1. who we are
These Hours is operated by NHAKA YEMHURI VENTURES LTD, a UK company (number 17428854), the controller responsible for your information. Questions about your data can be sent to support@thesehours.com.
2. information we collect
- Account details: your email address, display name and authentication information.
- Your hours: the activity title, start and end times, optional place label and people linked to an hour.
- Guest participation: a guest display name and the shared hour they choose to join.
- Technical information: limited device, browser, IP address, diagnostic, security and usage logs needed to run and protect the service.
- Messages: information you include when contacting support.
- Safety: private report reasons and details, the account and hour involved, report handling records and the accounts you block. These records help us review concerns and enforce your safety choices; they are not shown to the reported person.
- Email preferences: whether you choose getting-started tips and gentle reminders, your separate confirmation that you are 18 or older, when you made that choice, and records needed to avoid duplicate messages and honour unsubscribes. We do not ask for a birth date for this choice.
These Hours does not use background location tracking. A place can be added as an optional label when you choose.
Well Spent stores projects, notes, goals, plans, schedules, timezones and the invitations or membership choices needed to share them. Projects and personal goals are private. Shared-goal members can see shared progress; people who join a plan can see its details. A shared goal counts overlapping recorded time once when at least two members participate. It does not prove physical presence.
For subscriptions, Apple or Google handles payment. We receive and verify product, transaction, renewal, expiry and refund information linked to your These Hours account so we can provide the right access. We do not receive your payment-card number or bank details. Purchase and notification records are used for account access, support, security and necessary financial records, not advertising tracking.
Shared memories are optional short notes stored with a completed hour, together with the author’s identity and timestamps. Only attendees who retain access to that hour can read them. Authors can edit or delete their own notes; hosts and authorised safety operators can remove them. Removed attendees and blocked or suspended accounts lose the relevant access. Notes are not included in public invitations, share cards, emails, analytics or advertising. Deleting an account removes its authored notes. If someone reports a note, a private copy is kept with the report for safety review; deleting the original note does not erase that report copy.
Photos you choose are saved privately on your device, not uploaded to our servers. A photo is included in a share card only when you choose it. Exported copies are handled by the app or service you share them with. Joined time is not proof of physical presence.
If you sign in with Apple, we store an encrypted provider token server-side so we can revoke that sign-in when you delete your account. The encryption key is kept separately from the database. Google and Apple process sign-in information under their own policies.
The website uses an approximate country supplied by our hosting provider to choose a language. You can change it at any time. We save your language choice in a preference cookie for up to one year; we do not ask for your precise location.
In supported app versions, phone-use measurement is optional and off by default. You must grant separate device permission and start measurement during an hour; earlier time is excluded. Android processes local app-usage events to estimate time away from other apps, excluding These Hours. iOS processes activity milestones for apps you select, which may include associated websites or other-device activity; it does not provide a whole-phone percentage. Missing or delayed events can affect results. Neither method measures attention or physical presence.
Phone-use results and iOS app selections stay on your device. They are not sent to us, hosts, friends, analytics providers or advertisers. We do not store raw app identities from Android usage events. Local results are limited to the most recent 200 measurements and excluded from device backup. Turning measurement off, signing out or changing accounts deletes local results and selections. You can separately revoke system permission in device Settings. This feature is separate from optional analytics and is never required to record hours.
3. how and why we use it
Free badges are optional and private. We store categories you choose for your own hours, your badge visibility choice and the timezone for each monthly period. Together stores a private account link only after a request and mutual agreement; only new overlapping recorded time counts. Each person can remove the agreement, which removes its badge and progress for both without deleting recorded hours. Blocking or account deletion also removes the link. Correcting a category or removing qualifying records recalculates awards. Badge data is not added to public invitations, share cards, marketing emails or analytics.
We use this information to create and secure accounts, run shared hours, display your record, provide support, diagnose faults, prevent abuse and meet legal obligations. Our legal bases under UK data protection law are performance of our contract with you, our legitimate interests in running a safe and reliable service, compliance with law and consent where we specifically ask for it.
4. who receives it
While an invitation is open, anyone with its link or QR code can see the host’s chosen nickname and activity title before joining. The place, other people’s names and timing details are not shown until they join. Locked, ended and invalid invitations hide those preview details from new visitors. Only share invitations with people you know.
