Timefill — Privacy Policy
Last updated: June 4, 2026
Timefill is built and operated by a single developer. The goal is to collect as little as possible, store it on infrastructure the developer controls, and never sell or share it.
Sign in with Apple
When you sign in, Apple sends Timefill a stable identifier and (optionally) your email. You can hide your real email and Apple will provide a private relay address instead. The identifier is used to look up your account. The email is used only if you contact support.
What is stored on Timefill's server
- Your account row: Apple identifier, optional email, your chosen username, and a per-install device ID.
- Your friendships and incoming friend requests.
- Group blocks you create or have been invited to.
- Push notification tokens used to deliver group-block invites and Live Activity updates.
- Schedule data used to drive Live Activities (block titles, times, categories). Kept only long enough to trigger the lock-screen activity, then deleted.
- Your public schedule (block titles, times, categories) — only if you have opted in to share it with friends.
What stays on your device
- Your full schedule, templates, and category list. Only the data needed for Live Activities and (if you opt in) public sharing is sent to the server.
- Calendar events read via EventKit. Timefill does not upload your calendar to any server. Calendar events become read-only blocks on your device. They are only included in what's shared with friends if you have explicitly enabled public schedule sharing.
Hosting
The server is a Cloudflare Worker with Cloudflare KV (transient push payloads) and Cloudflare D1 (user data). Data is stored on Cloudflare's network. See Cloudflare's privacy policy.
Push notifications
Timefill uses Apple's Push Notification service (APNs) to deliver Live Activities and group-block invites. Apple handles routing between Timefill's server and your device.
Purchases
Timefill Pro subscriptions are processed by Apple via StoreKit. Timefill never sees your payment details. Apple confirms entitlement to Timefill.
No analytics, no ads, no third-party tracking
Timefill does not include any analytics SDK, advertising SDK, or third-party tracker. The only services Timefill talks to are Apple (sign-in, push, purchases) and the developer-operated Cloudflare Worker.
Children
Timefill is not directed at children under 13. If you believe a child has provided personal data, email the developer and it will be deleted.
Your rights and data deletion
To delete your account and all associated server-side data, email the developer (address below). You will receive confirmation within a reasonable timeframe. In-app account deletion is planned for a future release.
Signing out of Timefill does not delete server-side data; it only removes credentials from the device.
Changes
If this policy changes materially, the "Last updated" date will change.