TIMEKEEPR · SECURITY
Built for client confidentiality.
Timekeepr runs on each person's computer. It sends activity text only to Anthropic's Claude API to draft time entries, and you review everything before it goes into your billing software. A&C Labs receives none of it.
A&C Labs isn't in the path. We receive none of your data.
Stays on your PC.
- Runs as you. It installs and runs as the signed-in Windows user, without admin rights.
- Reads text on the PC. Text recognition uses Windows' own OCR. Screenshots are read in memory only, never saved or sent.
- Encrypted at rest. Its data is stored under
%LOCALAPPDATA%\Timekeepr, encrypted with Windows DPAPI to that Windows user. - Deleted on a schedule. Screen text is deleted 7 days after a day is reviewed (14 if never reviewed). Time blocks (code, times and description) are kept a year, and learned shortcuts up to the newest 20,000.
- A few plain files. The code list, settings, a diagnostic log (counts and error types only) and the CSV for your billing software are stored as plain files.
Encrypted on its way to Claude.
- Only Anthropic receives it. Activity text goes over HTTPS through Anthropic's Claude API, under Anthropic's Commercial Terms on A&C Labs' own API account. It is not a consumer Claude account.
- US-based. Requests run only on US-based infrastructure.
- No training. Anthropic doesn't train models on API data.
- Deleted within 30 days. Anthropic deletes requests and responses within 30 days (up to 2 years if its abuse checks flag them). We plan to request zero data retention, so nothing is kept.
What leaves your computer.
| What is sent | When |
|---|---|
| Program name, window title, web address, the first 300 characters of the window's text and minutes, plus your code list (with descriptions) and a few past choices. | Sorting time into billing codes, through the day |
| The work block's timeline: each window's title, address and the text Timekeepr read from it. Personal stretches are removed first. | Drafting a description for a work block |
| Descriptions already written and the code name. No screen text. | Drafting the invoice line for an entry in your billing software |
| Program names, window titles and web addresses. No window text. | Suggesting a new code from a block |
Some things it never reads.
- The never-read list. Password managers by default, plus anything you add. Only the program name and time are kept.
- Private browser windows. Only the program name and time are kept.
- Paused, locked or asleep. It reads nothing, and it never reads the clipboard.
- No way in. Its only connection is outgoing HTTPS to Anthropic. Nothing listens for incoming connections, and there is no remote access or updater, so nothing can be pushed to it. You install each new version yourself.
Nothing goes to A&C Labs.
- No data export, auto-updater or usage tracking. The release build has none of them, and a release check blocks any build that contains them.
- We hold none of your firm's data. We have no access to your systems, so a breach at A&C Labs exposes no client data.
- Nothing extra to configure. We run the AI account, so your firm has nothing to set up.
You approve every entry.
- Drafts, not decisions. Timekeepr drafts entries; you approve everything before anything is billed.
- You import the file. It writes a file that you review and import into your billing software.
- No call audio. It doesn't record call audio.
If something goes wrong.
A breach at A&C Labs
We hold no firm data and have no access to your systems, so a breach at A&C Labs exposes no client data.
A compromised computer
Timekeepr keeps up to 14 days of screen text on each computer. Anything running as that Windows user, malware included, could read it. We can shorten this for your firm, down to deleting it once the day is reviewed.
Questions about your firm's data?
We're a small team and will answer any security question directly.
Email admin@aandclabs.com