People in the same shared hour can see the name you use in that hour. We use Supabase for database and authentication services and Vercel to host the website. These providers process information for us under their own security and data-processing commitments. We do not sell personal information, run behavioural advertising or give advertisers access to your hours.
We use Resend to deliver account emails and, only if you opt in and separately confirm you are 18 or older, a short sequence of getting-started tips and gentle reminders. For that optional sequence, we share your email address and the message stage with Resend, not your activity titles, places, notes, participants or durations. Resend also processes delivery and unsubscribe records.
Optional emails are not required to use These Hours. You can unsubscribe using the link in any of those emails, or ask support to stop them. Unsubscribing does not stop essential account emails such as sign-in and password-reset messages.
In supported app versions, monthly recap emails are a separate, optional choice for people who confirm they are 18 or older. For these emails, Resend receives your email address, month, activity count and total personal recorded time, but not activity titles, places, other people’s names, photos or phone-use results. We store your recap choice, timezone, language and delivery status. Turn recaps off in Profile or with the email’s unsubscribe link; other email choices are unchanged. Months without recorded activities do not generate a recap email. History, calendar and in-app monthly recaps remain free without email opt-in.
Safety reports are accessible only to authorised service operators. We use Resend for operational notifications to our support inbox containing a report reference and reason, not the report text, user names or account email addresses. These alerts do not subscribe you to emails.
Planned-activity reminders are separate from marketing and monthly recaps. If you choose them, Resend receives your verified email address, activity title, start time, timezone, invitation link and unsubscribe link. We store your reminder timing, language and delivery status. Free invitees can use reminders without a subscription. Turn them off for the plan in the app or through the email link. Choosing reminders does not enrol you in marketing.
If you choose “Help improve These Hours”, we use PostHog’s EU service to understand visits, getting started, completed hours, saved-record views and invitations. We send random identifiers, platform/app version and fixed event categories. We do not send your name, email, hour titles, locations, photos, invitation codes or advertising identifiers. We do not record your screen or automatically capture clicks. This optional processing relies on your consent and is separate from optional emails.
Usage sharing is off until you choose it. Change your choice in Profile in supported app versions or under Optional usage data on a guest invitation. Turning it off stops future collection for that account and removes unsent events once the choice reaches our server. Older app versions do not include this measurement. These choices never limit your hours or other free features.
5. international processing
Our service providers may process data outside the UK. Where required, we rely on recognised safeguards such as adequacy regulations or approved contractual protections.
6. how long we keep it
Account and hour information is generally kept while your account is active and for only as long afterwards as needed for deletion, security, legal or dispute purposes. Operational logs and backups expire according to our providers’ retention cycles. We review retention as the service develops.
Deleting your account removes blocks you made and reports you submitted. In reports submitted by other people, a deleted account is no longer linked by its account identifier; information they typed in the report is reviewed as part of handling the concern. Contact support if a report contains personal information that should be removed.
Optional analytics events are retained in PostHog for up to one year. Deleting your account also queues deletion of its associated analytics profile and events; provider processing is asynchronous. Local unsent events are cleared on sign-out or withdrawal. Contact support for access or deletion requests relating to optional analytics.
7. your rights
You can delete your account from Profile in the iOS app or on our account deletion page, after signing in and confirming. No email or phone call is required. Your account, nickname, optional-email records and typed details of hours you hosted are removed. Other participants may retain de-identified time records. Photos on other devices or copies you already exported cannot be remotely erased.
Depending on the circumstances, you may ask us to access, correct, delete, restrict or provide a portable copy of your information, or object to certain uses. You may withdraw consent where processing relies on it. Email support@thesehours.com to make a request. You can also complain to the UK Information Commissioner’s Office.
8. security
We use reasonable technical and organisational safeguards, including authenticated access and encrypted network connections. No online service can promise absolute security, so please use a secure email account and keep sign-in links private.
9. children
These Hours is not intended for children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and remove it where appropriate.
People aged 13–17 can use the core app without optional reminder emails. We do not enrol anyone in that sequence unless they separately confirm they are 18 or older and choose to receive it. This is a self-declaration, not identity or age verification.
10. changes
We may update this notice as the product changes. We will post the current version here and highlight material changes in the app where appropriate.