How long we keep your data
How long Timemark keeps photos and metadata, and what happens when you delete a photo, a team, or your account.
We keep personal data only as long as we need it to provide Timemark, or as the law requires. This page summarizes how long different data is kept and what deletion actually does. For the legal detail, see the Privacy policy.
What we keep, and for how long
Section titled “What we keep, and for how long”| Data | Where it lives | How long |
|---|---|---|
| Photos captured locally without uploading to Timemark | Your device only | Until you delete them. Not held by Timemark |
| Personal Cloud Backup photos | Your own Google Drive or OneDrive | Controlled by you in your cloud account |
| Team photos | Timemark team storage, hosted in the United States by default | Business and Enterprise: no preset expiry; kept while the team exists unless the team deletes them. Free Teamspace: stored for 12 months by default; Timemark emails the Team Owner 1 month before automatic deletion. Deleted when the team is deleted |
| Project docs | Timemark team storage, hosted in the United States by default | While the team keeps them. Deleted project docs are not kept in a Timemark trash |
| Checklist records | Timemark team storage, hosted in the United States by default | Kept with team data while the Teamspace remains active or within the applicable Free Teamspace retention period. Submitted records may be locked by product rules |
| Attendance records | Your device | Last 45 days on device, then removed automatically |
| Attendance records (in a team) | Timemark team storage, hosted in the United States by default | Kept with team data while the Teamspace remains active or within the applicable Free Teamspace retention period |
| Photo Code verification records | Timemark verification storage. Records are located by Photo Code, not by user identifier | Photo Codes do not expire by design. You can email privacy@timemark.com with the Photo Code to request deletion of stored photo metadata associated with that code, such as time, place, coordinates, and device model information. After deletion, Photo Code verification will no longer return that record |
| Time synchronization requests | Timemark | No separate time-synchronization log or standalone retention period |
| App Reports share links | Timemark link storage | 30 days by default, or until you manually revoke the link |
| Teamspace photo links | Timemark link storage | Until the selected 7-day expiry, if enabled; otherwise while the link remains active and the shared project still exists |
| Account data | Timemark | While your account is active, then 30 days after account deletion unless a longer period is required by law, security, fraud prevention, or dispute handling |
| Billing records | Payment providers and merchants of record, such as Stripe, Waffo, Apple, or Google | Retained by the payment provider under its own legal, tax, accounting, and dispute rules. Timemark does not store separate billing records |
| Crash and diagnostic data | Firebase | Up to 90 days |
| Webhook delivery logs | Timemark | No preset expiry while the Teamspace exists |
If a subscription ends
Section titled “If a subscription ends”Canceling a paid subscription is not the same as deleting your data.
For Plus, your personal photos stay where they already live: on your device and, if you enabled Cloud Backup, in your own Google Drive or OneDrive. Timemark does not delete those copies because Plus ended.
For Business, the team keeps Business features until the end of the paid period. After that, the Teamspace returns to Free limits. Existing projects, photos, project docs, Checklist records, templates, members, and team settings stay in the team, but Free limits apply. Business team photos have no preset expiry while the team exists. Team photos in a Free Teamspace are stored for 12 months by default, and Timemark emails the Team Owner 1 month before automatic deletion.
Enterprise data residency does not change retention by itself. It changes where in-scope Teamspace data is stored for that Enterprise data residency option.
What deletion does
Section titled “What deletion does”- Deleted photos are not kept in a Timemark trash. Export anything you want to keep first.
- Deleting from your device removes only the device copy. It does not affect the team copy or any synced cloud copy.
- Deleting from a team removes only the team copy. It does not delete a member’s device copy, and it does not delete copies already synced to Google Drive or SharePoint.
- Deleting a Photo Code record removes the verification record located by that code, not the photo file itself. Because Photo Code records do not store a user identifier, email privacy@timemark.com with the Photo Code or enough information to locate it. We delete the stored photo metadata associated with that code, such as time, place, coordinates, and device model information. After deletion, Photo Code verification will no longer return that record.
- Deleting a team removes the team, its projects, photos, project docs, Checklist records, and templates from Timemark. Export first.
- Account deletion: personal account data is kept for 30 days after deletion. If you are the Team Owner, transfer ownership before deleting your account. A Business subscription belongs to the Teamspace, so deleting an account does not cancel the subscription; cancel it separately from Settings → Plan & Billing.
Common pitfalls
Section titled “Common pitfalls”- Because synced copies in Google Drive or SharePoint are outside Timemark, deleting inside Timemark never removes them. Remove those in the cloud service itself.
- Attendance records older than 45 days are removed from the device automatically. Export them first if you need a longer record.
- Canceling Business does not delete team data immediately. It downgrades the team to Free after the paid period, so Free limits apply, including 12-month default retention for team photos.
- Teamspace photo links without a 7-day expiry can remain active while the shared project exists. They stop working if the underlying photo or team is deleted. Use expiry when access should be temporary.