Privacy Policy
Last updated: October 2, 2026
1. Who we are
Stunda is a time tracking, invoicing and reporting service made up of a desktop app (macOS and Windows), a web app at app.stunda.io, and this website. It is operated by Abdul Waris, an individual sole proprietor based in Pakistan, trading as Insetix ("Stunda", "we", "us").
Privacy contact: help@stunda.io.
For your own account, we are the controller of your personal data. When a business uses a Team workspace to track its people, that business is the controller of its members' data and we act as its processor. See section 5.
2. What we collect
Your account
- Name, email address, username and, if you add one, a profile picture.
- A password, stored only as a bcrypt hash. If you sign in with Google or GitHub instead, we receive your name, email address and profile picture from that provider. If you sign in with an emailed link or code, we store only a hash of it, and it expires after 15 minutes.
- Your settings, such as time zone, idle threshold, notification choices and AI preferences.
- The version of these terms you accepted and when.
- Security records: sign-in times and an audit log of account and workspace actions, which can include the IP address and browser type used.
The desktop app, while a timer is running
The desktop app records activity only while you have a timer running. It collects:
- Input counts: how many keystrokes, mouse clicks, mouse movements and scrolls happened in each period. Never which keys you pressed or what you typed.
- Active and idle time, based on whether there was input.
- The app in front: the name of the application you are using.
- Window titles and browser addresses (macOS): if you grant macOS Accessibility permission, the title of the front window and, in a web browser, the address of the active tab. We remove the query string and fragment from addresses before they leave your computer (so
https://example.com/report?token=abcis stored ashttps://example.com/report). Window titles can contain document names, email subjects or page titles. On Windows, the app records application names only. - Activity integrity signals: timing patterns and whether input came from a physical device or from software. These are used to flag activity that looks machine-generated (for example, a mouse jiggler). A flag marks the time for review; it does not delete it.
- Device details: your computer's name, its operating system, and an identifier derived from a one-way hash of the machine's hardware ID. We use this to allow one tracking device at a time per account.
The app keeps a local copy of this data on your computer so it works offline, and syncs it to our servers. If the untracked-work reminder is on, the app also notices whether there is input while no timer is running so it can remind you to start one. That check happens on your computer and is not uploaded.
Screenshots (off unless someone turns them on)
- Screenshots are off by default and are available on paid plans only.
- They can be turned on by you, or, in a Team workspace, by a workspace owner or admin for the whole workspace or for individual members. On macOS they also need the Screen Recording permission, which only you can grant on your computer.
- When on, the app captures your full screen (all displays) at the interval the workspace sets, while a timer is running. Screenshots are not blurred. The desktop app shows your latest capture so you can see what was taken.
- Screenshots are uploaded to our file storage. The copy on your computer is deleted 24 hours after a successful upload.
- Workspace owners and admins can see their members' screenshots, and can include them in a report link shared with a client. When that happens, the member gets a record of it.
Your work data
- Time entries, sessions, descriptions, tasks, projects, goals and notes.
- Clients and their contact details that you enter, such as names, email addresses and postal addresses.
- Bill rates, cost rates, invoices, approvals and pay run calculations.
- Report links you share. When someone opens a shared report link, we log the visit with a hashed (not raw) IP address and the browser type.
Billing
Paid plans are sold by Polar, our merchant of record. Polar collects your payment details, billing address and tax information directly. We never see your full card number. We receive from Polar your customer and subscription identifiers, plan, billing period, seat count, subscription status and the billing email address.
AI features
When you use an AI feature, we send a limited summary of your data to our AI provider. What is and is not sent is described in section 6.
API tokens and connected AI clients
If you create a personal API token (for example, to connect Stunda to an AI client through our MCP server), we store only a hash of the token. The tool you connect receives whatever data you ask it for, and that tool's own provider handles it under its own terms and privacy policy.
Emails and notifications
We send account emails (sign-in links, verification, password resets), workspace invitations, invoices you choose to send to your clients, and notifications you can switch off. If you enable browser push notifications, we store the push subscription your browser gives us and your browser type, and messages are delivered through your browser maker's push service.
