Privacy Policy

Flamely is a desktop time tracker for Windows and macOS. To tell you where your hours go, it watches which app you are working in while you track. This policy explains, in plain English, what the app records, what leaves your computer, who else is involved, and what you can do about it.

Flamely is not a "nothing leaves your machine" app. Your tracking data is stored on your computer, and while you are signed in most of it also syncs to your Flamely account in the cloud. We would rather say that clearly than have you find out later.

Who we are

Flamely is made by Mir Fahad, who runs Flamely as its sole operator. In this policy "Flamely", "we" and "us" mean that operator. For anything about your data, write to mir@flamely.app.

The short version

• Flamely records which app is in front, its window title (shortened to a website or file name when one appears), how long you work and when you go idle. On Windows it also counts key presses, clicks, scrolls and how far the mouse moves. It never records which keys you press.
• It never takes screenshots or screen recordings, never records what you type, and never listens to your microphone.
• Everything is stored on your computer. While you are signed in, your hours, projects, clients, app names, shortened window titles and settings also sync to your Flamely account, hosted by Supabase in the United States.
• We do not sell your data and we do not use it for advertising.
• You can ask us to export or delete your data at any time by writing to mir@flamely.app.

What the app records on your computer

Flamely watches your activity only while a tracking session is running. The one exception is auto-start: if you create an auto-start rule, Flamely checks which app is in front (its name and program location) every few seconds while you are not tracking, so it can start a session when that app comes to the front. Nothing from those checks is saved.

While you track, it records:

• The app in front. Its name and icon. To identify the app and find its icon, Flamely reads the program's location on disk; it keeps that location only if you create an auto-start rule for the app.
• The window title. Flamely shortens it before saving: browser and editor names are removed, and when the title contains something that looks like a web address or a file name (for example "github.com" or "report.docx"), only that part is kept. Otherwise the title is kept as it is, which can include a document name, an email subject or a chat name. On macOS, reading window titles needs the Screen Recording permission; Flamely uses it for titles only and never captures an image of your screen.
• Time and idle. When sessions start and stop, how long you were active, idle or on a break, and the project you chose. Idle is worked out from the system's "time since the last input" value.
• Input counts, on Windows only. How many keys you pressed, how many times you clicked and scrolled, and how far the mouse moved, added up per session, plus intensity scores worked out from those counts. Flamely never reads which key was pressed. On macOS no input counts are collected.
• The microphone check, only if you turn it on (Windows only). Flamely asks Windows whether any app is using the microphone, so a call can count as activity. It gets a yes or a no. It never opens the microphone, never hears audio and does not store which app is using it. The answer stays on your computer.
• What you write and plan. Session notes and tags, projects, clients and rates, tasks and time blocks in the Calendar, notes, check-in answers, focus templates, auto-start rules and your settings.
• What you tell us during setup. Your first name, how you heard about Flamely, what you want help with, your usual working hours, your workspace name, and if you add them a client, how you bill and your rate.

What Flamely does not collect

• No screenshots, screen recordings or images of your screen.
• No keystroke content. Flamely counts key presses on Windows; it never knows which keys.
• No microphone audio.
• No web addresses. Flamely does not read your browser's address bar today. The only website information it has is a web address that appears inside a window title.
• No contents of your files, emails or chats, beyond what a window title shows.

What leaves your computer

Your Flamely account (sync)

Flamely needs an account. While you are signed in, the app syncs your data to your account so it is backed up and follows you to another computer. Sync uses Supabase, our cloud database and sign-in provider, in its United States (us-east-1) region. What syncs:

• your profile and settings: name, email, working hours, goals, hourly rate and currency, preferences, and your setup answers
• your projects and clients, including any rates and colours you set
• your sessions: start and end times, active, idle and break time, project, notes and tags
• the apps you used during each session, with their shortened window titles, and which icon each app uses (a reference, not the image)
• the activity counts per session (key presses, clicks, scrolls, mouse distance and intensity scores; Windows only)
• your app categories, focus templates and auto-start rules (an auto-start rule includes the program's location on disk)
• your workspace (every account has one, even if you work alone) and your plan status
• a record of which version of this notice you agreed to and when

What stays on your computer: Calendar tasks and time blocks, Calendar notes, check-in answers, the microphone check, app icon images, and settings that only make sense on one computer.

If you set up Flamely before October 2026, your account may also hold answers from our earlier setup questions, which could include your date of birth and an income range. We keep them so your account keeps working as it did. Write to us and we will remove them.

Sync is part of having an account. If you sign out, nothing new syncs, and what is on your computer stays there.

Signing in

You sign in with an email and password (we email you a six-digit code to confirm the address and a link if you forget the password), or with Google. With Google, we receive your name, email address and the profile picture link Google shares, and Google learns that you signed in to Flamely. Google sign-in finishes on a page in your browser that loads its font from Google Fonts, so Google receives that request too. Supabase keeps sign-in records, including the IP address used, to protect accounts. Your sign-in token is kept in your system's secure storage (Windows Credential Manager or the macOS Keychain).

The leaderboard after seven days

After you accept the updated collection notice, you join the leaderboard automatically once seven full days (168 hours) have passed since your Flamely account was created, the next time you use Flamely online. If your account is already seven days old when you accept, you can appear then. An existing leaderboard name is kept; otherwise we use your saved profile name when it is suitable for public display. We never use your account email as a public-name fallback.

