Privacy policy

Who is responsible

Fibers is made by Ktesio. Ktesio is the controller for the personal data this policy says we process, such as what the website and its notify list collect and the email you send us. The Fibers app sends us no personal data; the section on the app says what it keeps on your Mac and where the rest goes.

• Ktesio, KVK 42172743
• Post address: Postbus 21534, 3001 AM Rotterdam, the Netherlands
• Email: privacy@getfibers.app

Questions about this policy or about your data go to the email address above, and anything else, help with the app included, to hello@getfibers.app. This policy covers the Fibers app for Mac and the getfibers.app website, including its notify list.

The short version

The Fibers app

Fibers is a menu-bar app for the Mac that tracks time in your own Fibery workspace. It talks to Fibery directly from your Mac, with your own sign-in. We run no server for it, there is no Fibers account, and the app sends us nothing, so we hold none of the data it handles. This section says what Fibers keeps on your Mac and where the rest goes.

On your Mac

Fibers keeps what it needs between launches in its own sandboxed folder on your Mac: the workspace you signed in to, with your name, email address and role as Fibery reports them; the databases you track, with who set them up, and any you hid on this Mac; recent items and the items you found or created, with their titles; a paused or running timer; changes still waiting to be saved to Fibery; your settings, including which iCloud account you turned sync on for, if you did; and what the App Store last confirmed about your subscription. It stays on your Mac, and we can’t see it.

Your Fibery sign-in is kept in your Mac’s Keychain, for this Mac only: it never syncs to your other devices, and each device signs in on its own. Sign Out, in Settings → Fibery, removes it from the Keychain. The rest stays, so signing in again picks up where you left off.

While a timer runs, Fibers reads how long it has been since you last used the keyboard or mouse, so it can ask what to do with time you spent away from the Mac. It reads no keys, text or screen, and the figure stays on your Mac. Settings → General → Ask about idle time after → Never turns this off.

In your Fibery workspace

Fibers connects to Fibery’s sign-in and to Fibery’s hosted MCP server, at mcp.fibery.io, which it uses for everything it reads and writes in your workspace. To sign you in, it opens Fibery’s own sign-in page in your browser, where you choose the workspace and allow Fibers in; Fibers never sees your password. Fibery then gives Fibers tokens that let it act as you, with your own access to the workspace, and Fibers keeps them in the Keychain.

Fibers reads your name, email address and role, the workspace’s spaces, databases and fields, and the items and sessions you work with, including their titles, states and totals, who tracked each session and who set up each tracked database. Once you approve a setup, it creates the Fibers space with its two databases, Time Session and Tracked Database, and three fields on each database you track, and records each tracked database in Tracked Database, with the names of its fields and the time zone its day follows. For each session it saves the item, when the session started and ended, its length, its day and the time zone that day is counted in, the name of your Mac, a random number that keeps a save from being made twice, and a name made of the item’s title and the start time. It also saves the totals on items, and the titles of items you create or rename in Fibers.

All of this is ordinary Fibery data in your workspace: the people who can see the Fibers space can see the sessions, each of which records who tracked it. As with any server, Fibery’s servers see your Mac’s IP address. Fibery stores and processes your workspace under its own terms and privacy policy, and under the settings of whoever runs your workspace. Fibers gives us no access to it.

iCloud, if you turn sync on

Fibers syncs nothing until you turn sync on, during setup or in Settings → Sync. It then keeps these in your own iCloud account, in iCloud’s key-value storage: the address of your workspace; the database you have selected there; your recent items, with their titles; four preferences (the seconds and the item’s title in the menu bar, when to ask about idle time, and whether to show only your own time); and, while a timer runs, which item it is on and when it started. Each value notes the name of the Mac that saved it, a random number for that copy of Fibers, and when it was saved. It never holds your Fibery sign-in, your sessions or any totals.

Apple stores it, under its own terms and privacy policy, and Fibers sends none of it to us. While sync is on, Settings → Sync → Delete Fibers Data from iCloud… lets you stop syncing on that Mac and remove Fibers’ data from iCloud; another Mac that still syncs saves its own settings there again.

The subscription

You buy the subscription through the App Store, in Apple’s own purchase sheet, with your Apple Account. Apple takes the payment and handles the purchase under its own terms and privacy policy. Fibers asks the App Store, on your Mac, whether you’re subscribed, and keeps the answer on your Mac so that it also works offline. It sends nothing about your subscription anywhere: not to us, not to Fibery and not to iCloud. Its log notes only the kind of answer, such as “free trial”, never a transaction, your Apple Account or a price.

