergy.com)” in the subject line.
Online form: datarep.com/data-request.
Post: DataRep, 77 Camden Street Lower, Dublin, D02 XE80, Ireland (EU and EEA); or DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom (UK). DataRep also has an office in each EU and EEA country. Please address letters to “DataRep”, not to Time + Energy, or they may not reach us.

You can always write to us directly at subscribe@timeplusenergy.com as well.

Connecting your Google Calendar (optional)

If you choose to connect your Google Calendar, you grant us only two permissions, and nothing more:

See and change events on your calendars — so your events appear in the app's Calendar tab and you can add, move, reschedule or delete your own events from inside the app.
See the list of your calendars (read-only) — so you can choose which calendar to show.

We ask for the narrowest permissions that make the feature work. We never request your email, your files, your contacts, or anyone else's calendar.

What we access: the names of your calendars, and the events on the calendar you choose — their titles, times, locations, descriptions and guests.

How we use it: only to show your events in the app and to make the changes you ask for. We never use Google Calendar data for advertising, and we never use it to train any AI or machine-learning model.

Who we share it with: no one. Your Google Calendar data is not sold and not shared with any third party, and it is not sent to our in-app assistant.

How we protect it: the connection uses Google's secure sign-in (OAuth). We store only your long-lived connection token — never your password — in a private store on our server, encrypted at rest, tied to your account by a signed token so no one else can attach to it. It is used only by our server to fetch your events on your behalf.

How long we keep it, and deletion: we do not keep a lasting copy of your events — we read them from Google when you open the Calendar and hold them for about ten minutes so we are not calling Google on every refresh. Your connection token is kept only while you stay connected. You can disconnect in the app, revoke access in your Google Account settings, or delete your whole account from the Menu — any of these removes our access and deletes the stored token immediately.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Who can see your record

Only you and the people you invite into your household, with one exception: the small public profile that appears on The League, described next. Every request to the app is checked against your login and your household before anything is returned. Our staff access the database only to operate it and to help with a support request you have made.

The League

Time + Energy has a members' leaderboard called The League, because it is a community of accountability. If you use the app, other members can see on it the name you set in your profile, your profile picture, your badges, your household's name, your all-time points, your points this week, your average grade and your current grade, your subscriber points, your hours tracked (in total and this week), and when you were last active. They cannot see what you track, your notes, your health or finance information, or anything else about your household. You can change the name shown at any time from Customise Profile.

How we protect your data

We treat everything you enter as private by default, and protect it with the following measures — the same measures apply to sensitive information such as health, exercise and menstrual-cycle figures:

Encrypted in transit. Every connection between your device and our servers uses HTTPS (TLS), so your data is encrypted while it travels across the internet.
Encrypted at rest. The database that holds your record encrypts it at rest, and it is hosted in the European Union (Frankfurt).
Isolated to your household. Your record is separated from every other household by database access controls (row-level security), and each request is verified against your login and your household before any data is returned. Only our server, using a private key that is never exposed to the browser, can reach the database.
Passwords we cannot read. Your password is stored by our authentication provider as a one-way hash; we never see it. Staying signed in uses a short-lived session token rather than your password.
Sensitive information handled with extra care. Some of what you may choose to track — for example health, exercise and menstrual-cycle figures — is sensitive. It is protected exactly as above, used only to show it back to you and the household you share it with, and never used to build a profile of you, never sold, and never used for advertising.
Never used to train AI. We do not use your data — sensitive or otherwise — to train any artificial-intelligence or machine-learning model.
Limited, logged staff access. Our staff reach the database only to operate the service or to help with a support request you have made, and standard server logs record access for reliability and security.

How long we keep it

Your record stays while you hold an account, including after a cancellation, so that resubscribing brings your history back. When you delete your account, your login and (if you were its last member) your household record are removed within 30 days; backups roll off within a further 30 days. Payment records are kept by us and by the payment provider for as long as accounting law requires (around seven years for accounting data).

Your rights

Export: the app can export your household's record as a file at any time.
Delete: "Delete my account" in the app's profile menu removes your login and, if you were its last member, your household's record. Or email subscribe@timeplusenergy.com and we do it for you.
Access and correction: everything you have entered is editable in the app; for anything else, email us.

If you are in the UK or EU you also have the right to complain to your data protection authority.

California residents

This section adds detail for California residents under the California Consumer Privacy Act (CCPA), as amended by the CPRA. Everything above applies to you too; this restates it in the law's terms.

What we collect. In the law's categories we collect identifiers and customer records (your name, email address and phone number, your account login, and your payment status), internet or network activity (a session token that keeps you signed in and the standard server logs any web host keeps), and the information you choose to enter in the app (the time, energy, body, mind and money figures you track, your household's names and colours, and any notes you write). Some of what you enter — for example health-related figures — is treated as sensitive personal information. We collect these for the purposes set out in "What we collect" and "Why we use it" above, and from you directly (plus payment details from our payment provider).
We do not sell or share it. We have not sold, and have not "shared" for cross-context behavioural advertising, any personal information in the past twelve months, and we do not do so. Because we do not sell or share, there is nothing to opt out of.
We limit sensitive information. We use anything you enter, including sensitive information, only to provide the app to you and your household — never to infer characteristics about you, and never for advertising.
Your rights. You may ask us to tell you what we hold and why (the right to know), to delete it, and to correct it. The app's own Export, Delete and edit-in-place tools (see "Your rights" above) give you each of these directly; for anything else, email subscribe@timeplusenergy.com. You may use an authorised agent, and we confirm a request comes from the account holder before acting on it.
No discrimination. We will never charge you a different price or give you a lesser service for exercising any of these rights, and we offer no financial incentive in exchange for your data.

To exercise any right, use the app's Export or Delete tools or email subscribe@timeplusenergy.com; we respond within the timeframes the law requires.

Changes

If this policy changes in a way that matters, we email subscribers before it takes effect. The date at the top is the current version.