Privacy policy

Effective July 9, 2026 · TimeLeak is a product of Nightshift Labs LLC.

The product (the app you run)

• All capture is local. Screenshots and activity metadata are written to a folder on your machine and never transmitted by the watcher. Retention defaults to 7 days and is enforced by the app itself.
• AI analysis is opt-in per run and uses your own API key. When you run the Pro brief, a compressed text digest (and, only with the --vision flag, up to 20 downscaled frames) is sent directly from your machine to the model provider you configured. We are not in that path and receive nothing.
• No telemetry. The app contains no analytics, no phone-home, no update pings.

The website (timeleak.app)

• Email: if you request the free download or buy Pro, we store your email to deliver download links and (for the free list) occasional product emails. Unsubscribe links are honored immediately; you can also just reply "unsubscribe".
• Purchases are processed by Stripe; we never see your card number. We store the purchase record (email, amount, timestamp) to honor licenses and refunds.
• Analytics: standard aggregate web analytics may run on this site. We don't sell or share personal data with anyone, period.

Your rights

Email hello@timeleak.app to access or delete anything we hold about you (which is at most: your email and purchase record). Product data lives on your machine — deleting ~/TimeLeak removes it completely.