Apple gives us, as it gives every developer, reports on sales and subscriptions in App Store Connect, such as which plan was bought, in which country and when, with a random number Apple assigns in place of each subscriber. They don’t include your name, your email address or your Apple Account.

The log for support

Fibers writes messages about what it does to the system log on your Mac. Export Log…, in Settings → About, saves the messages Fibers wrote since it was last opened, up to the last 24 hours, as a plain-text file wherever you choose, and only when you ask. Fibers never logs passwords or sign-in tokens, and the file shows names, email addresses, workspaces, items and Fibery’s own messages as “<private>”. It also notes the versions of Fibers and macOS. You can read all of it before you send it. Fibers sends it nowhere: it reaches us only if you attach it to an email, and we then handle it as part of your email (see Email).

What the app doesn’t do

Fibers has no analytics, no advertising and no tracking, no crash reporting of its own, and no code from other companies built in: it uses only the Mac’s own frameworks. It asks macOS for no access to your contacts, calendars, photos, location, camera, microphone or files, beyond the one file you choose when you save its log.

macOS can share data with app developers itself. If you’ve turned on Share with app developers, in System Settings → Privacy & Security → Analytics & Improvements, Apple may give us reports of Fibers’ crashes and statistics about its use, under Apple’s own privacy policy. Turning that setting off stops it.

Visiting the site

The site is hosted on Cloudflare Pages. When your browser asks for a page, Cloudflare receives the technical data that comes with every web request: your IP address, the address of the page, the time, your browser’s user agent and, if your browser sends it, the page that linked to this one. Cloudflare uses this data to deliver the page and to protect the site against attacks.

This site keeps no request logs of its own, and the function behind the notify form logs only an outcome code, never what you send, so we keep none of this data. Cloudflare keeps its request logs and security data for the periods its own retention policies set, as our processor. Its traffic figures are totals, such as requests per day, but its security logs can show single requests, with their IP address, page and user agent. We don’t use them to identify visitors.

Legal basis: our legitimate interest in running a secure website that stays online (Article 6(1)(f) GDPR).

The notify list

The form on the home page asks for one thing: your email address. When you send it, a small server function on Cloudflare checks the spam protection result (see below), saves your address in a database that Cloudflare runs for us inside the European Union, and emails us a note that someone signed up. The note doesn’t contain your address. The function also sends you an email to confirm your sign-up: one for each sign-up, and never more than one a day to the same address.

You don’t have to give your address; without it we simply can’t tell you when Fibers launches. If the form can’t run in your browser, you can email hello@getfibers.app instead, and we’ll add your address by hand.

We store your address, the date and time, which of the home page’s two forms you used, the language of the page (English, Dutch, French, Spanish or German), which version of this policy you saw (its date, at the top of this page), and when we last sent you a confirmation. We don’t store your IP address or anything about your browser.

We use your address for that confirmation and for one email, when Fibers launches, both in the language of the page you signed up on. That email says who we are and how to come off the list. There is no newsletter, and we never sell your address.

Legal basis: your consent (Article 6(1)(a) GDPR; for the launch email, Article 11.7 of the Dutch Telecommunications Act). You can withdraw it at any time, by replying to the confirmation or by writing to privacy@getfibers.app. Withdrawing doesn’t affect what we did before.

How long it’s kept: we take your address off the list within 30 days of the launch email, or as soon as you withdraw. We keep a short record of each time you agreed or withdrew for up to five years, because the Dutch regulator, the ACM, can ask us to prove consent for that long. A record of agreeing holds your address, the date and time, the form you used and the page’s language (neither if you asked us by email) and the policy’s version; a record of withdrawing holds your address and the date and time. We use these records for nothing else and never email you from them. Deleted entries leave the database’s backups within 30 days.

Legal basis for that record: our legitimate interest in being able to prove your consent if the ACM asks (Article 6(1)(f) GDPR).

Email

Email to and from an @getfibers.app address goes through Cloudflare: inbound through Email Routing, and our replies, the confirmation, the launch email and the note the form sends us, through its Email Service. Cloudflare, Inc. is a US company; these transfers to the United States rest on its certification under the EU-U.S. Data Privacy Framework, with the EU standard contractual clauses as a fallback. The provider that hosts our mailbox stores the email delivered to it, including your message and our replies, mainly in the United States, under the EU standard contractual clauses.

