Quizit Mobile S.L. · NIF B19540350
Privacy policy
Last updated: 5 October 2026
Tritmo is a simple time tracker operated by Quizit Mobile S.L., Spanish tax identifier B19540350. We are responsible for the personal information described here. You can contact us at jlmartin@quizit.es.
Your time, on your device
The mobile app stores project and subproject names, categories, optional client labels, time entries, notes and preferences in a local ledger. Local backups, CSV exports and NFC task mappings remain on your device unless you choose to share them. Keep sensitive information out of project names and notes when it is unnecessary.
The local database is not separately encrypted by Tritmo. Device protection and the security of exported files depend on your device settings and where you save them.
Accounts and the guest week
You can start anonymously for seven days. An online guest session has an account identifier even without an email address. We store the start and expiry of guest access on your device. Creating or linking a free account uses your email address and authentication information; an optional photo is stored with your profile. Your password is handled by our authentication service and is not available to support staff.
The end of the guest week restricts new tracking until you link an account. It does not automatically delete your account or time history, and it is not a Premium trial. We do not collect a date of birth: the initial age confirmation is stored locally.
Cloud synchronization and purchases
When you use Premium, supported projects, entries and settings are synchronized to Supabase and associated with your account. Synchronization requires connectivity; changes that have not synchronized can remain only on the device where you made them.
Apple or Google processes purchases through its store. RevenueCat helps verify Premium using your account identifier, product and transaction references, purchase status and expiry, together with technical purchase information. Tritmo does not receive your payment card number from these store purchases. The web tracker checks your verified account and subscription before allowing access.
RevenueCat records an approximate country from the connection IP alongside your account identifier for subscription statistics, including online guest accounts. It discards the IP after deriving the country. Tritmo does not request GPS location.
Optional notifications and feedback
Remote notifications are optional. After you enable them, Firebase Cloud Messaging processes an installation identifier and push token. Supabase associates the token and operating system with your account and stores your private notification inbox and read status. Permission can be withdrawn in system settings; notification contents can appear on your lock screen according to your settings.
Local reminders run on your device. If you submit feedback or vote for a suggestion, we store the feedback or vote with your account. Support messages contain the information you choose to send. Do not send passwords or payment credentials.
Web sessions and technical information
The website uses essential session cookies to keep you signed in, with a configured maximum lifetime of 30 days and renewal while the session remains valid. Your browser also handles interface state. Hosting and authentication providers process request information such as IP address, browser or device information and security logs to deliver and protect the service.
We do not run advertising or general screen and tap analytics. Subscription statistics and optional feature-vote totals help us improve Tritmo. Notification SDKs process technical version and quality information; Firebase Analytics and Firebase authentication are not enabled. We do not sell your data or use it for targeted advertising.
Why we use information
We use account, ledger and purchase information to provide the service you request and manage your subscription. Optional remote notifications and a profile photo depend on your choices; you can stop notifications or remove a photo. We use necessary security and support information to protect accounts, investigate failures and answer requests, based on our legitimate interests in a reliable service. We retain information required by applicable legal obligations when necessary.
Providing an email address is necessary for an email account. Cloud synchronization requires the data you choose to synchronize; optional photos, feedback and notifications are not required to track time locally. We do not use this information to make automated decisions with legal or similarly significant effects.
Service providers and international transfers
Supabase provides authentication, the database and private photo storage; Tritmo's production project is located in Ireland. Firebase provides push delivery. RevenueCat provides purchase verification. Vercel hosts the website. Resend provides authentication email delivery when email is sent, and Fastmail handles support email. Apple and Google also process information under their own store and platform policies.
A European project or email region does not mean all copies stay in Europe. Providers may process technical information, support data or backups in the United States and other countries. We use applicable processor agreements and transfer safeguards, including contractual safeguards where required. Fastmail's primary storage is in the EU with replicas and backups in the US. Provider privacy notices are linked below; contact us for information about the applicable safeguards.
Retention and account deletion
Your local ledger and exported files remain until you remove them. We retain account information and synchronized data while the account exists, including after guest access or Premium expires. Synchronization changes and receipts are currently retained with the account; expiry alone does not purge them. Support messages and security records are kept as needed to handle the request, protect the service and meet applicable obligations. Minimal billing-event references and digests also remain for duplicate-event protection; they contain no project or entry content.
You can delete your account in the app or on the account page without a Premium subscription. Server deletion removes the account and its owned application records, private photo and registered push tokens. The app reports success only after server confirmation. If deletion fails, retry or contact support. Removal of a Firebase installation is attempted after confirmation and retried on a later startup if connectivity prevents it.
Deletion does not remove backups or exports you have kept on other devices, cancel a store subscription, or erase records Apple, Google or a purchase provider must retain under their own obligations. Infrastructure backups and operational logs expire under the providers' applicable retention arrangements rather than being instantly rewritten. We do not promise that every external copy disappears immediately.
Your rights
You may request access, correction, deletion, portability or restriction, object to processing based on legitimate interests, and withdraw a choice that depends on consent. Write to jlmartin@quizit.es. We verify only the information reasonably necessary to protect your account and handle requests within the period required by applicable law; under the GDPR the usual period is one month, with permitted extensions explained to you.
You may also complain to your local supervisory authority or Spain's AEPD. Withdrawing optional choices does not affect prior lawful processing or prevent use of the local tracker.
Age and changes
Tritmo is intended for people aged 16 and over. If local law requires an adult's authorization, obtain it before using the service or making a purchase. Contact us if you believe a child below this age has created an account.
We update this page when practices change. Material changes will be explained in the app or through your account email where appropriate, and the date above will be updated.