Privacy

Last updated 7 October 2026.

What TimeLoop stores

Your commitments, goals, preferences and plans, so your day survives a refresh and a new phone. Guests get an anonymous account; signing in with Apple or Google links the same account to an identity so it can be restored.

Voice and text

What you type is sent to our server, which uses a language model from OpenAI to recognise commitments and times; the text and what was recognised are kept with your request log so you can correct it. When you write several notes in a row, the last few of them and what TimeLoop showed in reply go along, so that “move it to nine” is understood. The names of your open tasks go along too, so the same task is not added twice. If you share a task list with a circle, the names of those lists and the open lines on them, including lines other members wrote, go along as well, so that “I bought the eggs” finds the right line. The rest of your plan (your calendar events and their times) is not sent to the model: answers about it are worked out on our server. When you speak, your phone’s own speech recognition (Apple on iPhone, Google on Android) turns it into text; depending on the phone and language, Apple or Google may process the audio on their servers. So that names are written correctly, the phone’s recogniser is given the names of places, people and events from your current week. Where server transcription or the live voice conversation is switched on, your audio is sent to OpenAI to be written out or answered; we do not keep the audio. Events read from your calendars are not sent to the language model.

Calendars and reminders

With your permission TimeLoop reads the calendars you choose and the reminders without a time, and writes your confirmed plan into a dedicated “TimeLoop” calendar. Participants of imported events are shown to you only. You can choose per category whether shared events show titles or just “Busy”.

Google user data

This section says exactly which Google user data TimeLoop accesses, how it uses that data and how the data is protected.

Google user data TimeLoop accesses

How TimeLoop uses Google user data

How Google user data is protected

Keeping and deleting Google user data

Google user data is kept only while your account is connected. Disconnecting in Profile → Calendars makes Google forget the access and removes the imported events from TimeLoop. Profile → Delete account & data removes everything, including your name, e-mail address and picture, immediately. You can also revoke the access at any time in your Google Account under Security → Third-party access.

TimeLoop’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Notifications and circles

If you allow notifications, your phone’s push token is stored so TimeLoop can tell you about invitations and answers in your circles; it is removed when you sign out. Members of a circle see when you are busy. Titles follow your sharing choices, and an event you mark private is only ever shown as busy.

Places and location

When you search for a place, the words you type are sent to a map service to find it: on iPhone to Apple Maps, straight from your phone; on other devices through our server to Photon, a search over OpenStreetMap run by komoot, together with a rough area (about ten kilometres) so nearby places come first, and without anything that identifies you. The place you pick (its name, address and point on the map) is stored with your event, and people you share the event with see it. When the forecast is switched on, the name of a place you typed for an event of your own, when it has no point on the map yet, is looked up the same way on iPhone, to find the area the weather is for; places written in events from your calendar are not looked up for the weather. An address written in an event of your phone’s calendar is looked up on Apple Maps, from your phone, so that the way there can be measured and a maps app opens the exact spot. Your location is used only if you allow it and only while the app is open: to measure the way to a place and tell you when to leave, and for the weather where you are. For the way, on iPhone it goes from your phone to Apple Maps and is not sent to or stored on our server. On Android the way is measured by our server, which asks Google’s Routes service: for that your phone sends our server the two points, each rounded to about a hundred metres, and Google is sent those two points, how you travel and the hour, never who is asking; the answer is held briefly and not kept with your account. On Android, the name of a place you typed for an event of your own is found through our server’s place search, as described above. For the weather, only a rounded area leaves your phone, as described below. A home or work address you set for measuring travel time stays on your phone, with one exception that you switch on yourself: “Traffic before you leave” (part of TimeLoop Pro). While it is on, our server keeps your home and, if you set it, your work, each rounded to about a hundred metres, and how you travel. It looks at the traffic once before each drive in your plan by asking Google’s Routes service about the way from the place of your previous event, from work during your working hours, or from home, and sends you a notification if you need to leave earlier. Switch it off and all of it is deleted.

Weather

When the forecast is switched on, TimeLoop shows the weather for your events and days. Our server asks MET Norway (the Norwegian Meteorological Institute) for the forecast of an area of about ten kilometres around the event’s place or, when you allow location, around where your phone is. For that your phone tells our server only that rounded area, never your exact position, and the area is not kept. The request to MET Norway comes from our server, not from your phone, and carries nothing about you. If you mark a goal as “not in the rain”, your phone also tells our server the hours for which rain is forecast in the next few days where you are — the hours only, not the place — so that goal can be planned outside them. Those hours are kept with your account, replaced each time the forecast is read again, and no longer used after most of a day without news from your phone. Weather data: MET Norway, CC BY 4.0. You can switch the forecast off under You.

Profile picture

If you sign in with Google, TimeLoop takes the picture of your Google account; you can also choose a photo yourself, or remove the picture, under You. We keep only a small square copy of it on our server (the original is not stored), and it is shown to the people who share a circle or an event with you. It is removed when you remove it or delete your account.

Inviting by e-mail

When you are signed in and invite someone to an event by e-mail without Google connected, TimeLoop sends that person one message with the event’s name, time and place and your name, through our mail provider (Mailgun, EU region). Their address is kept with the event so you can see their answer and so they hear when the event moves or is called off; it is removed with the event or your account. The link in the message shows only that one event and lets them answer without an account. Anyone can ask not to be written to again: we then keep only a scrambled form of the address, enough to never send to it again. To keep this from being misused, only signed-in accounts can invite, and the number of messages is limited per event, per account and per address. With Google connected, the invitation is sent by Google from your own account instead.

How the app is used

To know which parts of TimeLoop matter and what to make better, TimeLoop keeps a record of use on our own server: which screens are opened and for how long, and which kinds of actions are taken (for example “an event was added” or “a day was replanned”), each with your account, the time, whether the phone is an iPhone or an Android, and the version of the app. Only the kind of screen or action is recorded, never what you wrote, the names of your events, or anything from your calendar. From it we count things such as how many people come back and which features are used. Nothing of this goes to an analytics or advertising company, and the record is deleted with your account.

TimeLoop Pro

Purchases are handled by the App Store or Google Play; we never see your card. A service called RevenueCat tells our server whether an account has Pro. It knows the account only by a number, not by your name or e-mail address. So that the free days of Pro are given once per phone, the app keeps a random word on your phone and says it to our server when an account is created there. The word says nothing about you or the phone, and we keep only a scrambled form of it.

Look it up

When you ask TimeLoop to look something up about an event or a task, your question goes to our server together with that one event’s name, time and place, your time zone, and the last few questions and answers about it. Our server passes this to a language model from OpenAI, which searches the web for the answer. The answer and its sources are kept with the event so you can read them again; when you remove an answer, or the event itself, what you asked and what was found are erased. Nothing else of your plan is sent, nothing is looked up unless you ask, and events read from your calendar cannot be looked up at all. There is a limit to how many questions can be asked in a day.

This website

Visits to trytimeloop.com are counted with OpenPanel, an analytics tool that runs on a server of our own: which page was opened, where the visit came from, and the kind of device and country. It sets no cookies and builds no profile of you. The pages that open an invitation are not counted, because their addresses carry a private link. This is separate from the app: nothing the app does is sent there.

Deletion

Profile → Delete account & data removes everything immediately. Nothing is sold, no advertising identifiers, no tracking across apps.

Contact

The contact address for privacy requests is published on the App Store listing.