Privacy Policy

This privacy policy covers how timegram, 7901 4th Street N STE, 4951, St. Petersburg, FL, 33702 ("Provider"), collects and treats information about its users. timegram is the data controller for the processing of personal data of its private users (i.e natural persons). timegram acts as data processor on behalf of its corporate customers (i.e. legal persons) for the processing of personal data of their users. Users may contact timegram at any time regarding the processing of personal data at nightwatch@timegram.io.

1. General

1. This privacy policy covers how timegram, [address] ("Provider"), collects and treats information about its users. timegram is the data controller for the processing of personal data of its users. Users may contact timegram at any time regarding the processing of personal data at nightwatch@timegram.io.
‍
2. Anyone who downloads, saves, installs, uses, accesses, attempts to use or access any of timegram's applications, or connects/integrates another service with timegram shall by so doing be deemed to have agreed to the terms of this privacy policy and such collection, use and other processing of data as set forth below.
‍
3. All capitalized terms used and not otherwise defined herein have the meanings ascribed to them in timegram's terms of service (available at [terms of service link], hereinafter "Terms of Service").
‍
4. Nothing herein is intended to limit user’s statutory data processing rights.

2. Legal Basis For timegram's Processing Of Personal Data

1. timegram only processes personal data necessary for the performance of timegram’s contractual obligations to the user according to the Terms of Service, or in order to take steps at the request of the user prior to entering into the Terms of Service.

2. timegram does not intend to process special categories of personal data, such as data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.

3. timegram will only process special categories of personal data as specified above at the request of the User (“Data Subject”), i.e. when the user submits such data to timegram at their own will. For example, users may choose to connect their timegram account to fitness apps or to keep track of doctor’s appointments. timegram will only process such special categories of personal data following the informed, expressly and freely given consent of the Data Subject.

4. timegram may anonymize and aggregate data for the purpose of machine learning and statistics in order to improve the Service.

3. How Personal Data Is Collected Through Use Of timegram

timegram may collect information (including personal data) about Data Subjects:

1. during the conclusion and modification of the agreements it concludes with Data Subjects (the information collected may include the data provided in such agreements, such as the Data Subject’s contact information, or for the purposes of negotiating, concluding or amending same);

2. when a Data Subject fills in forms via the Service, opens a User Account, subscribes to, or unsubscribes from, a Service Plan, creates or modifies a user profile, or enters or modifies other information associated with their User Account (the information thus provided by the Data Subject);

3. when a Data Subject downloads, installs, updates or uninstalls the Software, or accesses or uses the Service or any other service connected with timegram (the location (GPS), manner, means and duration of such activity as well as other information the Data Subject may provide); and

4. when otherwise knowingly made available to timegram (the information the Data Subject provides).

4. How Personal Data Is Collected Through Use of Third-Party Integrations

If you choose to use or connect to third-party integrations (e.g. Google Calendar, Trello etc.) through the Service, or if you are required or permitted to do so by a Customer, such third parties may allow us to have access to and store additional information about your interaction with those services as it relates to your use of the Service.
If you initiate these connections, you also understand that we will share information about you that is required to enable your use of the third-party integration through the Service. If you do not wish to have this information shared, do not initiate these connections.
By enabling these connections, you authorize us to connect and access the information provided through these connections, and you understand that the privacy policies of these third parties govern such connections. More information about each integration can be found on the respective support pages for timegram.

5. Purpose Of The Processing Of Personal Data

The Provider will process information as referenced in section 5 and 6 (collectively, "Data") for the purposes of
1. providing the Service
‍
2. improving or otherwise modifying the Service and notifying Data Subjects thereof,
‍
3. customizing the content and/or layout of the Service for the particular Data Subject,
‍
4. replying to the Data Subjects' communications and contacting them,
‍
5. performing Provider's obligations towards the Data Subject,

6. exercising and enforcing Provider's rights according to the Terms of Service,

6. Storage Period For Personal Data

timegram will keep personal data for as long as necessary to fulfill their contractual obligations towards the Data Subject, as specified in the Terms of Service. Personal data will be deleted or anonymized as soon as possible after the termination of the Data Subject’s account unless it must be stored in order for timegram to fulfill obligations in statutory law.

7. Where Personal Data Is Processed

1. The data controller is timegram, a company based in Florida, United States.
‍
2. timegram may use sub-suppliers and transfer personal data to these sub-suppliers, including sub-suppliers in countries not considered to provide adequate protection for personal data. In such cases, timegram will only transfer personal data subject to appropriate safeguards provided by sub-suppliers, such as a legally binding and enforceable instrument between public authorities or bodies, or standard data protection clauses adopted by them. A copy of such safeguards may be obtained by contacting timegram at 7901 4th Street N STE, 4951, St. Petersburg, FL, 33702 .

