Your observations.
Your choice.
What is observed
The Windows app samples the foreground application and whether Windows is idle. The browser companion categorises the active site locally, after your agreement. It sends the desktop app a broad category and connection state. It does not read page contents, prompts or messages.
Categories are approximate. Recognised sites use a broad category; other sites appear as general browsing. This does not establish that browsing was research or work. Adding recognised sites can change the category mix in future observations; previous summaries are not rewritten.
What stays on your PC
Coarse timing intervals, categories and temporary application keys stay locally for up to 28 days. Stored observations contain no application names, full addresses, browsing history, window titles, screenshots or typed text. The browser necessarily reads the active hostname momentarily to choose a category.
What reaches your account
After the routine-summary agreement, the desktop app sends daily and hourly category totals, observed seconds, sustained application-run seconds, category-consistent sustained seconds, application-change counts and browser coverage counters. It also sends daily counts in application-run and category-visit duration bands (under 2, 2–10, 10–20 and 20+ minutes), counts of transitions between broad categories, and hourly counts of session starts after gaps of at least 30 minutes. These summaries reveal approximate times you are active. They do not contain an exact event timeline, application identifiers or addresses. Report day, time zone and revision accompany them. Collection starts only after personal consent. Existing team history is not imported. Daily summaries are encrypted in application storage and retained for up to 180 days. Your email, device label and account settings are also stored.
Your choice when upgrading
Existing daily-only installations continue under their original agreement. Installing an update does not enable hourly summaries. Choose “Enable routine insights” in the Windows app and review the new notice to add them. For an existing account, timing summaries start the next local day; earlier history is not reconstructed. A new pairing presents the full routine-summary agreement before collection begins.
Who can access it
Personal reports require your personal sign-in. Team leaders and the founder review screen cannot open them. Service operators may access production systems for support and maintenance; this is not end-to-end encryption. Hosting, sign-in email and any enabled payment service process the information required for their functions. No activity data is sent to an AI model to produce recommendations.
Reflection choices and trial records
Choosing an experiment saves its start time, reporting time zone, selected suggestion, fixed prior-week observations and comparison rules. Stopping it stops further evaluation. A dismissed or stopped suggestion is hidden for 28 days; no notes or diary are required. Experiment snapshots expire within the same 180-day activity limit. The first accepted day containing at least five recorded minutes records a one-time 30-day trial activation. Reinstalling does not reset it. Payments remain off in the private preview.
Reports are calculated by deterministic rules. A bounded memory cache reuses an account’s unchanged reflection for up to five minutes and is cleared on account deletion. It is not a public shared cache. We do not add advertising identifiers, session replay or report-opening analytics. Normal service records include sign-in attempts, device agreement, last successful upload and any payment state; they are not evidence that a report was useful.
Pause, disconnect or delete
Pause in the Windows app stops collection and uploads. Disconnecting in the dashboard rejects further uploads; the app stops when it next checks its connection. Delete local data in the app to remove observations on that computer. Deleting your dashboard account removes active personal reports, sessions and device credentials. Cancel an active subscription first and wait for confirmed cancellation before deletion, so a recurring charge is not orphaned. Existing reports, PDF exports, privacy controls and cancellation stay available after a trial ends, subject to the 180-day retention limit. Encrypted recovery backups, if enabled for a deployment, follow its disclosed backup retention; deletion from a live account does not rewrite existing backup archives. Personal preview deployment requires a documented backup retention policy before inviting external users.
How to use the advice
Recommendations describe patterns and possible experiments. They do not establish productivity, attention, performance, AI savings, or cause and effect. No data is shared with an employer by default and there is no individual score.
Questions or deletion help: hello@zerofeed.io.