Effective 16 October 2026

Privacy Policy

This policy explains what TimeIsMoney, operated by Rabbi Mehedi Ullah in Bangladesh, collects, why we use it, who else processes it, and the choices you have. It applies to the website, the app, voice and typed advisor turns, account signup, early-access requests, and email we send about the service, for visitors and account holders anywhere. Storage periods and processor duties are in the Data Storage Terms.

These legal pages are published in English and Bangla. If the two versions differ, the English version controls. That includes visitors using French or Spanish on the rest of the site.

Who is responsible

For your account and the way the service runs, Rabbi Mehedi Ullah is the controller of personal data. For client details, logos, and seat information you choose to store, you decide the purpose. We process that data as your processor, only to provide the service.

Data we collect

Account data: name, email, password (stored as a hash), role, plan, language, time zone (the zone name your device reports, never your location), theme, currency preferences, voice-log count, and an optional advisor brief you save or dictate (who you are and what you want remembered, up to the limit shown in profile).

Finance data you enter: cash movements, accounts, costs, dues, cards, deposits, savings goals (a name, a target, and how much you have set aside), projects, businesses, clients, invoices, quotes, notes, and files such as logos. An optional location can be stored on a cash movement if you add one. We do not collect location unless you add it.

Voice and advisor data: the audio clip of a spoken turn, the transcript, the text you type, the reply, the topic title, and a summary of the books and brief needed to answer that turn. We send the clip and that context to OpenAI to transcribe speech and draft the reply, and, on Pro and Max when you choose to hear a reply in the natural voice, the text of that reply to make the audio. We do not keep the audio file after the turn is processed. The transcript and reply stay in your topics. If you save a suggestion set, we keep its title, the reply, and the steps until you remove that set or delete the account.

Access and payment data: early-access requests (name, email, optional phone, company, and message), the IP address of that request, and plan payments you submit (amount, method, payer phone, and transaction reference). If card payments are switched on, Stripe takes the card details on its own page and tells us only whether the payment went through; we never see or store the card number.

Security and activity data: if you turn on two-factor sign-in, an encrypted authenticator secret and one-time recovery codes; an activity log of changes to money moves in each book (what changed, who made the change, when, and the IP address); the hourly rate you may enter in your profile; and whether you have confirmed your email address. If you paste or share a payment text message, it is read on our server by pattern matching and is not stored. Only if you press “Try a smarter reading” is it sent to OpenAI to read, after phone, account and card numbers are masked; it is not stored by us. If you scan a statement, receipt or screenshot, the file is sent to OpenAI to read the transactions; we do not keep the file, and nothing is added to your books until you confirm it. The advisor also works out heads-up notices from your own books on our server (for example a short runway or a bill that is hard to cover) and shows them in the app. If you have a verified email, we send a weekly runway email containing days and counts only, never balances; it is on by default and you can turn it off with one click in the email or in your profile. If you turn on phone heads-ups, we store the address your browser gives us for sending you a notification (and its encryption keys) until you turn them off or the browser drops them. A notification names the kind of thing that needs a look but never an amount, it arrives only during the day in your time zone, and at most one is sent a day. If you invite a friend, we record that they joined with your link. When they have confirmed their email and logged a first move, you each get 30 days of Pro, up to 12 rewards per person; we may withhold a reward for abuse such as fake accounts. We also keep simple product-usage events on our own servers (for example that you finished setup or logged a move, and how it was captured: typed, spoken, from a message or from a scan) so we can see where people get stuck. They hold no amounts, no text you write, no IP address and no device details, use no third-party analytics, and are not recorded for browsers that send Do Not Track or Global Privacy Control. They are deleted after about 13 months.

Technical data: session cookies needed to keep you signed in, a language preference, a guest currency choice stored only in that session, security logs, and the time you accepted these terms. The microphone is used only while you are recording a turn.

Why we use it

We use this data to create and secure your account, provide runway and bookkeeping features, transcribe what you say, draft advisor replies, remember a brief you asked us to keep, send invites and service email, review access and plan payments, count voice logs against your plan, prevent abuse, and keep the service reliable. We do not use your books, voice, or topics to train our own models, and we do not sell them.

Where the GDPR or UK GDPR applies, our bases are: contract (providing the service you asked for, including a voice or typed turn), legitimate interests (securing the product, investigating abuse, and answering you), consent (where we ask for it, such as an optional location or a microphone permission your browser requests), and legal obligation (keeping records we are required to keep). You can withdraw a consent that was the only basis, without affecting processing that already happened lawfully.

Who can see it

We do not sell personal data. We do not share it for cross-context behavioural advertising.

People you invite to a project can see that project’s finance data, and view-only guests can read it but not change it. They cannot see your personal book, your advisor topics, or your brief unless you also put that data in the project.