8. Transfer Of Personal Data To Others

1. timegram will not transfer or provide access to Data Subject’s personal data to any third party except when, to the extent, and to persons; With the Data Subject’s consent, required by law, or necessary in order to perform timegram's obligations under the Agreement, or its statutory obligations, or to exercise its legal rights, or defend against claims or other process.

2. timegram represents that it has implemented and will continue to employ appropriate measures to ensure that Customer Details are processed securely and in compliance with the applicable law.

3. timegram has no obligation to monitor or access its customers' accounts, but may do so in cases where such action is reasonably justified (e.g., in order to prevent illegal or harmful activity, provide customer support, or perform its legal duties).

9. Data Subject's Rights

1. Access of rights: Upon the Data Subject’s request, timegram will grant the Data Subject access to, all Personal Data that timegram maintains about the Data Subject, unless such information is otherwise available to the Data Subject or Provider is legally prohibited from disclosing such records.

2. Right to rectification or erasure of personal data or restriction of processing.

3. If any Personal Data prove to be incorrect or misleading, the Data Subject is entitled to have the data rectified. Registered Data Subject’s can access and correct certain of their own Personal Data through the Service by visiting their personal profile page and account setting page.

4. Rights in connection with Disclosure.
‍
5. In all cases where timegram is allowed to disclose Personal Data to third parties, it will ensure that the person to whom disclosure is made grants the respective Data Subject the same as those set forth herein with respect to the processing of such Customer Details (including the right to be informed about the data maintained on the Data Subject and the right to correct or have corrected incorrect or misleading information).

6. Right to data portability.

7. The Data Subject has the right to receive the personal data concerning him or her, which he or she has provided to timegram, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from timegram.

8. Right to lodge a complaint with a supervisory authority.

9. The Data Subject has the right to lodge a complaint with a supervisory authority if the Data Subject considers that the processing of personal data relating to him or her infringes his or her rights.

10. Notification

1. If a Data Subject participates in timegram’s mailing or similar program, timegram may use their personal data to send them information about products, services, promotions, and events that timegram believes may be of interest to them. Any subscription to any such program may be canceled at will.

2. timegram may send registered Data Subjects certain important communications relating to the Service, such as (e.g.) service announcements and administrative messages, without offering Data Subjects the opportunity to opt out of receiving them.

3. timegram asks that all requests, enquiries, complaints, and other communications that Data Subject wishes to address to timegram with respect to this privacy policy or Data processing be submitted via the feedback feature of timegram’s website.

11. Jurisdiction

1. Any dispute that may arise between the Data Subject and timegram, or between an Data Subject and timegram in connection with this privacy policy or timegram’s data processing activities, shall be subject to the jurisdiction specified in the respective timegram’s Terms of Service.

12. Change Of Policy

1. timegram may amend or repeal this privacy policy at any time by posting a revised privacy policy or a new policy document in its place. If such revised or new policy includes a significant change to the way that Personal Data may be treated, timegram will notify registered users of the fact that its privacy policy has changed by sending users an email to the address associated with their User Account, and by posting a prominent notice on the Service.

2. timegram’s use and transfer to any other app of information received from Google Accounts will adhere to Google API Services User Data Policy, including the Limited Use requirements.

The Limited Use requirements have four elements:

1. Allowed Use: Developers are only allowed to use restricted scope data to provide or improve user-facing features that are prominent from the requesting app's user interface. It should be clear to your users why and how you use the restricted scope data they've chosen to share with you.

2. Allowed Transfer: Developers are only allowed to transfer restricted scope data to others if that transfer is (a) necessary to provide or improve user-facing features that are prominent from the requesting app's user interface, (b) to comply with applicable laws, or (c) a part of a merger, acquisition or sale of assets of the developer. All other transfers or sales of user data are completely prohibited.

3. Prohibited Advertising: Developers are never allowed to use or transfer restricted scope data to serve users advertisements. This includes personalized, re-targeted and interest-based advertising.

4. Prohibited Human Interaction: Developers cannot allow humans to read restricted scope user data. For example, a developer with access to a user's data is not allowed to have one of its employees read through a user's emails. There are four limited exceptions to this rule: (a) the developer obtains a user's consent to read specific messages (for example, for tech support), (b) it's necessary for security purposes (for example, investigating abuse), (c) to comply with applicable laws, and (d) the developer aggregates and anonymizes the data and only uses it for internal operations (for example, reporting aggregate statistics in an internal dashboard)