Effective 5 September 2026

Time2Business privacy policy

The short version

Time2Business does not collect, transmit, sell or share any personal data. It has no account system, no analytics, no crash reporting, no advertising and no network connection of its own. Everything you type into it stays on your Mac and, if you choose a cloud folder for backups, in your own Dropbox or iCloud Drive.

What the app stores, and where

• Your books. Transactions, invoices, contacts, deals, tax estimates and settings live in a single database file inside the app's private container on your Mac (~/Library/Containers/com.time2football.time2business/; the direct-download build keeps it in ~/Library/Application Support/com.time2football.time2business/). The file never leaves the Mac unless you copy it yourself.
• Backups, PDFs, exports and receipts. During setup you choose a "Books" folder, normally inside your Dropbox or iCloud Drive. The app writes finished files there: daily backups, invoice PDFs, the year-end tax packet, CSV exports and any receipts you attach. Those files sync under the terms of the cloud service you picked; the app itself does not talk to Dropbox or Apple.
• Your password. The app lock password and the answers to your two security questions are stored only as salted PBKDF2 hashes in the same local database. The plain text is never written anywhere and cannot be recovered by the developer.
• Touch ID. When you turn on "Unlock with Touch ID", the app asks macOS to verify you. Your fingerprint never reaches the app; macOS only answers yes or no.
• Sign in with Apple. Optional. If you link an Apple ID, the app stores the opaque user identifier Apple returns (and the name or email Apple shares on the first sign-in, if you allow it) so it can recognise the same Apple ID on the lock screen. A Hide My Email relay address is used only for signing in and never appears on invoices or in settings. Nothing is sent to any server by the app; Apple's own privacy policy governs the sign-in itself.
• Bank data. You download a statement file from your bank yourself and import it. The app never asks for bank credentials and never connects to a bank.

What the app does not do

• No data is uploaded to the developer or to any third party.
• No usage analytics, telemetry, cookies, identifiers or crash reports are collected.
• No advertising, tracking or fingerprinting of any kind.
• No network requests. The app contains no code that opens a connection: no sync, no update check, no analytics endpoint. (The App Store build carries the standard "outgoing connections" sandbox entitlement only because macOS's web view component refuses to display the app's own screens without it.)

Notifications

Reminders (an unpaid invoice, a quarterly tax date, a follow-up) are local notifications posted by the app on your Mac through macOS Notification Center. They are generated from your own data on the device; there is no push service and no server involved. You control them under Settings > Notifications and in System Settings > Notifications.

Email

"Open in Mail" hands a draft (subject, text, recipient and the invoice PDF) to your own mail app through the macOS share sheet. Nothing is sent until you press Send in that app, and the app never sees your mailbox.

Children

Time2Business is a bookkeeping tool for a small business. It is not directed at children and collects no data from anyone.

Changes

If the app ever starts collecting anything, this page and the App Store listing's privacy "nutrition label" will be updated first, and the change will be described in the release notes.

Contact

David Hendricks, DH Film Design — david@dhfilmdesign.com