Privacy Policy
Last updated October 7, 2026
In short:
- Your notes, stickies, files and spaces stay on your Mac. They’re never uploaded, and I can’t see them.
- What does reach a server: your account (email and name), your plan and payments, feedback you post, and anonymous usage counts you can turn off.
- No ads, no selling or sharing data for advertising, and nothing you write is used to train AI.
1. Who’s responsible
Timeless is made by Santiago Perez Gutierrez, an individual based in Mexico (“I”, “me”). I decide how the information below is used and I’m responsible for it (the responsable under Mexico’s Ley Federal de Protección de Datos Personales en Posesión de los Particulares).
Address: Cerro de San Francisco 341, Col. Campestre Churubusco, Alcaldía Coyoacán, 04200, Ciudad de México, Mexico.
Email: santiago@timeless.builders
Timeless doesn’t ask for or process sensitive personal data.
2. What stays on your Mac
Everything you make in Timeless (notes, stickies, images, PDFs, videos, links, folders and spaces) is saved in the app’s folder on your Mac. None of it is sent to me or to any of the services below. Your sign-in session is kept in your Mac’s Keychain.
Link previews. When you add a link card, Timeless on your Mac loads that web page to show its title and picture, just as a browser would. That website sees an ordinary visit from your Mac. I don’t see which links you add.
3. What I collect, and why
Your account
Your email address, the name you give (optional), when the account was made and when you last signed in. Sign-in works with a code or link sent to your email. I use this to run your account, to tell you about your plan, and, rarely, to send important news about Timeless such as a change to these policies.
Purchases
When you buy Pro, Stripe collects your payment details and billing address. Your card details go to Stripe, never to me. I keep a record of your plan: which one, its status, trial and renewal dates, and the Stripe customer it belongs to. That’s how Timeless knows you’re Pro. Stripe also keeps payment records for tax and fraud prevention.
Feedback
Ideas you post on Feedback & Ideas, and the ideas you vote for, are stored with your account. Other Timeless users see an idea’s title, details and vote count, never your name or email. A report from “Something broken?” is seen only by me, and it includes your Timeless and macOS versions, so I can find the problem. If you email me, I keep that conversation to help you.
Usage counts from the app
Unless you turn it off, the Mac app sends anonymous usage events to PostHog: things like “the app opened”, “a note card was made” or “an idea was posted”. They help me see which parts of Timeless get used and what to improve.
- They never include what you write or add: no note text, names, file names, links or searches.
- They carry a random ID made on your Mac, which isn’t linked to your account or email.
- Location lookup from your IP address is turned off.
- Turn them off any time in Timeless ▸ Settings ▸ Share usage data. Nothing is sent after that.
This website
timeless.builders counts visits with Vercel Web Analytics, which uses no cookies and doesn’t identify you. It records things like the page, the site you came from, your browser and your country. If you join the waitlist, I keep your email address to tell you when Timeless is ready, and you can ask me to remove it at any time. Like every website, the servers keep short-lived technical logs (such as IP addresses) to run and protect the site.
4. The companies that help run Timeless
These services handle personal data for me, only to do their job for Timeless, under their own data-protection terms. I don’t sell your data or share it for advertising.
| Service | What it does | What it holds | Where |
|---|---|---|---|
| Supabase | Accounts, sign-in and the database | Email, name, plan, feedback, waitlist emails | United States |
| Stripe | Payments, invoices and Manage Subscription | Name, email, card, billing address, payments | United States and worldwide |
| Resend | Sending emails (sign-in codes, welcome and waitlist emails) | Email address and the email sent | United States |
| PostHog | Anonymous usage counts from the Mac app | Usage events with a random install ID | United States |
| Vercel | Hosting this website and its checkout and account routes; website visit counts | Request logs, anonymous page views | United States and worldwide |
I may also share information if the law requires it, for example in response to a valid legal request, or to protect Timeless and its users from fraud or abuse.
5. Data outside your country
Most of these services store data in the United States. Where data leaves the EU, UK or another region that requires protection, it’s covered by the services’ standard contractual clauses or a similar safeguard.
6. Why I’m allowed to use it
Purposes that need your consent, and those that don’t
- Needed to provide Timeless (primary purposes, which don’t need separate consent): running your account and sign-in, Pro and its payments, the Feedback & Ideas board, answering support emails, and keeping Timeless secure.
- Optional (secondary purposes, which you can refuse at any time without losing anything): the anonymous usage counts. Turn them off in Timeless ▸ Settings ▸ Share usage data. Timeless doesn’t send marketing emails.
In the EU and UK
The legal bases are:
- To provide what you asked for (your account, Pro and support): our contract.
- Usage counts, security and fixing problems: my legitimate interest in keeping Timeless working and improving it. You can turn usage counts off.
- Payment and tax records: legal obligations.
7. How long it’s kept
- Your account and plan: until you delete your account. Delete Account in the account sidebar removes them straight away.
- Payment records: kept by Stripe, and by me, for as long as tax and accounting law requires, even after an account is deleted.
- Ideas you posted: they stay on the board after you delete your account, with nothing left that links them to you. Your votes are removed. Problem reports are deleted when they’re no longer needed to fix the problem.
- Usage counts: they aren’t tied to you, and are kept only as long as they help improve Timeless.
- Waitlist emails: until Timeless launches and you’ve been told, or until you ask me to remove yours.
8. Your choices and rights
You can ask me to show you the personal data I have about you, correct it, give you a copy, delete it, or stop using it for a particular purpose (in Mexico, your derechos ARCO: access, rectification, cancellation and opposition), and you can withdraw your consent. Email santiago@timeless.builders from the address on your account, saying which right you want to use and for which data. I’ll answer within 20 days, and do what you asked within 15 days after that. You can also:
- Change your name, or delete your account, from the account sidebar in Timeless.
- Turn usage counts off in Settings.
- Update your billing details and see invoices in Manage Subscription.
If you’re unhappy with how I’ve handled your data, you can complain to the data protection authority where you live. In Mexico that’s the Secretaría Anticorrupción y Buen Gobierno.
9. Security
Everything travels over encrypted connections. Your sign-in is kept in your Mac’s Keychain. The database only lets each account reach its own records, and feedback is only shown through functions that leave out who wrote it. No system is perfectly secure, but if something ever goes wrong with your data, I’ll tell you promptly.
10. Children
Timeless isn’t meant for anyone under 16, and I don’t knowingly collect their data. If you think a child has an account, email me and I’ll delete it.
11. Changes to this policy
If this policy changes in a way that matters, I’ll email you or tell you in the app before it applies. The date at the top shows the latest version.
12. Contact
Santiago Perez Gutierrez, Cerro de San Francisco 341, Col. Campestre Churubusco, Alcaldía Coyoacán, 04200, Ciudad de México, Mexico. santiago@timeless.builders. See also the Terms of Service.