Privacy Policy

TIMEIN, Inc. ("TIMEIN", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not access or use the Services.

We collect several types of information from and about users of our Services: Personal Information - Account Data: When you create an account, we collect your name, email address, username, profile photo, date of birth, gender (if you choose to provide it), and any other information you choose to provide. - Phone Number: If you turn on two-factor authentication by text message, we collect your mobile number and send verification codes to it through our SMS provider, Twilio. - Profile Information: Your bio, fitness goals, workout preferences, location, and other profile details you share. Fitness and Health Data - Workout Logs: Exercise types, sets, reps, weights, duration, calories burned, and performance metrics. - Body Metrics: Weight, body fat percentage, measurements, and other body composition data you choose to track. - Activity Data: Steps, heart rate, heart rate variability, sleep, weight, body fat, and other metrics imported from Apple Health or connected devices (only with your explicit permission). Apple Health data is used to show your stats in the app. It is never sent to our AI providers and never used for advertising. Location Data - Precise Location: With your permission, we use your device's precise GPS location to track runs, walks, and rides, show nearby people, gyms, and events, and tag posts. - Background Location: If you allow it, we keep recording your route while a tracked workout is running and the app is in the background or the screen is locked. You can turn this off at any time in your iOS Settings. Audio and Media - Voice Notes: Voice messages you record and send in chats. - Live Audio and Video: When you go live or join a live stream or call, your audio and video are carried in real time through our streaming provider, Agora. - Photos and Videos: Content you upload, including food photos you scan for nutrition logging. Usage Data - Device Information: Device type, operating system, unique device identifiers, IP address, and mobile network information. - App Activity: Features used, screens visited, time spent, interactions, and crash reports, including through Google Analytics. - Search History: Your recent searches are saved only on your device so you can repeat them. They are not stored on our servers. - Social Interactions: Posts, comments, likes, shares, follows, messages, and other social activity within the app. Communication Data - Messages: Direct messages and group conversations with other users. - Support Inquiries: Information you provide when contacting our support team.

We use the information we collect for the following purposes: - To provide, maintain, and improve the Services, including personalized workout recommendations and fitness insights. - To process and complete transactions, including subscriptions and in-app purchases. - To send you technical notices, updates, security alerts, and support messages. - To respond to your comments, questions, and customer service requests. - To communicate about products, services, offers, promotions, and events, and provide other news or information about TIMEIN (you may opt out of marketing communications at any time). - To monitor and analyze trends, usage, and activities in connection with the Services. - To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities, and protect the rights and property of TIMEIN and others. - To personalize and improve the Services, and provide content and features that match your interests and preferences. - To facilitate social features, including leaderboards, friend connections, workout sharing, and community challenges. - To comply with legal obligations and enforce our Terms of Service.

We may share your information in the following circumstances: With Other Users - Your profile information (name, username, profile photo, bio) is visible to other users based on your privacy settings. - Workout posts, stories, reels, and other content you choose to share are visible according to your audience selection. - Leaderboard rankings display your username and relevant stats. With Service Providers - We share information with third-party vendors, consultants, and service providers who perform services on our behalf, including hosting, analytics, customer support, and payment processing. With AI Providers - TIMEIN's AI features (the AI trainer and food photo scanning) are powered by Anthropic and OpenAI. When you use them, we send what's needed to answer you: your chat messages with the AI trainer, the workout, nutrition, and body data you've logged in TIMEIN, and the food photos you scan. - We do NOT send Apple Health data (such as heart rate, HRV, sleep, or weight and body fat imported from Apple Health) to these providers. - These providers process the data to give you a response and are not allowed to use it for advertising. With Business Partners - If you connect third-party services (such as Apple Health), we share data as necessary to enable the integration. Legal and Safety Reasons - We may disclose information if required by law, regulation, or legal process, or to protect the safety, rights, or property of TIMEIN, our users, or the public. Business Transfers - In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We do NOT sell your personal information to third parties for their direct marketing purposes.

We retain your personal information for as long as your account is active or as needed to provide you with the Services. We will also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. After you delete your account: - Your profile and public content will be removed immediately. - Your messages may remain visible to recipients who already received them. - We may retain aggregated and anonymized data derived from your account that cannot be used to identify you. - Backup copies may persist for up to 90 days in our disaster recovery systems. You can request full deletion of your data by contacting [email protected].