Moderators can open an account to investigate abuse, to answer a support request, to verify a payment, or to read advisor topics for those same reasons. That access is limited to moderator roles and is not used for advertising. You can read and delete your own topics.

OpenAI processes the audio clip, the text of the turn, recent messages in that topic, your brief, and a summary of the relevant books, only to transcribe and draft that reply, and, for a natural-voice reading on Pro and Max, to turn that reply’s text into speech. We do not turn on a setting that allows that content to be used to train their models. Hosting and email providers process data only so we can run TimeIsMoney and deliver mail. We may also disclose data if the law, a court, or a regulator requires it, or to protect users and the service from harm.

Where it is processed

To keep exchange rates, inflation figures and public holidays current, our servers request open public data from exchange-api (served by jsDelivr and Cloudflare), the World Bank (inflation and bank interest-rate averages) and Nager.Date. Patterns such as your costliest weekday or pay day are calculated on our servers from your own records and are not sent anywhere. Those requests contain only a currency or country code and a year. They never contain your name, email, books or anything you typed.

We operate from Bangladesh. Hosting, email, and OpenAI may process data in other countries, including the United States for OpenAI’s API. A voice or advisor turn is a transfer of that turn’s content to OpenAI for the time needed to transcribe it and draft the reply.

Where a transfer out of the EEA, Switzerland, or the UK needs a safeguard, we rely on the provider’s standard contractual clauses or another mechanism the law allows. You may ask us for a summary of those safeguards. Requests from anywhere are handled by the operator in Bangladesh at the contact on this page. If we are required to appoint a local representative, we will publish that contact here.

How long we keep it

We keep account, finance, brief, and advisor topics while your account is open. Audio clips are not stored after the turn is processed. Deleting a topic deletes its messages. A suggestion set you chose to save stays until you remove it or delete the account, even if you later delete the topic it came from. Deleting the account from Profile deletes your personal books, files, sessions, brief, topics, saved suggestions, and access requests. Payment reviews are kept only as amount, date, plan, and method, without your name, email, phone, or transaction id.

Moves you entered in someone else’s project stay in that project. We remove your login from them. The project owner remains responsible for that book.

How long each category is kept is set out in the Data Storage Terms.

Your rights

Where a privacy law applies to you, you may use the rights it gives, and we will not ask you to waive a right the law says cannot be waived. That includes, when those laws apply: the GDPR and UK GDPR (access, correction, erasure, restriction, portability, objection, and a complaint to a supervisory authority); Swiss data-protection law; the California CCPA/CPRA and similar US state laws (know, correct, delete, and opt out of sale or sharing); Brazil’s LGPD; Canada’s PIPEDA and provincial private-sector laws; Australia’s Privacy Act; India’s Digital Personal Data Protection Act; and the laws of Bangladesh. The same contact handles a request from any country.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights. Where the GDPR or UK GDPR applies, you may also not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Counting a voice log against a plan allowance is not such a decision. Advisor replies do not change your books unless you confirm a record yourself.

From Profile you can download a copy of your account, brief, advisor topics, saved suggestions, and the cash books you own. You can also export the cash book you are viewing from Current Cash, delete a topic in the advisor, edit or clear your brief, and delete the account. For any other request, contact us. We may need to confirm it is you. We respond within 30 days. Where a law allows a longer period, such as 45 days under the CCPA, we will tell you if we need that time. You may authorise an agent where the law lets you. If we refuse a request, we will explain why and how to complain.

Children

TimeIsMoney is not for anyone under 18. We do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.

Cookies

We use cookies and similar storage that are needed to sign you in, remember the session, store your language, and, for a guest, remember a currency label. If you arrive through an invite link or a campaign link, we also keep a small cookie for up to 30 days with the invite code or campaign name, so the friend who invited you can be credited when you sign up. We do not use third-party advertising cookies. Your browser asks before the microphone is used, and you can refuse that permission.

Security

Passwords are stored only as hashes. Session data is encrypted. Uploaded logos are stored on a private disk and are not published as open links. Books are scoped so one workspace does not read another. Sign-in and password reset are rate limited. You can add two-factor sign-in with an authenticator app; it is optional and off unless you turn it on. Changing your password signs you out of your other devices. Changes to money moves are recorded in an activity log that members of that book can read and nobody can edit; it stays as long as the book does.

No online service is perfectly secure. If we become aware of a breach that is likely to risk your rights, we will tell you without undue delay. Where the GDPR requires notice to a supervisory authority, we will give that notice within 72 hours of becoming aware of the breach.

Changes

We may update this policy. The effective date at the top will change. If a change is material, we will post it on this page and, where practical, notify the email on your account. If you do not agree, stop using the service and delete the account.

Contact

Write from the email on your account. We may ask you to confirm it is you before we act. We answer within 30 days, or sooner where the law requires it.