Tock, the app
Everything you record in Tock, your clients, projects, to-dos, time, rates and notes, is kept in a database on your Mac. It is not sent to us and we cannot read it.
Tock has no analytics. It does not report what you do in it or how often you open it.
To notice that you have stepped away, Tock asks macOS how long ago the keyboard or mouse was last used. It does not read what you type or what is on your screen.
Tock checks for new versions by fetching a file from usetock.com, and downloads a new version from download.usetock.com when you install it. Like any request to a website, each reaches our host with your IP address and the version of Tock you run. They carry nothing else about you and nothing you have recorded. You can turn the check off in Settings.
If Tock crashes, it offers to send us a report the next time it opens, and you can send one at any time, with or without a crash, from Report a Problem in its settings or with tock-cli. A report holds macOS’s own record of the crash, with your name, your Mac’s name and the identifiers of your Mac taken out; the versions of Tock and macOS; the model of your Mac; and a note and an address to reply to, if you write them. It never holds what you record in Tock or your licence key. In the app the whole report is shown to you first, and nothing is sent unless you press Send; tock-cli shows it too, and sends only when you, or an agent you run it from, tell it to. It reaches us as an email at crash@usetock.com. We use a report to find and fix the fault, and for nothing else.
Tock checks your licence key on your Mac, and never asks a server whether it works. When you activate a key on a Mac, Tock sends one message to buy.usetock.com: the key, with your name, your email address and the order number in it, and a one-way code for that Mac, which is different for every licence and from which nothing about the Mac can be read. Like any request to a website, it reaches our host with your IP address. If the message cannot be delivered, Tock sends it again later, until our service has taken it. Activating never depends on the answer, and Tock works the same without one. It sends nothing else about your licence. We keep usetock.com for as long as a version of Tock that sends this may run.
The Buy button opens a web address that carries the day of your trial and your version of Tock. The “Not for me” button’s address carries the number of days you used Tock, the day of your trial and the version. Nothing is sent unless you press the button, and nothing else is on the link.
Buying a licence
Tock is sold by Link, a part of Stripe, which is the seller whichever way you pay, Apple Pay included. You do not need a Link account. Link takes the payment and holds your payment details under its own privacy policy. We never see your card number.
With each sale we receive your name, your email address and your country.
Your licence key holds your name, your email address and the order number, so that the key says whose it is. Anyone you give the key to can read them.
The email that brings your key is delivered by Resend. The service that makes the key, at buy.usetock.com, runs on Cloudflare. That service keeps one record: for each licence, the codes of the Macs it was activated on, each with the day it was first seen, so that we know how many Macs a licence is used on. It does not keep the name or the email address the key holds, and the record is never used to end a licence. For anything else about a purchase it reads Stripe.
The page that activates a key reads it in your browser and does not send it. Tock sends it when it is activated, as “Tock, the app” says.
If you ask Link to delete your data, your key goes on working. We may then no longer be able to look the purchase up, for example to send you the key again.
When a purchase is refunded in full, or a dispute raised with your bank is decided against us, its order number goes on a list inside later versions of Tock, so that the key stops working. The list holds order numbers and nothing else.
The website and the waitlist
usetock.com sets no cookies, loads no scripts from other companies and runs no analytics.
It is served by Cloudflare, which handles each request, your IP address included, to deliver the page and to keep the site safe from abuse.
When you join the waitlist on usetock.com, we send one email with a link to confirm your address. Until you confirm, we keep no list with your address on it: the link itself carries the address, readable by anyone who has the link, and stops working after 7 days. Resend, which delivers that email, keeps its own record of having sent it. When you press the button on the page the link opens, your address is added to our list at Resend, along with whether you offered to beta test.
We use that list to write to you about Tock: when it is released, about the beta if you offered to test, and now and then with news of it. We use it for nothing else and give it to nobody, and you can leave it at any time by writing to us.
When you write to us
If you email us, we keep your message and your address so that we can answer and can find the conversation again.
How long we keep it
- The waitlist: until you ask to leave it.
- Emails and crash reports: up to two years after the conversation ends or the fault is fixed.
- The record of a sale: as long as tax and accounting law requires.
- The order number of a refunded purchase, in Tock’s list: for as long as Tock is updated, since every later version has to refuse that key.
- The Macs a licence was activated on: for as long as we sell Tock, or until you ask us to delete yours. We then keep the order number alone, so that we never count that licence again.
- Requests to the website: as long as Cloudflare keeps its own logs. We keep none of our own.
Who else handles your data
- Link and Stripe, for payments, and Apple if you pay with Apple Pay.
- Resend, for the emails we send and the reports Tock sends us, which it keeps for 30 days.
- Cloudflare, for the website and the licence service at buy.usetock.com.
- Gomailify, a service of Mercata Sagl in Switzerland, and Google’s Gmail, for the messages and crash reports you send us. Gomailify passes each message on and deletes its copy within 7 days. The mailbox is at Gmail.
We do not sell personal data, and we give it to nobody else unless the law requires it.
SHP Ideas, LLC is in the United States. These companies store and handle data there and in other countries. Cloudflare, Stripe and Resend each say they are certified under the EU-US Data Privacy Framework, with its UK and Swiss extensions, and keep the European standard contractual clauses in their terms beside it.
Your choices
What you record in Tock is already yours: you can export it, edit it and delete it in the app.
Write to support@usetock.com to see, correct or delete what we hold about you: your place on the waitlist, your emails to us, the Macs your licence was activated on, and the record of your purchase where the law lets us delete it.
Wherever you live, you can ask us for a copy of your data in a form you can take elsewhere, ask us to stop or limit a use of it, and take back a consent you gave, such as your place on the waitlist. You can also complain to the data protection authority of your country.
Who is responsible, and on what grounds
SHP Ideas, LLC decides how the data described here is used, and is the one to write to about it. Link is responsible for the payment details it holds.
For readers in the European Union and the United Kingdom, these are the grounds the law asks us to name:
- Your consent: the waitlist, and a crash report you choose to send.
- A contract with you: making your licence key and sending it, and refunds.
- A legal duty: keeping the record of a sale.
- Our legitimate interest in answering people who write to us and in keeping the site and the licence service safe from abuse, and in refusing the key of a purchase that was refunded.
- Our legitimate interest in knowing how many Macs a licence is used on, to decide what to build: the Macs a licence was activated on.
Changes
When this policy changes, the date at the top changes with it. A change to what Tock itself sends is also said in the notes of the release that makes it.
Questions
Write tosupport@usetock.com.