You have control over your information in the following ways: Account Settings - Update or correct your profile information at any time through the Settings page. - Control who can see your profile, activity status, and stories through Privacy settings. - Manage notification preferences (push, email, workout reminders) through Notification settings. Data Access and Portability - You can request a copy of your personal data by contacting [email protected]. We will provide your data in a structured, commonly used format within 30 days. Apple Health Data - Health data imported from Apple Health is used only to show your stats in TIMEIN and may be synced to your account so it appears on your other devices. You can revoke Health access at any time through your iOS Settings app. - Health data is never shared with other users, never sent to our AI providers, never used for advertising, and never shared with other third parties without your explicit consent. Communications - You can opt out of promotional emails by using the unsubscribe link in any marketing email. - You can disable push notifications through your device settings. - Essential service communications (account verification, security alerts, terms updates) cannot be opted out of. Blocking and Reporting - You can block other users at any time. Blocked users cannot see your profile, posts, or send you messages. - You can report inappropriate content or behavior through the three-dot menu on any post or profile, and report or block a live stream host or anyone in a live chat.

The Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete that information as quickly as possible. If you believe we might have any information from or about a child under 13, please contact us immediately at [email protected].

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: - Encryption of data in transit using TLS/SSL protocols. - Encryption of sensitive data at rest. - Regular security assessments and penetration testing. - Access controls and authentication requirements for our systems. - Employee training on data privacy and security practices. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the secrecy of your account credentials.

TIMEIN is based in the United States, and your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Services, you consent to the transfer of your information to countries outside your country of residence. We will take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy and applicable law.

The Services may contain links to third-party websites, apps, or services that are not owned or controlled by TIMEIN. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you interact with through our platform. We are not responsible for the privacy practices or content of third-party services. Our app may integrate with: - Apple HealthKit: Data is accessed only with your permission and is subject to Apple's privacy policies. - Payment processors: Transaction data is handled by the app store (Apple App Store / Google Play) and our payment processing partners. - Anthropic and OpenAI: Power our AI trainer and food photo scanning (see "With AI Providers" above). - Twilio: Sends text-message verification codes for two-factor authentication. - Agora: Carries live stream and call audio and video in real time. - Google Analytics: Helps us understand how the app is used.

Our mobile application does not use traditional browser cookies. However, we may use similar technologies and identifiers, such as: - Local Storage: Used to store your preferences, settings, and app state on your device for a better experience. - Session Identifiers: Used to maintain your login session and authenticate API requests. - Analytics SDKs: We use Google Analytics to understand how users interact with the app and improve the experience. It may collect device information and usage patterns. You can clear local storage and reset identifiers through your device settings or by reinstalling the application. We do not currently respond to "Do Not Track" signals, as there is no consistent industry standard for such signals in mobile applications.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including: - The right to know what personal information we collect, use, disclose, and sell (we do not sell personal information). - The right to request deletion of your personal information. - The right to opt out of the sale of your personal information (again, we don't sell it). - The right to non-discrimination for exercising your privacy rights. To exercise your California privacy rights, contact us at [email protected] with the subject line "CCPA Request." We will verify your identity before processing your request, which may require you to provide information matching what we have on file.

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR): - Right of Access: Request a copy of your personal data. - Right to Rectification: Correct inaccurate or incomplete data. - Right to Erasure: Request deletion of your personal data. - Right to Restrict Processing: Limit how we use your data in certain circumstances. - Right to Data Portability: Receive your data in a structured, machine-readable format. - Right to Object: Object to processing based on legitimate interests or for direct marketing. - Rights Related to Automated Decision-Making: We do not currently use automated decision-making that has legal or similarly significant effects on you. To exercise your GDPR rights, contact us at [email protected]. We may ask for proof of identity before processing your request. You also have the right to lodge a complaint with your local data protection supervisory authority.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will: - Post the updated Privacy Policy in the app and on our website. - Update the "Last Updated" date at the top of this page. - Notify you through the app or via email for material changes. Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: TIMEIN, Inc. Email: [email protected] We aim to respond to all inquiries within 48 hours. For urgent privacy concerns, please include "URGENT" in your email subject line. Last Updated: November 2, 2026