Privacy Policy

Honest Day is operated by KMF Ventures LLC, a Wyoming limited liability company. The product is made by Ankur Shrestha. In this policy, "we" means KMF Ventures LLC.

Privacy questions and requests go to legal@honestday.app. For general help, use hello@honestday.app. A person reads both.

Your account. Your email address and name. If you sign in with a passkey, we store its public key. The private part never leaves your device. If Google sign-in is offered and you use it, Google shares your name, email address and profile picture with us.

Your workspace data. Whatever you and your team enter: time entries and notes, clients, projects, tasks, rates, budgets, timesheets, time off, expenses, invoices, estimates, contractor pay statements, team member names and emails, and the receipts and logos you upload.

Your clients' details. If you invoice clients, you enter their names, emails and billing details. See "Who processes your data" for who is responsible for that information.

Basic technical logs. Like any web service, our servers record requests: IP address, browser type, the page or API called, the time, and errors. We use them to keep the service running, fix bugs and block abuse, and keep them for a limited time.

Usage counts. We count how many assistant turns a workspace uses each day to apply plan limits. We do not keep your assistant conversations.

We use two cookies and nothing else:

• A session cookie keeps you signed in. It is set when you sign in and lasts up to 90 days.
• hd_ref is set only if someone opens a share link that starts with /r/. It holds the sharer's referral code for 30 days, so the person who shared can be credited if you create a workspace. It is not set for anyone else.

The app has no analytics, advertising or tracking scripts. The marketing site loads no third-party scripts, fonts or embeds either. Its only extra request goes to our own server to check whether you are already signed in, so the button can say "Open Honest Day" instead of "Start free". You can confirm this by viewing the page source.

• To provide the service you signed up for: tracking, approvals, invoices, reports, contractor pay.
• To sign you in and keep your account secure.
• To send email you need: sign-in links, invites, invoices and estimates you choose to send, Friday reminders and reports you switch on.
• To answer your questions, fix problems and stop abuse.
• To apply plan limits and to bill you through Polar.

We do not use your workspace data for advertising and we do not profile people.

Cloudflare runs the product. It hosts the app, the database, the file storage for receipts and logos, the live team view, and the system that sends email. It also runs the AI models described below.

Stripe is involved only when a workspace connects its own Stripe account so its clients can pay invoices by card. The workspace's Stripe account belongs to the workspace, and card details go to Stripe, not to us.

Polar handles billing for paid plans. Polar is the merchant of record, so it takes the payment, handles sales tax and VAT, and issues receipts and refunds. We send it only the billing contact's email address and the workspace id. Card details go to Polar and never touch our systems.

Services you connect. If you turn on Slack notifications or webhooks, or use the API, MCP server or Chrome extension, data flows to those places because you set it up that way.

Who is responsible for what. For your own account data, we are the controller. For data a workspace holds about its clients, team members and contractors, the workspace owner is the controller and Honest Day acts as a processor, handling it on the owner's instructions. If you are a client or contractor and want your data changed or removed, contact the workspace that invoiced or pays you, or email legal@honestday.app and we will pass it on.

We do not sell your data, and we do not share it for advertising. We may disclose information if the law requires it.

The assistant, and the fallback for the quick-entry box when it cannot parse your text, run on Cloudflare Workers AI. Each request includes only the workspace data needed to answer, limited to what the person asking is allowed to see. We do not use your data to train models. Our requests go through Cloudflare's AI Gateway, and Cloudflare's own terms cover how it handles them.

AI can be wrong. Check anything that matters, especially amounts and dates.

Honest Day does not take screenshots, record keystrokes, track apps or websites, or score activity. The product has no such feature and no setting that adds one. Hours are what people say they worked. If a timer runs while someone is away, the app asks them when they return whether to remove the time. It records nothing about what they did.

We keep your data while your account or workspace is active. You can export your time as CSV at any time.

To delete your account or workspace, email legal@honestday.app. We will delete it within 30 days. Copies in backups roll off on the normal backup schedule after that. We may keep a minimal record where the law or a dispute requires it.

Workspace owners can also remove members and their entries from inside the app.

• Everything is served over HTTPS.
• Sign-in uses passkeys or a one-time email link. There are no passwords to leak. Email links expire after 15 minutes and work once.
• Stripe keys that a workspace connects are encrypted per workspace with AES-GCM.
• The assistant and the API only see what the person using them is allowed to see.

No service is perfectly secure, and we do not claim any security certification. If you find a problem, please email hello@honestday.app.

Honest Day is a work tool and is not for anyone under 16. We do not knowingly collect data from children. If you think we have, email legal@honestday.app and we will delete it.

Cloudflare runs a global network, so your data may be processed in countries other than your own, including the United States. We rely on Cloudflare's own safeguards for that.

You can ask to see the data we hold about you, correct it, export it, or delete it. Depending on where you live, the law may give you more, such as the right to object to certain processing or to complain to your local data protection authority. Email legal@honestday.app and we will respond within 30 days.

If we change this policy in a way that matters, we will update the date at the top and tell workspace owners by email or in the app before the change takes effect.

KMF Ventures LLC, a Wyoming limited liability company.
Product by Ankur Shrestha.
Privacy requests and legal notices: legal@honestday.app
General support: hello@honestday.app