Privacy Policy

Last updated: 22 July 2026

Klokio ("we", "our", "us") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect information when you use the Klokio mobile application and website.

Information We Collect

Account Information

If you create an account, we collect your name and email address so you can sign in and sync your data across devices.

Time Records

Start and end times, breaks and durations you log while tracking work. This data powers your reports and earnings.

Job Records

Job names, clients, rates, notes and photos you attach to a job to keep your work organised.

Expense Information

Amounts, categories, suppliers and tax details you enter or that are extracted from scanned receipts.

Receipt Images

Photos of receipts you choose to capture. Camera and Photos access are used only when you scan or import a receipt.

Device Information

Basic device and app-version details used to diagnose crashes and improve stability. This is never sold.

Optional Location Information

If you enable it, an approximate job location can be attached to time entries. Location access is always optional.

How We Use Information

We use app information to run time tracking, expenses and reports. When you connect your account, supported records and attachments are stored in your private cloud workspace so they can be accessed and updated on your connected devices. On the website, we use aggregated analytics to understand which pages are useful, where visits are referred from, and how the site performs across broad device and location categories.

Website Analytics and Browser Storage

The KLOKIO website uses Vercel Web Analytics to measure anonymous, aggregated website traffic. It records data points such as the page visited, timestamp, referring website, country or region, browser, operating system and device category. We do not send form contents, email addresses, job records or other information you enter into KLOKIO to analytics.

Vercel Web Analytics does not use cookies and does not create a browsing history across different websites. A visitor is represented by a daily hash derived from the request; Vercel states that this identifier is discarded after 24 hours. The resulting reports are aggregated. Vercel acts as our analytics service provider.

Analytics is disabled unless you select “Accept analytics” in the privacy notice. Where consent is the applicable legal basis, you can refuse analytics without losing access to the website and can withdraw consent at any time through the “Privacy choices” control in the footer. Withdrawing consent stops future analytics collection on that browser.

The portal uses necessary authentication cookies to keep you signed in, scoped to /portal. These are separate from optional analytics. The website also stores a necessary preference named klokio_consent_v3 in local browser storage. It records the notice version, whether analytics was accepted, and when the selection was saved. It is used only to respect your choice. You can change it through “Privacy choices” or remove it by clearing site data for klokio.app.

Receipt Scanning

Receipt text extraction runs to suggest expense details. You review and edit every suggestion before it is saved.

Cloud Storage

Optional account and sync services use Supabase for authentication, a database and private file storage. The KLOKIO project is hosted in Frankfurt. Connecting existing iPhone records requires an explicit choice in the app. Free includes 50 MB cloud file storage and Pro includes 1 GB; individual files are limited to 15 MB. Sync is not a guarantee of disaster recovery.

KLOKIO does not sell your personal data. Information may be shared only when you ask us to, when it is necessary to provide a feature you choose to use, or when disclosure is required by law. Supabase processes account and workspace data to provide sign-in and sync. Vercel hosts the website and web portal. Resend delivers account confirmation and recovery emails.

Data Retention

Local records remain on your iPhone until you remove them or erase its app data. Connected cloud records are separate: signing out or uninstalling does not delete them. Deleted cloud records and original attachments may be retained for recovery and can continue to use storage. Contact privacy@klokio.app to request account or cloud-data deletion. You control copies you export or share.

Your Rights

You can access, correct, export or delete your data at any time from within the app, or by contacting our support team.

Where the UK GDPR or EU GDPR applies, you may have rights to access, correct, erase, restrict or object to processing of your personal data, and to receive data you provided in a portable format. These rights can depend on the circumstances and applicable law.

Children's Privacy

KLOKIO is a work-management product and is not directed to children. We do not knowingly collect personal data from children through the current app or website.

Contact Information

For a privacy question, GDPR request or objection to processing, email privacy@klokio.app. General product support is available at support@klokio.app.

Changes to This Policy

We may update this Privacy Policy when KLOKIO's features, data practices or legal obligations change. We will publish the revised policy on this page and update the date shown at the top.

See export and data options