Other signed-in Flamely users can see your public name, your active minutes for the week, and your country only if you explicitly choose to show one. We do not infer a public country from your earlier setup answers, time zone, device language or IP address. Projects, apps, window titles and notes are not shown on the leaderboard.

You can leave before or after enrollment, or choose not to show a country. Leaving hides your entry across devices. Accepting this updated notice does not undo a previous choice to leave. Existing accounts that have not accepted this notice are not enrolled automatically; people who already joined keep their existing participation. Moderation hides remain in effect.

Payments

Flamely is free for everyone during the beta. If paid plans arrive, payments will be handled by Paddle, which acts as the merchant of record: Paddle collects your payment details and handles tax and invoices. We would receive your name, email address, a customer number and your subscription status from Paddle. We never see your full card number. Paddle's own privacy notice covers what it does with your data.

Crash reports and usage statistics

• Crash reports are on unless you turn them off in Settings. When the app hits an error, it can send a report to Sentry: the error type, its message, where in the code it happened, the app version, which window it was in and basic device details such as the operating system. We remove your account details, and reports carry no history of what you did before the error. Because an error message is written by the code at the moment it fails, we cannot promise that it never contains a project name or a window title.
• Usage statistics are off unless you turn on "Share anonymous usage" in Settings → General. If you do, the app sends anonymous events from a fixed list (for example "a setup step was viewed" or "a reminder fired") to PostHog in the United States, with a random identifier, the app version and basic device details (operating system, screen size and time zone), and without your IP address. They never include your projects, titles, notes or times.

Not every version of Flamely has these services connected. When they are, this is all they get.

The feedback board

Settings → Help → Send feedback posts to our public board at feedback.flamely.app. Your title and message, the name you give, and the app version and operating system are shown publicly once we approve the post. Your email address is not shown; we use it only to reply. The board also keeps a random identifier for votes and your IP address to stop spam. Do not put anything private in a feedback post.

Updates

The app checks flamely.app for a new version and downloads it from there. Like any website, our host keeps standard server logs of these requests, including IP addresses.

Why we use your data

• To run Flamely for you: track your time, show your reports, sync your devices and keep your account working (this is the service you signed up for).
• After the updated notice is accepted: leaderboard participation after seven full days, with the choice to leave before or after enrollment.
• Because you chose it: sharing a country on the leaderboard, usage statistics, the microphone check and Google sign-in.
• Because we have a legitimate interest in it: crash reports to fix bugs, security records to protect accounts, and replying to feedback.
• Because the law requires it: tax and payment records, once payments exist.

We do not sell your data, we do not share it with advertisers, and we do not use it to train AI models.

Who else handles your data

• Supabase (United States): the cloud database, sign-in and sync.
• Google: only if you sign in with Google, and the font on the browser sign-in page.
• Paddle: only if you pay for a plan.
• Sentry: crash reports, unless you turn them off.
• PostHog (United States): usage statistics, only if you turn them on.
• Our web host: the website, downloads and update checks.

Each of them processes data for us under their own terms and security measures. We may also disclose data if the law requires it, or to a buyer if Flamely is ever sold, in which case this policy continues to apply.

Our cloud is in the United States. If you live elsewhere, including the UK or the EU, your data is transferred there. We rely on our providers' standard safeguards for these transfers.

How long we keep it

• On your computer: until you delete it. Flamely does not clear old data by itself. Uninstalling the app may leave its data folder behind; to remove your tracking data, delete the Flamely folder yourself:
  • Windows: %LOCALAPPDATA%\Flamely (usually C:\Users\you\AppData\Local\Flamely)
  • macOS: ~/Library/Application Support/Flamely
  • A small log and the app's own settings may also remain in folders named app.flamely.desktop (on Windows in %LOCALAPPDATA%, on macOS inside ~/Library), and your sign-in token in Windows Credential Manager or the macOS Keychain. You can delete those too.
• In your account: while your account exists. When you ask us to delete your account, we delete your cloud data within 30 days. Copies in our providers' backups expire on their own schedule.
• Crash reports and usage statistics: for a limited time, under Sentry's and PostHog's retention settings for our account.
• Feedback posts: until you ask us to remove them or we close the board.

Your choices and rights

• Stop tracking. Flamely watches only while a session runs, apart from the auto-start check above, which runs only while you have an auto-start rule switched on.
• Sign out. Nothing new syncs while you are signed out.
• Crash reports and usage statistics. Turn "Crash reports" and "Share anonymous usage" on or off in Settings → General.
• The microphone check. It is off until you turn it on.
• The leaderboard. Leave before or after enrollment to hide your entry. That choice remains in effect across devices, including after you accept an updated notice. You can also choose not to show a country.
• See, export, correct or delete your data. Write to mir@flamely.app from the email address on your account. There is no export or delete button in the app yet; we do it for you, usually within 30 days.
• Object or complain. Depending on where you live, you may have more rights, such as objecting to how we use your data or complaining to your data protection authority. Write to us first and we will try to help.

Security

Data travels to our cloud over encrypted connections. Each account can only read its own data in the cloud database, apart from the leaderboard entries described above. Your sign-in token is kept in your system's secure storage. The database on your computer is not encrypted: anyone who can use your computer account can read it, so protect your computer with a password. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Children

Flamely is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

When we change what Flamely collects or shares, we update this policy, change the date at the top and, for meaningful changes, ask you to agree again in the app before you continue.

Contact

mir@flamely.app