Timely Automatic Time Tracking Security & Privacy Scorecard
Android
Work activity and usage patterns are collected by Segment and Firebase Analytics. Intercom can link in-app behavior to a user's support profile. Data transmission is well protected, but multiple analytics services receive information about how the app is used.
Best for
Professionals who want automatic time logging
Avoid if
You prefer your activity not shared with analytics platforms
Findings
- 0 critical
- 3 high
- 4 medium
- 2 low
- 2 info
1 issue identified across security and privacy analysis.
Top security issues
- App WebViews Load URLs Without Origin Validation
- Deep Link Handlers Accept Arbitrary URLs Without Validation
- Jetpack Compose PreviewActivity Exported in Production Build
Top privacy issues
- Pre-Consent Analytics and Tracking Initialization
- PII Sent to Third-Party Analytics Without Consent
- No Consent Management Implementation
Full analysis
Timely Automatic Time Tracking
Version: 2.42.0 | Analyzed: March 13, 2026
What This Means for You
Work activity and usage patterns are collected by Segment and Firebase Analytics. Intercom can link in-app behavior to a user's support profile. Data transmission is well protected, but multiple analytics services receive information about how the app is used.
Recommendation: Trustworthy
Best For: Professionals who want automatic time logging
Avoid If: You prefer your activity not shared with analytics platforms
Key Findings
Data Security - 0 findings
Network Security - 0 findings
Code Safety - 0 findings
Privacy - 5 findings (3 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
The app collects work activity patterns and in-app usage behavior. Segment Analytics and Firebase Analytics receive data about which features are used, how often they are used, and how users navigate through the app.
Third-Party Data Sharing
Usage data is shared with multiple third-party services: Segment Analytics and Firebase Analytics for behavioral tracking, Intercom for customer support (connecting in-app actions to support history), Pusher Beams and Pusher Channels for push notifications, Google Maps for location-based features, Google Play Services for core Android functionality, and Picasso for image loading.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 92/100 |
| Privacy | 77/100 |
| Data Security | 100/100 |
| Network Security | 100/100 |
| Code Safety | 92/100 |
| Data Collection | 74/100 |
| Data Sharing | 99/100 |
| User Control | 76/100 |
Positive Security Features
- The app earned a perfect score for protecting data stored on the device
- Network communications received a perfect score, meaning data is well protected while traveling between the device and the app's servers
- The app scores very highly for data sharing practices, indicating it does not distribute user data to unknown or unrelated parties
Areas for Improvement
- Multiple analytics services collect information about user usage patterns; fewer services would reduce data exposure
- Options to control or limit what is collected about user behavior are limited
- The number of third-party services receiving activity data could be reduced without affecting core time-tracking functionality
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of analysis and may change as the app is updated.
App Details
- App: Timely Automatic Time Tracking
- Package ID: com.timeapp.devlpmp
- Version: 2.42.0
- Scan Date: March 13, 2026
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 84/100 |