Privacy Policy | 10,000 Hours

Overview

10,000 Hours ("we", "our", or "us") is a time tracking application designed to help you track your progress toward mastery. We are committed to protecting your privacy and being transparent about how we handle your data.

Information We Collect

Optional AI Inputs

Signed-in users can request AI insights or use Daily Recall. AI insights send the selected period's session titles, categories, dates, times, and durations to Google's Gemini API. Titles originating from imported Google Calendar events are not included. Daily Recall sends the voice recording you choose to submit, the selected date and timezone, and your category names to Gemini so it can transcribe the recording and propose draft sessions.

Google Calendar Data

If you choose to connect Google Calendar, we request read-only access to the list of calendars you subscribe to and the events on calendars you select. This can include calendar names, event titles, start and end times, descriptions, and locations. Connecting Google Calendar is optional, and we never create, edit, or delete events in your calendar.

Account Information

When you create an account, we collect your email address and authentication credentials through our authentication provider (Clerk). This is used solely for account management and authentication purposes.

Session Data

We store the time tracking sessions you create, including:

Session start and end times
Session duration
Session titles and categories you create
Notes you add to sessions
Session ratings and feedback

Analytics Data

We use PostHog for product analytics to understand how users interact with our app. This helps us improve the user experience. Analytics data includes:

Page views and feature usage
Session completion events
General usage patterns

Local Storage

Some preferences (display settings, sound settings, etc.) are stored locally in your browser and are not transmitted to our servers.

AI Features & Voice Recordings

AI features are optional and only run when you explicitly request them. We use Google Gemini to produce summaries and convert a Daily Recall recording into proposed sessions. AI output may be inaccurate. Daily Recall proposals are drafts and are not added to your timeline until you review and confirm them.

We do not save your raw voice recording to MongoDB or other application storage. It is held temporarily in memory, sent once to Gemini, and discarded after processing. Confirmed sessions are stored like sessions you create manually. Generated AI insights are cached in your account so reopening the same period does not require another AI request.

Google processes submitted content under the applicable Gemini API terms. With unpaid Gemini services, Google may use submitted content and generated responses to improve its products, and human reviewers may process that content. With paid Gemini services, Google states that prompts and responses are not used to improve its products, though limited retention for safety and abuse prevention may still apply. Do not include sensitive, confidential, medical, financial, or third-party information in AI requests.

How We Use Your Information

To provide and maintain the time tracking service
To calculate your progress toward the 10,000 hour goal
To generate insights and analytics about your focus patterns
To authenticate your account and keep it secure
To improve our product based on usage patterns
To respond to support requests
To display Google Calendar events on your private timeline and let you optionally convert them into time logs

Google API Data

Google Calendar data is used only to provide the calendar features you request. We do not sell Google user data, use it for advertising, use it to train generalized AI models, or allow humans to read it except when necessary for security, legal compliance, or support that you explicitly request.

OAuth access and refresh tokens are encrypted before storage. Calendar events are retrieved when you view your timeline and are not permanently copied into our database unless you explicitly convert an event into a time log. When you disconnect Google Calendar, we revoke the Google authorization when possible and delete the stored connection tokens. Time logs you previously created remain part of your account until you delete them.

10,000 Hours' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Storage & Security

Your data is stored securely using MongoDB with encryption at rest. We use industry-standard security practices to protect your information. Authentication is handled by Clerk, a trusted authentication provider with SOC 2 compliance.

Data Sharing

We do not sell your personal data. We only share data with:

Clerk - for authentication services
MongoDB - for data storage
PostHog - for product analytics
Vercel - for hosting and infrastructure
Google - only when you connect Google Calendar and authorize its OAuth services
Google Gemini - when a signed-in user explicitly requests an AI insight or submits a Daily Recall recording

These providers are bound by their own privacy policies and data protection agreements.

Your Rights

You have the right to:

Access your personal data
Export your session data
Delete your account and all associated data
Disconnect Google Calendar at any time from Calendar Settings
Choose not to use optional AI features or submit voice recordings

To exercise any of these rights, please contact us through our feedback portal or account settings.

Cookies

We use essential cookies for authentication and session management. Analytics cookies from PostHog help us understand product usage. You can disable non-essential cookies in your browser settings.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting a notice in the app or sending an email.

Contact Us

If you have any questions about this privacy policy or our data practices, please reach out through our feedback portal.