RescueTime's Privacy Policy

We never sell, rent, or share your personal information

This includes anonymized selections of your individual data, and applies to any government, foreign or domestic, unless we're compelled by law. If we're legally required to disclose your information, we'll attempt to notify you by email so you have the opportunity to object, unless we're prohibited from doing so. We independently object to overly broad requests for access to our users' information.

We may share aggregate behavior data only

For example, we might share insights like "which day of the week people spend the most time at their computer." This kind of aggregate analysis helps us improve the product and demonstrate our domain expertise.

You can delete your data or account at any time

You can delete all of your data, or just a portion of it, whenever you choose. Deleting your account removes all of your data from our database.

We won't spam you

We won't share your email information, directly or indirectly. We might occasionally send one-time messages about important RescueTime news, and we'll continue introducing optional ways for RescueTime to contact you with data you care about. You'll always be able to turn these on or off.

No other user can see your individual data

We may offer features that let you voluntarily share selections of your data. Any such sharing is opt-in, handled per-situation, and never buried in a terms of service agreement.

Team accounts control their own data sharing

For team accounts, data sharing is controlled by the account administrator. By default, no one on the team has access to another member's individual data, and no one outside the organization has access to any of it. Default team setups only permit sharing of aggregated data, such as a team's average weekly communication time. We promote transparency and user-driven control in all team implementations.

Encrypted in transit

All requests between RescueTime's web app, client apps, and our servers use current best-practice SSL configurations.

Encrypted at rest

All of our storage uses volume encryption.

Ongoing security practices

We maintain continuous vulnerability scanning, respond immediately to security advisories, and stay PCI compliant.

For time analysis

Application name, website URL, window title, and start and end time of use.

For distinguishing you and your device

Device login name, device name, operating system version, and sometimes the manufacturer. For some requests, your public IP address is saved for security and troubleshooting purposes. Like all activity information, it's discarded when you delete your account.

Account deletion

All your data is destroyed in its entirety when you delete your account, except account activity logs required for business audit records. This process can take up to 3 days to protect against accidental deletion. To request immediate deletion, contact support.

Selective deletion

You can delete portions of your activity data at any time through your activity reports on the website.

Erasing all your data

You can erase all of your activity data at any time from Account Settings → Data & Privacy by clicking Erase your logged time.

Deleting your account

Deleting your account also deletes all of your activity data. Click Delete your account from the same Data & Privacy page.

Free account data limits

Free account data older than 15 months is automatically and continuously deleted. Note that this is different from how much history you can view at once: free accounts can see up to two weeks of data in their reports at a time, even though up to 15 months is retained.