TimeTill Privacy Policy

01Who we are

TimeTill is a mobile app available on the Apple App Store, built and published by Andrii Kolisnyk, an independent developer based in Ukraine.

Under the EU and UK General Data Protection Regulation I am the data controller for the data described here — the person who decides what is collected and why, and the person you hold accountable for it. Questions go to kolisnyk7@gmail.com and reach me directly.

02What stays on your device

All of this is created by you, stored by the app on your device, and mirrored to your own iCloud if iCloud is on. None of it is sent to me:

Your events

WhyTitle, date, category, whether it counts down or up, repeat rule, reminder choices and pin state — the countdowns themselves.

Where it goesOn the device, and in your private iCloud database.

How each event looks

WhyColours, fonts, text colours, your own colour palettes, and a background photo if you chose one.

Where it goesOn the device, and in your private iCloud database.

Settings

WhyLanguage, appearance, sort order, time units, and the copy of your events the widgets and Apple Watch read from.

Where it goesOn the device, and on your paired Apple Watch.

There is no TimeTill account and no sign-in. The app never asks for your name, email address or phone number.

03Photos, Calendar and Reminders

A background photo is picked with the system photo picker, which runs outside the app: iOS hands TimeTill only the one image you choose. TimeTill never asks for access to your photo library.

Import from Calendar asks for access to your calendars and, separately, your reminders, only when you use it. TimeTill reads your upcoming events and dated reminders on the device to show you what can be imported, and saves only the ones you pick as countdowns. Your calendars and reminders are never uploaded by the import itself. You can withdraw either permission in Settings → Privacy & Security → Calendars or Reminders.

04iCloud sync

Your events and colour palettes are stored in your own private iCloud database through Apple’s CloudKit, so they appear on your other devices signed in to the same Apple Account. I have no access to that database and no copy of it. How Apple handles it is governed by the Apple Privacy Policy.

To stop syncing, open Settings → your name → iCloud and switch TimeTill off. Your events stay on the device.

05Usage analytics

TimeTill reports how the app is used, so I can see which parts work and which do not. This happens automatically; there is no switch for it inside the app at the moment. What is sent, and to whom:

Firebase Analytics (Google)

WhyThe standard events the Firebase SDK collects — first open, sessions, screens viewed, in-app purchases, app version, device model, iOS version and approximate country — plus one event of mine: which social network you said you heard about TimeTill from. Identified by a random app-instance ID, and may include the advertising identifier if you allow tracking.

Where it goesGoogle, United States. Google Privacy Policy.

Mixpanel

WhyA short list of events: onboarding steps finished, the paywall being shown, a purchase or skip during onboarding, your answer to the tracking prompt, the review prompt being shown (with how many events you have created), and legacy-Premium notices. The profile carries the device model, iOS version, the device name iOS reports (on current iOS, a generic name such as "iPhone") and the date. Identified by the identifier iOS gives the app (the IDFV). Automatic event collection is off.

Where it goesMixpanel, United States. Mixpanel Privacy Policy.

PostHog

WhyApp opens, screens viewed and two legacy-Premium events, under a random PostHog ID — and session recordings, described in the next section.

Where it goesPostHog, EU data centre. PostHog Privacy Policy.

Your IP address

WhyNot collected by the app, but carried by every network request. These services derive an approximate location from it in the ordinary way.

Where it goesEach of the services above.

None of these services receives an event’s title, date or photo as an analytics value. The exception is the screen recording below.

06Session recordings

TimeTill uses PostHog session replay, which records what happens on screen while the app is open — the screens, taps and scrolling, and the network requests the app makes — so I can see where people get stuck. It is on for every session.

07Crash reports

When the app crashes, or when iCloud sync fails, Firebase Crashlytics sends a report: the stack trace, the device model, iOS version, app version, free memory and disk space, the sync error, and a random installation ID. It contains no event content. See the Firebase privacy information.

08Advertising attribution

I advertise TimeTill on Meta (Facebook and Instagram). To learn which ads bring people to the app, TimeTill includes the Meta SDK. When you first open the app, iOS asks whether TimeTill may track you across apps and websites owned by other companies.

• Always sent to Meta: that the app was opened, the ad link the app was opened from (if any), a Meta anonymous ID, and the device and app version. The SDK’s automatic event logging is switched off.
• Only if you choose Allow: your device’s advertising identifier (IDFA), which lets Meta match the install to an ad you saw.
• Purchases are not logged by the app. RevenueCat (below) reports subscription events to Meta from its servers, linked to the Meta anonymous ID and, if you allowed tracking, the IDFA.

Choosing Ask App Not to Track, or switching TimeTill off later in Settings → Privacy & Security → Tracking, stops the advertising identifier being shared. See the Meta Privacy Policy. TimeTill shows no ads of its own.

