Privacy at CapiTime

Clear data practices, without the fine-print maze.

This policy explains what information CapiTime handles, why we need it, and the choices you have when using our website, web app, and iOS app.

Effective September 27, 2026

1. Who we are and what this policy covers

CapiTime is a product of NesAILab. This Privacy Policy applies when you use the CapiTime website, web application, iOS application, and related services.

For questions about this policy or your personal information, contact NesAILab at contact@nesailab.com.

2. Information we collect

Account information

When you create or use an account, we may collect your name, email address, email-verification status, authentication provider, and an internal account identifier. Passwords are stored as cryptographic hashes, not as readable text.

Portfolio content

We store information you choose to add to CapiTime, including project names and descriptions, time entries, notes, revenue, expenses, capital records, categories, and related portfolio data.

Product analytics

The iOS app uses Google Firebase Analytics to collect product-interaction events, such as sign-up and sign-in method, screens viewed, project creation, and the type and source of journal entries. These events may include an internal account identifier, app and device information, and coarse duration ranges. We do not send names, email addresses, project names or identifiers, notes, financial amounts, or exact time durations to Firebase Analytics.

Technical and security information

Our systems may process IP addresses, request timestamps, device and browser information, diagnostic data, and security logs. The web app may use local storage or similar technologies to maintain your session, remember preferences, and cache recently viewed portfolio information for performance.

We do not intentionally collect precise location, contacts, photos, health data, or advertising identifiers.

3. How we use information

We use information to:

  • provide, personalize, and synchronize CapiTime features;
  • authenticate users, verify email addresses, and protect accounts;
  • calculate and display project, time, cashflow, and portfolio summaries;
  • send account verification, security, and essential service messages;
  • prevent abuse, diagnose failures, and maintain service reliability;
  • understand and improve product performance; and
  • comply with applicable legal obligations.

We do not sell personal information, and we do not use CapiTime data for cross-app advertising or tracking.

4. How information is shared

We may share limited information with service providers that help us operate CapiTime, such as cloud hosting and delivery providers, transactional email services, Google Firebase Analytics, and identity providers such as Apple and Google. They process information only as needed to provide their services and are subject to their own privacy and security obligations.

We may also disclose information when required by law, when necessary to protect users or the service, or as part of a merger, acquisition, financing, or sale of assets subject to appropriate safeguards.

5. Retention and deletion

We retain account and portfolio information while your account is active and for as long as needed to provide the service. Security logs and backups may be retained for a limited additional period. Certain records may be kept when required by law or reasonably necessary for fraud prevention, security, accounting, or dispute resolution.

You can permanently delete your account and associated data directly in the iOS app by opening Account, choosing Delete account, and confirming the deletion. This removes your account, projects, financial records, journal entries, and time logs and cannot be undone.

If you cannot access the app, contact contact@nesailab.com from the email address associated with your account.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to the processing of, or delete your personal information. You may also have the right to withdraw consent and lodge a complaint with a data protection authority.

To exercise a privacy right, email contact@nesailab.com. We will respond in accordance with applicable law.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International processing

Your information may be processed in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers.

9. Children's privacy

CapiTime is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate action.

10. Changes to this policy

We may update this Privacy Policy as CapiTime evolves. We will revise the effective date above and provide additional notice when required by law.

Contact us

NesAILab · CapiTime privacy inquiries

contact@nesailab.com