1. The short version
Timepiece Tracker is a watch-collection tracker. Your collection is yours: we never sell, rent, or trade your personal data, and we never share your collection with advertisers. The app works fully signed out — if you never create an account, your watches, photos, and wear history stay on your device and are never uploaded to us.
2. What we collect
| Data | Why | When |
|---|---|---|
| Email address | Account sign-in, password reset, and wishlist alert emails | Only if you create an account |
| Collection data (watch details, purchase prices, service and accuracy records, wear log, wishlist, goals, achievements) | The core function of the app | On your device always; in our cloud only with sync enabled |
| Watch photos | Your gallery for each watch | On your device always; in our cloud only with sync enabled |
| Display name, username, avatar | Public profiles and group leaderboards | Only if you opt in to a public profile or join a group |
| Push notification token | Delivering wishlist and service reminders | Only if you grant notification permission |
| Crash reports and diagnostics | Finding and fixing bugs | Always (not tied to your collection contents) |
| Product analytics events (screens viewed, features used) | Understanding which features are worth building on | Always (aggregate; never your item details) |
| Subscription status | Unlocking premium features | Only if you purchase |
We never collect payment card details. All billing runs through the Apple App Store or Google Play, and we only ever see whether a subscription is active.
3. Service providers
We use a small number of processors, each limited to the purpose listed:
- Supabase — authentication, cloud sync database, and photo storage.
- RevenueCat — subscription entitlement management (status only, no card data).
- Google AdMob — advertising in the free tier. See section 5.
- Sentry — crash and error reporting.
- PostHog — product analytics.
- Resend — sending wishlist digest emails.
- Expo push notification service — delivering push alerts.
- eBay — when you search or view listings from your wishlist, that search is sent to eBay's public API. We participate in the eBay Partner Network, so listing links carry an affiliate tag and we may earn a commission on a resulting purchase at no additional cost to you.
4. Cloud sync, public profiles, and groups
Cloud sync is a premium feature and is opt-in. Until you turn it on, nothing about your collection leaves your device. When it's on, your watches, wishlist, and photos are stored in our Supabase project so they can appear on your other devices. Rows are protected by row-level security — only your account can read them.
Public profiles and group leaderboards are also opt-in, and you choose which watches appear publicly. Leaderboards are built from aggregate statistics rather than your full item details.
5. Advertising and tracking
The free tier shows banner ads served by Google AdMob; a premium subscription removes them. On iOS, we ask for App Tracking Transparency permission before any personalized advertising identifier is used. If you decline, ads still appear but are non-personalized. In regions covered by GDPR, we present Google's consent flow and honor the choice you make there. We do not give advertisers your email address or any part of your collection.
6. Emails and notifications
If you enable wishlist alerts, we send a once-daily digest of new eBay listings matching your grail list, by push notification, email, or both. Every digest email carries a one-click unsubscribe link and header, and you can turn alerts off at any time under Settings → Notifications in the app. We do not send marketing email.
7. Your rights and controls
In the app you can export your collection as CSV, generate an insurance PDF, delete your cloud data while keeping your account, or permanently delete your account and everything in it. Full instructions are on our Delete Account or Data page.
California residents have the right to know what personal information we collect, to request its deletion, and to opt out of its sale — we do not sell personal information to anyone. EU and UK residents have rights under GDPR to access, correct, restrict the processing of, port, and erase their personal data. To exercise any of these rights, email [email protected]; we respond within 30 days.
8. Retention and security
We keep account data for as long as your account is active. When you delete your account, cloud-stored data is erased immediately and removed from backups within 30 days; deletion cannot be undone. Data is encrypted in transit (TLS) and at rest.
9. Children
Timepiece Tracker is not directed at children. You must be at least 13 years old to create an account. If you believe a child has provided us personal information, contact us and we will delete it.
10. Changes and contact
If we make a material change to this policy we will update the date above and, for significant changes, notify you in the app. Questions? Email [email protected] or call (509) 381-3920.