Privacy policy

andeye Ltd (SC665704, Scotland) makes local-first apps, including Time&I, an automatic time tracker for the Mac, and Money&I, a financial tracker for the Mac. This policy covers all our apps — current and future, unless one ships its own policy — and our websites: andeye.com and its subdomains, including the conference archive at conferences.andeye.com and the contact form at contact.andeye.com. Last updated 1 August 2026.

The short version

Our apps are local-first. What you do on your Mac stays on your Mac. We run no servers that receive your activity, your time entries, your transactions, or your accounting data, and we never use your data to train AI models.

Time&I

To attribute your time, Time&I observes activity on your Mac: the frontmost app, window titles, and browser tab addresses. This information is processed and stored only on your Mac, in a local database under your user account. It is never transmitted to andeye Ltd or anyone else.

If you connect Time&I to a service you use, such as OpenProject or Xero, data flows directly between your Mac and that service over an encrypted connection. We are not in the middle: your credentials and the data exchanged never pass through andeye Ltd.

Xero connections

If you connect Time&I to Xero, it reads your Xero projects and tasks and writes the time entries you approve. Sign-in uses OAuth; Time&I never sees your Xero password, and access tokens are stored in the macOS Keychain on your Mac. Xero data is cached locally on your Mac only, is never transmitted to andeye Ltd, and is never used to train, fine-tune, adapt or enhance any AI or machine-learning model. You can disconnect Time&I at any time from within the app or from your Xero account’s connected apps page, which revokes its access.

Money&I

Money&I keeps your financial records on your Mac. If you connect a bank account, you authorise the connection yourself through Enable Banking, an EU/UK-regulated open-banking provider; we never see your bank credentials. Your transaction data is stored locally on your Mac and, if you choose, synced between your devices through your private iCloud (CloudKit) database — under your Apple ID, not ours. It is never transmitted to andeye Ltd, and is never used to train, fine-tune, adapt or enhance any AI or machine-learning model. You can disconnect a bank at any time from within the app.

Our websites

Our sites set no advertising cookies. All of them are served through Cloudflare, which processes visitor IP addresses to deliver pages and block abuse, and may set strictly necessary security cookies as part of that protection.

We measure how the sites perform with Cloudflare Web Analytics. It works without cookies and stores nothing on your device; it does not fingerprint you or follow you across sites. We see aggregate visit counts and performance timings, not individuals.

If you buy a licence, payment is handled by our merchant of record, who acts as the seller and processes your payment and billing details under their own privacy policy; we receive what we need to issue your licence (your email address and licence details) and nothing more.

The conference archive

conferences.andeye.com preserves pages from conferences we ran. Those pages load fonts and scripts from public content-delivery networks (Google Fonts, cdnjs, Font Awesome and similar), which receive your IP address when the page loads but set no cookies. Embedded Vimeo videos are set to Vimeo’s Do Not Track mode, which tells Vimeo not to set cookies or collect viewing analytics. Some archived pages embed LinkedIn posts: if you view one, LinkedIn receives your IP address and may set its own cookies under its own privacy policy. A few archive pages can set a first-party cookie remembering a dark-mode choice, only if you make one.

The contact form

Our sites share one contact form, at contact.andeye.com. It is protected by Cloudflare Turnstile, which may show you a challenge and receives your IP address to check the submission is human. What you enter, your name if you give it, your email address, your message, any options you tick, and which of our sites sent you, is delivered to our mailbox by Resend, our email delivery provider, and is not stored anywhere else; from there it is held as correspondence as described under “What we hold about you”. Messages may be read with AI assistance to help us triage and reply; they are never used to train AI models. If you tick the optional marketing box we will use your email address for occasional product news until you ask us to stop; otherwise we use what you send only to answer you.

Telemetry

Our apps contain no analytics or tracking. If one crashes, nothing is sent unless you choose to send us a report yourself.

What we hold about you

Unless you contact us or buy a licence, normally nothing. If you do, we hold your correspondence and licence record for as long as needed to support you and to meet legal obligations (such as tax records).

Your rights

Under UK data protection law you can ask us what we hold about you, and ask for it to be corrected or deleted: use the contact form. If you’re unhappy with our answer you can complain to the Information Commissioner’s Office (ico.org.uk).

Changes

If this policy changes we will update this page and the date at the top. Material changes will be called out in the app’s release notes.