HowLong Privacy Policy

HowLong is built and published by CG Software Studio, the brand operated by CG Software Services LLC. You can reach us at support@cgsoftwarestudio.com.

We collect the following categories of information:

• Tasks you create, stored locally on your device by default: task names, tags, notes, time estimates, actual timer durations, completion reasons, and history.
• App settings and preferences, stored locally on your device.
• Account information, only if you choose to create an account: your email address. Your password is handled by Google Firebase Authentication and stored only as a securely hashed credential — we never see or store it in plaintext.
• Cloud backup content, only if you create an account and enable backup: a copy of the local app data above (tasks, estimates, durations, history, and settings), uploaded to Google Cloud Firestore so you can restore it on a new device.

• If you use HowLong without an account, your data stays on your device and is never uploaded to us.
• We do not use third-party analytics, advertising, or tracking SDKs.
• We do not sell, rent, or share your personal data with third parties for marketing, and we do not build advertising profiles about you.

Information is used only to operate, maintain, and improve HowLong, to respond to support requests, and to meet legal and security obligations. We do not sell your personal information.

We rely on the following third-party services, which may process limited information to provide their functionality:

• Google Firebase — Provides optional account authentication (Firebase Authentication) and cloud backup storage (Cloud Firestore) when you choose to create an account. Your backup is stored in a per-user space, and security rules restrict access so only your authenticated account can read or write your own data. (privacy details)

HowLong does not use third-party analytics or crash reporting.

HowLong may send local notifications generated on your device, such as timer alerts. These do not require an account and do not transmit your data to us. You can disable notifications in your device settings at any time.

Local app data is kept on your device until you delete it or delete the app. If you enable cloud backup, your backup is kept while your account exists, and you can stop using backup at any time by signing out.

Deleting the app removes local data from your device. To delete your account and any cloud backup, email support@cgsoftwarestudio.com and we will delete your account data. You can use HowLong fully without an account and without giving us any personal information, and your in-app data can be viewed at any time.

Depending on where you live, you may have additional rights — such as access, correction, or deletion — under laws like the GDPR or CCPA. Contact us to exercise them.

HowLong is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them.

Account credentials and backups are handled through Google Firebase using industry-standard encryption in transit and at rest, and access to backups is restricted by per-user security rules. No method of transmission or storage is completely secure, but we rely on this trusted infrastructure to protect your information.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above and posting the revised policy on this page.

Questions about this policy or a privacy request? Email support@cgsoftwarestudio.com. See also our privacy overview.