Privacy notice

Last updated 30 October 2026

Short version: Horario tracks your time on your own computer, and what it records about your activity stays there. We hold only what we need to sell you a licence, check it, sync the tasks, folders, time entries and rules you choose to sync, and fix crashes. We don't sell your data or track you across the web.

Who is responsible

Horario is operated by Innovate Invest OÜ, an Estonian private limited company (registry code 14504365), Asuvere tee 7, Tihemetsa alevik, Saarde vald, Pärnu maakond, 86201, Estonia. We are the data controller for everything in this notice except payments, which Paddle handles as described below. Contact us at support@horario.io.

What stays on your device

Automatic tracking records the applications, window titles, website addresses and file paths you use, and how long you are idle. That activity log and your app settings are stored only on your computer and are never uploaded.

Trial and device account

When you first open Horario it creates an anonymous account for your computer: a random identifier with no name or email. To give each computer one free trial, we store a one-way hash of your computer's hardware identifier, the date the trial started and the date the app last checked in. Trial records, and anonymous accounts no licence is active on, are deleted after 365 days without a check-in. We rely on our legitimate interest in providing the trial fairly.

Buying Horario

Our orders are processed by Paddle.com, our Merchant of Record. Paddle collects your payment and billing details and handles them under its own privacy notice; we never see your card. From Paddle we receive your email address and Paddle's customer and transaction references, and we keep a licence record with your email, the licence key, its status and dates. Paddle's purchase notifications are deleted 90 days after we have processed them; one we could not process is cut down to Paddle's transaction reference after 90 days. We need this to perform our contract with you, and we keep licence records for as long as the licence exists and as the law requires for accounting.

When you activate a licence on a computer, we link it to that computer's anonymous account and record when it was activated and last seen, so a licence is used on no more computers than it covers. When a computer is deactivated, that record is deleted 365 days later.

We email your licence key after a purchase, and when you ask us to resend it, through our email provider Resend. A record of sent mail, and any message that could not be delivered, is deleted after 90 days.

Cloud Sync

Cloud Sync is off unless you turn it on, and it needs a licence. When it is on, Horario uploads your folders and tasks (names, colours, rates and notes), your time entries (start and end times, durations, rates, revenue, notes, billing status, time zone and currency) and your tracking rules, so they are the same on both computers your licence covers. Rules contain whatever you type into them, which can include parts of window titles, website addresses, application names or file paths. Your raw activity log is never uploaded. Items you delete are removed from our servers 30 days later. We need this to provide the sync you asked for.

Error reports

When Horario crashes or hits an error, it sends a report to Sentry so we can fix it: the error, where in the code it happened, the app version and your operating system. Home-folder paths are replaced with ~ and your computer's name is not sent. We rely on our legitimate interest in keeping Horario working. You can turn error reports off when you first set Horario up or at any time under Settings → General → Privacy, and from then on nothing is sent.

Our servers report their own errors to Sentry too: the error, where in the code it happened, the server version and the kind of request that failed, such as its method, path and request ID. Request contents, keys, tokens and email addresses are removed before the report is sent, and the IP address is not sent. This setting in the app does not cover server errors, because they describe our servers rather than your computer.

Abuse protection and updates

To stop abuse of sign-in, trial, licence-recovery and waitlist requests, we count requests per IP address for one minute, or one hour for the waitlist; those counts are deleted within about a quarter of an hour after that. Horario checks for updates every six hours and tells our server which major version your licence covers.

The website and waitlist

If you join the early-access waitlist on horario.io, we store your email address, which page you signed up from and when, and email you a link to confirm it. Once you confirm, we record when, and email you about Horario based on your consent. If you don't confirm within 7 days, we delete the address. We keep a confirmed address until Horario launches and you have had the chance to become a user, or until you ask us to remove it. Our websites use Vercel's cookieless page analytics, which records anonymised page views without tracking cookies.

Who processes data for us

• Supabase: hosts our database, sign-in and sync servers, and our backups, in the European Union (Ireland).
• Paddle: our Merchant of Record for payments, acting under its own privacy notice for payment data.
• Paddle Retain (ProfitWell): loaded by Paddle's checkout script on our checkout page, to recover failed payments and handle cancellations.
• Resend: sends licence and waitlist emails.
• Sentry: receives error reports, in the European Union (Germany).
• Vercel: serves our websites, including checkout and these pages.

Where a provider processes personal data outside the European Economic Area, it does so under the European Commission's standard contractual clauses or an adequacy decision.

Your rights

Under the GDPR you can ask us to confirm what we hold about you and give you a copy, correct it, delete it, restrict or object to how we use it, or hand it to you in a portable format, and you can withdraw consent at any time. Email support@horario.io from the address you bought or signed up with. If you think we have mishandled your data, you can complain to your data protection authority; in Estonia that is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Changes

When Horario changes how it handles personal data we update this notice and the date at the top before the change takes effect.