1. who we are
These Hours is operated by NHAKA YEMHURI VENTURES LTD, a UK company (number 17428854), the controller responsible for your information. Questions about your data can be sent to support@thesehours.com.
2. information we collect
- Account details: your email address, display name and authentication information.
- Your hours: the activity title, start and end times, optional place label and people linked to an hour.
- Guest participation: a guest display name and the shared hour they choose to join.
- Technical information: limited device, browser, IP address, diagnostic, security and usage logs needed to run and protect the service.
- Messages: information you include when contacting support.
- Safety: private report reasons and details, the account and hour involved, report handling records and the accounts you block. These records help us review concerns and enforce your safety choices; they are not shown to the reported person.
- Email preferences: whether you choose getting-started tips and gentle reminders, your separate confirmation that you are 18 or older, when you made that choice, and records needed to avoid duplicate messages and honour unsubscribes. We do not ask for a birth date for this choice.
These Hours does not use background location tracking. A place can be added as an optional label when you choose.
Photos you choose are saved privately on your device, not uploaded to our servers. A photo is included in a share card only when you choose it. Exported copies are handled by the app or service you share them with. We do not measure your use of other apps or treat joined time as proof of physical presence.
If you sign in with Apple, we store an encrypted provider token server-side so we can revoke that sign-in when you delete your account. The encryption key is kept separately from the database. Google and Apple process sign-in information under their own policies.
The website uses an approximate country supplied by our hosting provider to choose a language. You can change it at any time. We save your language choice in a preference cookie for up to one year; we do not ask for your precise location.
3. how and why we use it
We use this information to create and secure accounts, run shared hours, display your record, provide support, diagnose faults, prevent abuse and meet legal obligations. Our legal bases under UK data protection law are performance of our contract with you, our legitimate interests in running a safe and reliable service, compliance with law and consent where we specifically ask for it.
4. who receives it
While an invitation is open, anyone with its link or QR code can see the host’s chosen nickname and activity title before joining. The place, other people’s names and timing details are not shown until they join. Locked, ended and invalid invitations hide those preview details from new visitors. Only share invitations with people you know.
People in the same shared hour can see the name you use in that hour. We use Supabase for database and authentication services and Vercel to host the website. These providers process information for us under their own security and data-processing commitments. We do not sell personal information, run behavioural advertising or give advertisers access to your hours.
We use Resend to deliver account emails and, only if you opt in and separately confirm you are 18 or older, a short sequence of getting-started tips and gentle reminders. For that optional sequence, we share your email address and the message stage with Resend, not your activity titles, places, notes, participants or durations. Resend also processes delivery and unsubscribe records.
Optional emails are not required to use These Hours. You can unsubscribe using the link in any of those emails, or ask support to stop them. Unsubscribing does not stop essential account emails such as sign-in and password-reset messages.
Safety reports are accessible only to authorised service operators. We use Resend for operational notifications to our support inbox containing a report reference and reason, not the report text, user names or account email addresses. These alerts do not subscribe you to emails.
If you choose “Help improve These Hours”, we use PostHog’s EU service to understand visits, getting started, completed hours, saved-record views and invitations. We send random identifiers, platform/app version and fixed event categories. We do not send your name, email, hour titles, locations, photos, invitation codes or advertising identifiers. We do not record your screen or automatically capture clicks. This optional processing relies on your consent and is separate from optional emails.
Usage sharing is off until you choose it. Change your choice in Profile in supported app versions or under Optional usage data on a guest invitation. Turning it off stops future collection for that account and removes unsent events once the choice reaches our server. Older app versions do not include this measurement. These choices never limit your hours or other free features.
5. international processing
Our service providers may process data outside the UK. Where required, we rely on recognised safeguards such as adequacy regulations or approved contractual protections.
6. how long we keep it
Account and hour information is generally kept while your account is active and for only as long afterwards as needed for deletion, security, legal or dispute purposes. Operational logs and backups expire according to our providers’ retention cycles. We review retention as the service develops.
Deleting your account removes blocks you made and reports you submitted. In reports submitted by other people, a deleted account is no longer linked by its account identifier; information they typed in the report is reviewed as part of handling the concern. Contact support if a report contains personal information that should be removed.
Optional analytics events are retained in PostHog for up to one year. Deleting your account also queues deletion of its associated analytics profile and events; provider processing is asynchronous. Local unsent events are cleared on sign-out or withdrawal. Contact support for access or deletion requests relating to optional analytics.
7. your rights
You can delete your account from Profile in the iOS app or on our account deletion page, after signing in and confirming. No email or phone call is required. Your account, nickname, optional-email records and typed details of hours you hosted are removed. Other participants may retain de-identified time records. Photos on other devices or copies you already exported cannot be remotely erased.
Depending on the circumstances, you may ask us to access, correct, delete, restrict or provide a portable copy of your information, or object to certain uses. You may withdraw consent where processing relies on it. Email support@thesehours.com to make a request. You can also complain to the UK Information Commissioner’s Office.
8. security
We use reasonable technical and organisational safeguards, including authenticated access and encrypted network connections. No online service can promise absolute security, so please use a secure email account and keep sign-in links private.
9. children
These Hours is not intended for children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and remove it where appropriate.
People aged 13–17 can use the core app without optional reminder emails. We do not enrol anyone in that sequence unless they separately confirm they are 18 or older and choose to receive it. This is a self-declaration, not identity or age verification.
10. changes
We may update this notice as the product changes. We will post the current version here and highlight material changes in the app where appropriate.