09Purchases and Premium

I never see your payment details. Premium — monthly, annual or lifetime — is billed by Apple, which holds the card and issues refunds.

• Apple — takes the payment and confirms the transaction, under the Apple Privacy Policy.
• RevenueCat — decides whether Premium is active and keeps it working across your devices. It receives an anonymous app user ID, the transaction data Apple returns, your storefront country, and the device and app version. For attribution it also receives the Meta anonymous ID, the IDFV, the IDFA if you allowed tracking, and Apple’s privacy-preserving Apple Ads attribution token. See the RevenueCat Privacy Policy.

10What you send me

Where you heard about TimeTill

WhyThe answer you pick in onboarding, and any text you type with it, so I know which channels work.

Where it goesGoogle Cloud Firestore, with the time — no other identifier.

Feature requests

WhyThe title and description you write in Request a Feature, with the time. Everyone who opens that screen can read the list.

Where it goesGoogle Cloud Firestore.

Votes on feature requests

WhyWhen you vote, the IDFV is added to that request so a vote counts once.

Where it goesGoogle Cloud Firestore.

Email

WhyOnly what you choose to write to me.

Where it goesEmail.

11Notifications

Reminders are local notifications, scheduled on your device by iOS — not sent from a server. TimeTill sends reminders for your events, milestones on count-up timers and, if you are not a Premium user, a Friday-evening reminder when the discounted lifetime offer is about to end. Permission is asked for once and can be withdrawn in Settings → Notifications → TimeTill.

12Why we are allowed to do this

For readers in the EEA and the UK, the legal bases are:

• Your events, iCloud sync and reminders — performance of the contract between us (Article 6(1)(b)): they are the app you asked for.
• Calendar, Reminders, notifications and photos — your consent, given through the iOS permission prompt and withdrawn in Settings.
• Advertising identifier — your consent, given by choosing Allow in the tracking prompt and withdrawn in Settings.
• Usage analytics, session recordings, crash reports and the non-IDFA attribution data — my legitimate interest in keeping the app working, improving it and knowing which marketing pays for it (Article 6(1)(f)). You may object at any time by emailing me.
• Purchases — performance of the contract (Article 6(1)(b)).
• Feature requests, survey answers and email — your choice to send them, and my legitimate interest in answering.

13Sale and sharing of personal information

I do not sell personal information. Under California law, sending identifiers and app activity to Meta for ad measurement counts as "sharing" for cross-context behavioural advertising. You can opt out by choosing Ask App Not to Track, or in Settings → Privacy & Security → Tracking, or by emailing me.

14How long anything is kept

• Events and settings — on your device until you delete them or the app; in iCloud until you delete them, under Apple’s retention.
• Analytics and session recordings — by Google, Mixpanel and PostHog under my project’s retention settings, then deleted.
• Crash reports — by Firebase Crashlytics for 90 days.
• Feature requests, votes and survey answers — until I remove them.
• Purchase records — by Apple and RevenueCat, as long as needed to keep Premium restorable.
• Email — as long as needed to deal with what you wrote about.

15International transfers

PostHog stores data in the EU. Google, Mixpanel, Meta and RevenueCat may process data in the United States. Those transfers rely on the EU–US Data Privacy Framework where the company is certified, and on Standard Contractual Clauses otherwise.

16Security

Data on the device is protected by iOS file protection, encrypted at rest with a key tied to your passcode. iCloud data is encrypted in transit and at rest by Apple, and every connection to the services above uses TLS. No system is completely secure, and no service can honestly promise otherwise.

17Your rights

Depending on where you live, you have the right to access the data held about you, to have it corrected or deleted, to restrict or object to its processing, to withdraw a consent you gave, and to receive your data in a portable format. You also have the right to complain to your local data protection authority.

Privacy Choices explains what you can do yourself. To make a request of me, email kolisnyk7@gmail.com and I will answer within 30 days. Analytics and recordings are tied to device identifiers rather than to your name, so tell me you want them deleted and I will walk you through finding the right ones.

18Children’s privacy

TimeTill is not intended for children under 13, and I do not knowingly collect personal data from them. If you believe a child has used it, contact me at kolisnyk7@gmail.com.

19Changes to this policy

This policy is updated as the app changes. Updates are posted here with a new date at the top, and material changes — a new recipient, a new kind of data — are mentioned in the App Store release notes.

20Contact

Andrii Kolisnyk — independent iOS and macOS developer, Ukraine.

App support and privacy contact — kolisnyk7@gmail.com. Use it for anything about this document, a privacy request, a deletion request, or a problem with the app. I read and answer these myself; there is no support desk in between.

Freelance and hiring enquiries go somewhere else — kolisnyk9@gmail.com, or the contact panel on the portfolio. The two inboxes are deliberately separate, so app support is never sitting behind a pile of work enquiries.