Privacy Policy
Last updated 28 July 2026
This policy explains what Hourvine collects, why it collects it, who else sees it, and what you can do about it. It is written to be read, not to be survived.
Who we are
Hourvine is operated by Greypixel(“we”, “us”). For data protection purposes we are the data controller for the information described here.
Questions, requests, or complaints: hello@greypixel.com.
What we collect
| Data | Why |
|---|---|
| Name and email address | To create your account, sign you in, and send account and security emails. |
| Password | Stored only as a bcrypt hash. We cannot read your password. |
| Everything you put into Hourvine — tasks, timetable events, habits, focus sessions, notes and goals | This is the product. It is what your schedule and insights are built from. |
| Derived activity data — completion times, estimate accuracy, streaks, reschedule counts | To work out when you actually get things done and to plan realistically rather than optimistically. |
| Files and images you attach to Hourvine AI | To answer the question you asked about them. |
| Calendar feed URLs you connect | To import events from a calendar you link. We read those calendars; we never write to them. |
| Billing identifiers from Stripe (customer and subscription IDs, plan, status) | To know which plan you are on. Card details are handled by Stripe and never reach our servers. |
| A session cookie, and a record of when you were last active | To keep you signed in and to show plan usage. |
We do not use analytics, advertising, tracking pixels, or third-party profiling. We do not sell personal data, and we never will.
Cookies
Hourvine sets one cookie, hourvine_session, which keeps you signed in. It is strictly necessary for the service to work, so under the Privacy and Electronic Communications Regulations it does not require consent — but you should know it is there. There are no advertising or analytics cookies, which is why Hourvine has no cookie banner.
Who else sees your data
We use a small number of processors. They act on our instructions and cannot use your data for their own purposes.
| Service | What it receives | Where |
|---|---|---|
| OpenAI | Only when you use an AI feature: the relevant task, schedule and stats, your question, and any file or image you attach. | United States |
| Stripe | Payment and subscription details. Card data goes directly to Stripe. | EU / US |
| Vercel | Hosting and request logs. | EU / US |
| Our database and email providers | Stored account data; outbound account emails. | EU / UK |
| Calendars you connect | We fetch events from feeds you choose to link. | Wherever that provider is |
Worth being clear about: AI features send your content to OpenAI, outside the UK. We rely on the UK International Data Transfer Agreement and equivalent safeguards for those transfers. If you would rather nothing left our systems, you can simply not use the AI features — the scheduler, timetable, tasks, habits and focus tracking all work without them.
Legal bases
Under UK GDPR we rely on:
- Contract — to give you an account and provide the service you signed up for, including paid plans.
- Legitimate interests — keeping Hourvine secure and working, preventing abuse, and improving the product.
- Consent — optional extras such as browser notifications and email reminders. You can withdraw these at any time in Settings.
- Legal obligation — keeping records we are required to keep, such as tax records for payments.
How long we keep it
- Your content is kept for as long as your account exists.
- When you delete your account, your data is deleted immediately — see below.
- Login sessions and password-reset links expire on their own and are cleared once expired.
- Records we are legally required to retain, mainly payment records, are kept for as long as the law requires even after deletion.
Your rights
You can, at any time and free of charge:
- Get a copy of your data.Settings → Privacy & data → Download my data exports everything as JSON, instantly.
- Delete everything.Settings → Privacy & data → Delete account removes your account and all of its content permanently, and cancels any active subscription. It is immediate and cannot be undone.
- Correct anything inaccurate — most of it you can edit directly in the app.
- Object to or restrict processing, and withdraw any consent you have given.
Ask us anything about the above at hello@greypixel.com. If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk.
Security
Passwords are hashed with bcrypt and never stored in readable form. Sessions are random tokens stored only as hashes, so a copy of our database would not let anyone sign in as you. Traffic is encrypted in transit. Every query is scoped to the signed-in account.
No system is perfectly secure, and we would rather say that than pretend otherwise. If you find a vulnerability, please tell us at hello@greypixel.com before disclosing it publicly.
Children
Hourvine is not for under-13s. If you are under 18, please check with a parent or guardian before signing up. If we learn that we hold data for a child under 13, we will delete it.
Changes
If we change this policy in a way that materially affects you, we will tell you by email or in the app before it takes effect. The date at the top always reflects the current version.
See also the Terms of Service.