When you write to us, about Fibers or anything else, we use your message, and anything you attach to it such as Fibers’ log, only to reply to you or, if you ask to join the notify list, to add you to it.

Legal basis: steps you ask for before a possible contract (Article 6(1)(b) GDPR), and our legitimate interest in answering the people who write to us (Article 6(1)(f) GDPR). A request to join the notify list rests on your consent, as above.

How long it’s kept: we delete your message, with anything you attached to it, from our mailbox within 12 months of our last message to each other. If it leads to business with us, the parts that belong to our business records are kept for the seven years that Dutch tax law requires. To have it removed sooner, write to privacy@getfibers.app.

Spam protection on the form

The notify form uses Cloudflare Turnstile to check that a person, not a bot, is sending it. Turnstile loads only on the home page, and only once you start using the form. It runs from Cloudflare’s own domain, challenges.cloudflare.com, and processes signals from your browser such as your IP address, TLS fingerprint and user agent. It doesn’t read what you type into the form. We don’t pass your IP address to Turnstile ourselves, and we don’t store its result.

Cloudflare processes these signals on our behalf to protect the form. It also uses them, as a controller in its own right, to improve Turnstile’s bot detection, and keeps them for the periods its own retention policies set; we keep none of them. The details are in Cloudflare’s Turnstile Privacy Addendum.

Turnstile only decides whether the form can be sent. We make no other decisions about you by automated means.

Legal basis: our legitimate interest in keeping automated spam out of our list and our mailbox (Article 6(1)(f) GDPR).

Where your data is processed

The notify list is stored in a Cloudflare D1 database restricted to the European Union: Cloudflare runs and stores that database only inside the EU.

Cloudflare runs a global network. Your request is handled by one of its data centres, normally one close to you, so for most visitors in Europe the page is served from Europe. The function that receives a sign-up runs in that same data centre. Some processing can still take place in the United States, such as storing request logs and security data, the server-side step of the spam check, and our email.

Cloudflare, Inc. is a US company. For transfers to the United States it relies on its certification under the EU-U.S. Data Privacy Framework, with the EU standard contractual clauses as a fallback.

The provider that hosts our mailbox processes the email it stores mainly in the United States, and those transfers rest on the EU standard contractual clauses.

The app sends us nothing, so we process none of the data it handles, anywhere. Where Fibery processes your workspace, and where Apple processes iCloud and App Store data, is for each of them to say, in their own privacy policies.

Who receives your data

The data we process, from the website, the notify list and email, goes to:

• Cloudflare, Inc. hosts the site, runs the spam check, stores the notify list in its D1 database in the EU, routes email to us, and sends our replies, the confirmation, the launch email and the note the form sends us. It does this as our processor, under Cloudflare’s data processing terms. For Turnstile it also acts as a controller in its own right (see Spam protection on the form).
• The provider that hosts our mailbox stores the email delivered to it, including your message and our replies. It stores that email mainly in the United States, under the EU standard contractual clauses.

Nobody else. We don’t sell your data, and we email you only when you’ve asked us to: the confirmation, the one email when Fibers launches, and our replies when you write to us.

The app sends no data to us, or to anyone working for us. It sends data only to the services you use it with: your Fibery workspace and, if you use them, iCloud and the App Store, each under its own terms.

Your rights

You can ask us for a copy of your personal data, and ask for it to be corrected or deleted. You can ask for processing to be restricted, or for your data in a portable format. Where processing rests on our legitimate interest, you can object to it, and where it rests on your consent, you can withdraw it at any time. Write to privacy@getfibers.app and we’ll reply within one month, as the GDPR requires.

The app sends us nothing, so we hold none of the data it handles to give you, correct or delete, unless you’ve emailed it to us. That data is yours to manage where it is: in an item’s details in Fibers you can change or delete the sessions you tracked, and in Fibery whatever your access allows; Sign Out removes your sign-in from your Mac; Settings → Sync can delete what Fibers synced to iCloud; and Apple answers requests about your Apple Account and your purchases. For what your workspace holds, Fibery, or whoever runs your workspace, can help.

If you think your data is being handled wrongly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

Changes

If what the app or the site collects changes, this page changes with it. The date at the top shows when it last changed, and it is the version we record with each sign-up to the notify list.