Product analytics in the web app (only with consent)
If you agree in the web app's cookie notice, we use PostHog to record specific product events we have chosen (for example, "project created"), linked to your account ID, email address and name. We have switched off automatic click capture, session recording, heatmaps and automatic page-view tracking. If you decline, these events are not recorded.
This website (stunda.io)
- If you accept the cookie banner, we load Google Tag Manager and Google Analytics to measure visits. If you decline or ignore the banner, neither loads and no Google cookie is set.
- The contact form sends your name, email address, subject and message to our support inbox by email. It is not stored in our app database.
- The free tools on this site run in your browser. What you type into them is not sent to us. The currency converter asks our API for exchange rates, which sends only the currency you picked.
- Like any website, our hosting provider receives your IP address and browser details when you load a page.
Support
When you email us, we keep the conversation, your email address and anything you choose to send us.
3. What we never collect
- The content of your keystrokes (what you type) or your clipboard.
- Webcam, microphone or audio.
- Video recordings of your screen.
- The contents of your files or documents.
- Your browsing when no timer is running.
- Your full payment card number (Polar handles payment).
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
4. Why we use it and our legal bases
Where the GDPR or UK GDPR applies, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Running your account, tracking time, syncing devices, reports, invoices and team features | Performance of our contract with you |
| AI features you use | Performance of our contract with you. You can switch AI features off in settings. |
| Billing and keeping records of purchases | Contract, and our legal obligations |
| Account emails and notifications | Contract. Optional notifications can be switched off or unsubscribed from. |
| Security, preventing abuse, audit logs, activity integrity checks, one device at a time | Our legitimate interest in keeping the service and its records trustworthy |
| Answering support and contact requests | Legitimate interest in responding to you, or contract where you are a customer |
| Product analytics (PostHog) and website analytics (Google) | Your consent, which you can withdraw at any time |
| Complying with law and enforcing our terms | Legal obligation and legitimate interests |
In a Team workspace, the workspace customer decides why its members are tracked and must have its own legal basis for doing so (see the next section).
5. Team workspaces and employers
When an organization (for example, an employer or agency) invites people into its workspace, that organization is the controller of the data collected about those people, and Stunda is its processor. We process that data only on the organization's instructions, under our Data Processing Addendum.
Workspace owners and admins can see members' tracked time, activity, application and window details, and, if enabled, screenshots, depending on the roles and permissions they set.
If you are tracked by your employer or a client, please contact them first about your data: they decide what is collected and how long it is kept. If you contact us, we will pass your request to them and help them answer it.
6. AI features
Stunda's AI features include the daily digest, questions in plain language, the in-app assistant, workload signals, category and project suggestions, and the summary text in proof-of-work reports. They are on by default and you can switch them off in your settings. On the Free plan, you get a small number of AI requests a day.
What we send to the AI provider
- What you type into the assistant or a question box.
- Summaries of your time: totals, durations, project, client and task names, time entry descriptions, top applications, and website hosts used for project suggestions.
- Up to five of your most frequent window titles, shortened to 120 characters, unless you turn off "include window titles" in your AI settings. Turning that off also deletes what Stunda has learned from your window titles.
- For the assistant, the results of lookups it makes for you, limited to what your role can already see in the app, such as invoice or pay run figures and team member names.
What we never send
- Screenshots, keystroke or click counts, or anything you typed outside Stunda.
- Email addresses, phone numbers or postal addresses of clients or members.
- Full browser addresses.
The provider
Our AI provider is currently OpenAI, which processes this data in the United States. Under OpenAI's API terms, data sent through its API is not used to train its models. OpenAI may keep API data for a limited period to monitor for abuse. If we change providers, we will update our subprocessor list first.
AI output can be wrong. Check summaries, suggestions and figures before relying on them, especially before billing a client or paying someone.
8. International transfers
Our database and API run in Singapore. Some of our providers process data in the United States, and Stunda is operated from Pakistan. This means your data may be processed outside your country, including outside the EU, UK and EEA.
