Privacy notice

Last updated 28 October 2026

Short version: Horario tracks your time on your own computer, and what it records about your activity stays there. We hold only what we need to sell you a licence, check it, sync the projects and time entries you choose to sync, and fix crashes. We don't sell your data or track you across the web.

Who is responsible

Horario is operated by Innovate Invest OÜ, an Estonian private limited company (registry code 14504365), Asuvere tee 7, Tihemetsa alevik, Saarde vald, Pärnu maakond, 86201, Estonia. We are the data controller for everything in this notice except payments, which Paddle handles as described below. Contact us at privacy@horario.io.

What stays on your device

Automatic tracking records the applications, window titles, website addresses and file paths you use, and how long you are idle. That activity log and your app settings are stored only on your computer and are never uploaded.

Trial and device account

When you first open Horario it creates an anonymous account for your computer: a random identifier with no name or email. To give each computer one free trial, we store a one-way hash of your computer's hardware identifier, the date the trial started and the date the app last checked in. Trial records are deleted after 365 days without a check-in. We rely on our legitimate interest in providing the trial fairly.

Buying Horario

Our orders are processed by Paddle.com, our Merchant of Record. Paddle collects your payment and billing details and handles them under its own privacy notice; we never see your card. From Paddle we receive your email address and Paddle's customer and transaction references, and we keep a licence record with your email, the licence key, its status and dates. Paddle's purchase notifications are deleted 90 days after we have processed them. We need this to perform our contract with you, and we keep licence records for as long as the licence exists and as the law requires for accounting.

When you activate a licence on a computer, we link it to that computer's anonymous account and record when it was activated and last seen, so a licence is used on no more computers than it covers.

We email your licence key after a purchase, and when you ask us to resend it, through our email provider Resend. A record of sent mail is deleted after 90 days.

Cloud sync, if you turn it on

Cloud sync is off unless you turn it on, and it needs a licence. When it is on, Horario uploads your projects, folders and tasks (names, colours, rates and notes), your time entries (start and end times, durations, rates, revenue, notes, billing status, time zone and currency) and your tracking rules, so they are the same on every computer in your workspace. Rules contain whatever you type into them, which can include parts of window titles, website addresses, application names or file paths. Your raw activity log is never uploaded. Items you delete are removed from our servers 30 days later. We need this to provide the sync you asked for.

Error reports

When Horario crashes or hits an error, it sends a report to Sentry so we can fix it: the error, where in the code it happened, the app version and your operating system. Home-folder paths are replaced with ~ and your computer's name is not sent. We rely on our legitimate interest in keeping Horario working. You can turn error reports off when you first set Horario up or at any time under Settings → General → Privacy, and from then on nothing is sent.

Abuse protection and updates

To stop abuse of sign-in, trial and licence-recovery requests, we count requests per IP address for one minute; those counts are deleted within about a quarter of an hour. Horario checks for updates every six hours and tells our server which major version your licence covers.

The website and waitlist

If you join the early-access waitlist on horario.io, we store your email address, which page you signed up from and when, so we can email you about Horario, based on your consent. We keep it until Horario launches and you have had the chance to become a user, or until you ask us to remove it. Our websites use Vercel's cookieless page analytics, which records anonymised page views without tracking cookies.

Who processes data for us

• Supabase: hosts our database, sign-in and sync servers, and our backups, in the European Union (Ireland).
• Paddle: our Merchant of Record for payments, acting under its own privacy notice for payment data.
• Resend: sends licence emails.
• Sentry: receives error reports, in the European Union (Germany).
• Vercel: serves our websites, including checkout and these pages.

Where a provider processes personal data outside the European Economic Area, it does so under the European Commission's standard contractual clauses or an adequacy decision.

Your rights

Under the GDPR you can ask us to confirm what we hold about you and give you a copy, correct it, delete it, restrict or object to how we use it, or hand it to you in a portable format, and you can withdraw consent at any time. Email privacy@horario.io from the address you bought or signed up with. If you think we have mishandled your data, you can complain to your data protection authority; in Estonia that is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Changes

When Horario changes how it handles personal data we update this notice and the date at the top before the change takes effect.