CITT

    Scan results

    Timely Automatic Time Tracking

    Android

    Timely automatically tracks your work across all applications, meetings, and locations, then generates detailed timesheets and reports. Integrates with web, desktop, and mobile to capture billable hours without manual logging. Features AI-assisted time tracking, budget management, and team collabora

    CITT SCORE
    84
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Professionals who want automatic time logging

    Not For: You prefer your activity not shared with analytics platforms

    What It Means For You

    Work activity and usage patterns are collected by Segment and Firebase Analytics. Intercom can link in-app behavior to a user's support profile. Data transmission is well protected, but multiple analytics services receive information about how the app is used.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (8)

    Code Security

    3 total
    3 Medium

    Privacy

    4 total
    3 High
    1 Medium

    Third-Party Risk

    1 total
    1 Low

    Third-Party Services

    Segment Analytics, Firebase Analytics, Intercom, Pusher Beams, Pusher Channels, Google Play Services, Google Maps, Picasso

    Security Strengths

    • ✓HTTPS enforced for all production API endpoints
    • ✓Android Keystore with AES-GCM encryption for session tokens
    • ✓Google Tink cryptography library for key management
    • ✓All SharedPreferences use MODE_PRIVATE
    • ✓All SQLite queries parameterized (no SQL injection)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    privacy
    analytics
    gdpr
    ccpa
    third party tracking
    productivity
    time tracking

    Package

    com.timeapp.devlpmp

    Version

    2.42.0

    Analysis Date

    Mar 13, 2026

    Classes Analyzed

    15,870

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 0 findings

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 5 findings (3 high, 1 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    The app collects work activity patterns and in-app usage behavior. Segment Analytics and Firebase Analytics receive data about which features are used, how often they are used, and how users navigate through the app.

    Third-Party Data Sharing

    Usage data is shared with multiple third-party services: Segment Analytics and Firebase Analytics for behavioral tracking, Intercom for customer support (connecting in-app actions to support history), Pusher Beams and Pusher Channels for push notifications, Google Maps for location-based features, Google Play Services for core Android functionality, and Picasso for image loading.

    Understanding the Scores

    CategoryScore
    Security92/100
    Privacy77/100
    Data Security100/100
    Network Security100/100
    Code Safety92/100
    Data Collection74/100
    Data Sharing99/100
    User Control76/100

    Positive Security Features

    • The app earned a perfect score for protecting data stored on the device
    • Network communications received a perfect score, meaning data is well protected while traveling between the device and the app's servers
    • The app scores very highly for data sharing practices, indicating it does not distribute user data to unknown or unrelated parties

    Areas for Improvement

    • Multiple analytics services collect information about user usage patterns; fewer services would reduce data exposure
    • Options to control or limit what is collected about user behavior are limited
    • The number of third-party services receiving activity data could be reduced without affecting core time-tracking functionality

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of analysis and may change as the app is updated.

    App Details

    • App: Timely Automatic Time Tracking
    • Package ID: com.timeapp.devlpmp
    • Version: 2.42.0
    • Scan Date: March 13, 2026

    Right of Reply

    Developer not yet contacted