Where data protection law requires it, we protect these transfers with the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum for UK data), or rely on an adequacy decision or the provider's certification under the EU-U.S. Data Privacy Framework.
9. How long we keep data
- While your account exists, we keep your data so the service works. You can delete individual time entries, sessions and screenshots in the app at any time.
- When you delete your account (Settings, Account), your account and the records attached to it (sessions, activity, time entries, screenshot records, your projects and memberships) are deleted from our database immediately.
- Two things are not yet removed automatically. First, screenshot image files: deleting a screenshot or your account removes its record from the app, but the image file stays in our file storage. Second, workspaces you own, along with their shared data such as clients and invoices, are not deleted with your account. Email help@stunda.io and we will delete them within 30 days.
- Backups: our database provider keeps a short, rolling restore history for recovery. Deleted data ages out of it automatically.
- On your computer: screenshot copies are deleted 24 hours after upload. The app's local database stays on your computer until you remove the app and its data.
- Team workspaces: the workspace customer decides how long members' data is kept, and can delete it.
- Billing records are kept by Polar, and by us where tax or accounting law requires.
- Support emails are kept as long as needed to help you and keep a record of the conversation.
- Analytics data is kept according to the retention settings in PostHog and Google Analytics.
Downgrading or cancelling a paid plan does not delete your data. Your account moves to the Free plan.
10. Security
- All connections to Stunda use TLS (HTTPS).
- Our database and file storage providers encrypt data at rest.
- Passwords are hashed with bcrypt. Sign-in links, sign-in codes and API tokens are stored only as hashes.
- Sign-in uses short-lived access tokens with rotating refresh tokens.
- Workspaces use role-based permissions, and sensitive actions are recorded in an audit log.
- Requests are rate limited to slow down guessing and abuse.
- We access your account or data only when needed to support you at your request, keep the service secure, or comply with the law.
- Screenshot images are stored at addresses that contain long random identifiers. Anyone who has the exact address of an image can open it, so do not share those addresses.
No system is perfectly secure. If we learn of a breach that affects your personal data, we will tell you and the relevant authorities as the law requires.
11. Your rights
Everyone
- Correct your details in Settings at any time.
- Delete your account in Settings, Account.
- Export your time entries as CSV (paid plans) and your invoices as PDF. On any plan, you can ask us for a copy of your data and we will send it in a common, machine-readable format.
- Switch off AI features, window titles in AI, optional notifications and analytics.
EU, EEA and UK
You have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time without affecting earlier processing. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).
California
You have the right to know what personal information we collect, use and disclose, to access it, to correct it, to delete it, and to opt out of its sale or sharing (we do neither). We use sensitive personal information, such as account sign-in details, only to provide the service. We will not discriminate against you for using these rights. You can use an authorized agent, and we may ask them for proof of authority.
In the last 12 months we collected these categories: identifiers (name, email, IP address, device ID), commercial information (plan and purchases), internet or other electronic activity (app usage, window titles, browser addresses, product events), professional information (work records, rates, invoices), and inferences (AI summaries and suggestions). We collect them from you, your device and your workspace, for the purposes in section 4, and disclose them only to the recipients in section 7.
How to make a request
Email help@stunda.io from the address on your account. We may need to confirm your identity. We answer within one month (45 days for California requests), and will tell you if we need more time. If your data belongs to a Team workspace, we may refer you to the workspace customer, who controls it.
13. Children
Stunda is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email help@stunda.io and we will delete it.
14. Contacting us from the EU or UK
If you are in the EU or the UK, contact us directly about data protection at help@stunda.io. You also have the right to complain to the data protection authority where you live or work.
15. Changes to this policy
We will update this page and its "Last updated" date when our practices change. For material changes, we will tell you by email or in the app before they take effect, and ask you to accept the updated terms in the app before you continue using it.
16. Contact
Privacy questions and requests: help@stunda.io. General support: help@stunda.io or our contact form.