Your work data, handled carefully.

Who we are

Chronologue is provided by Kaizen Brands LLC (“we”).

Organizations use Chronologue to track work time. When an organization (usually an employer) sets up a Chronologue workspace and invites people to it, the organization decides what is collected about those people and why. For that data, the organization is the controller and we process it on its behalf. For account, billing, and website data, we are the controller.

If your employer tracks you and you have questions about why your data is collected or who in your organization sees it, start with your employer.

What the desktop app collects

The Chronologue desktop app runs on your computer only while you are signed in to a workspace. It records:

• Apps and sites: the name of the app in front, the window title, and for browsers the page address (URL) and domain, minute by minute.
• Activity level: how many keyboard and mouse events happen each minute. It never records which keys you press, what you type, or what you copy.
• Idle and lock time: when the computer is idle, asleep, or locked.
• Device details: the device name, operating system, app version, and time zone, so time is shown in your local day.
• Screenshots, only if your workspace turns them on: a picture of each connected display at a random moment within an interval your workspace owner sets (every 1 to 30 minutes). If the owner turns on blur, the picture is blurred on your computer before it is uploaded, and the unblurred version never leaves your device. No screenshots are taken while you are idle or your screen is locked.

The desktop app does not record keystroke content, clipboard contents, audio, your camera, or your location, and it does not read the text inside screenshots. It shows in the menu bar while it runs, and you can see your own timeline and screenshots in the web app.

What else we collect

• Account details: your name, email address, and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Workspace details: your workspace, teams, role, manager, and time-zone history, plus any ratings, corrections, notes, and settings you or your workspace add.
• API tokens: tokens you create for the command-line tool, AI agents, or integrations. We store only a hash of each token.
• Audit records: a log of sensitive actions, such as deleting screenshots or a day, changing roles, and refused API calls.
• Billing details: on paid plans, our payment processor Stripe collects your card. We receive only your subscription status, plan, seat count, and billing address.
• Technical data: IP address, browser type, and error reports, used to keep the service secure and working and to limit repeated sign-in attempts.

Why we use it

• To show timelines, reports, timesheets, and screenshots to the people your workspace allows to see them.
• To rate apps and sites as productive or not, and to write AI daily summaries and answer questions about work time.
• To send sign-in links and service emails.
• To secure the service, prevent abuse, fix problems, and give support.
• To bill paid workspaces.

We do not sell personal information, and we do not use workspace data for advertising.

How AI is used

Chronologue uses Anthropic’s Claude models to rate apps and sites, write daily summaries, and answer questions. For each request:

• The model always receives app names, sites, ratings, durations, and activity levels.
• Window titles and full page addresses are sent only if your workspace turns on that setting.
• Screenshot images are never sent to the AI. Answers can link to a screenshot, but the model does not see the image. If we add image analysis later, it will stay off unless your workspace turns it on, and we will update this policy first.

Every AI answer links to the timeline entries or screenshots it is based on, so you can check it. Under Anthropic’s commercial terms, Anthropic does not use this data to train its models, and we do not train AI models on your data either.

Who can see it

• You can see your own timeline, screenshots, ratings, and summaries.
• Your workspace’s owners, admins, and managers can see what their role allows, usually the people they manage.
• Tools you connect with an API token, such as the command-line tool or an AI agent, act with your permissions and can see only what you can.
• Our staff access workspace data only to give support you ask for, to keep the service secure, or when the law requires it.

Who processes it

These service providers run parts of Chronologue for us. Each handles data only to provide its service:

• Convex: database and backend (United States)
• Vercel: website and app hosting (United States)
• Cloudflare: screenshot storage, email forwarding, and DNS
• Anthropic: AI ratings, summaries, and answers (United States)
• Resend: email delivery (United States)
• Sentry: error monitoring (United States)
• Google: sign-in, if you choose “Sign in with Google”, and website measurement through Google Tag Manager
• Stripe: payments on paid plans (United States)

How long we keep it

• Screenshots: deleted after 90 days at most. A workspace can choose a shorter period.
• Activity and timesheets: kept while the workspace is active, and deleted 30 days after the workspace is cancelled. Workspace owners can export a person’s or the whole workspace’s data before then.
• Deleting earlier: owners and admins can delete a single screenshot or a whole day for a person. A deleted day cannot be recovered, except that a day already in a paid pay period keeps its payroll line.
• AI answers in progress: deleted 15 minutes after the question.
• Account details: kept while your account exists.

Security

Data is encrypted in transit and at rest. Access inside a workspace follows roles, sensitive actions are logged, and API tokens and passwords are stored only as hashes. Screenshots are viewed only through links that expire within five minutes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to how it is used. This includes rights under the GDPR, the UK GDPR, the Australian Privacy Act, the Philippine Data Privacy Act, and US state privacy laws.

If your data is in an employer’s workspace, send your request to your employer, and we will help them answer it. For account or billing data, contact us directly.

Cookies and analytics

We use cookies to keep you signed in and to protect the service. To understand how people find Chronologue, we measure visits to our public pages (the home, features, pricing, comparison and download pages, these legal pages, and the sign-in pages) with Plausible, which uses no cookies, and with Google Tag Manager, which can load Google measurement and ad-conversion tags that use cookies. Signed-in pages and evidence links are not measured, identifiers are removed from page addresses before they are sent, and no workspace data is shared with these tools.

International transfers

Our service providers are mainly in the United States, so your data may be processed outside your country. We rely on our providers’ contractual safeguards for these transfers.

Children

Chronologue is for working adults and is not for anyone under 16.

Changes and contact

We will post any changes here and tell workspace owners about significant ones.

For any privacy question or request, email privacy@chronologue.co.