Why trust a web app?
TimeLink is a modern web application that updates instantly, works on every device, and avoids the delays of app-store review cycles. The same architecture powers tools used daily by financial institutions, healthcare systems, and enterprise software. Every layer of our infrastructure is built on platforms with independently audited security certifications.
Account security
- ✓Passwords are hashed using industry-standard algorithms. We never store your password in plain text.
- ✓Sessions are secured with HTTP-only cookies and automatic expiration.
- ✓Row-level security policies mean you can only ever access your own data. No user can see another user's messages, contacts, or content.
- ✓Face ID unlock (on supported devices) uses WebAuthn: your face is checked by your phone, never sent to us. We receive only a yes or a no.
Infrastructure
Our platform runs on industry-leading services, each with independent security audits.
Supabase
Our database and sign-in.
Cloudflare R2
File storage.
Vercel
Runs the TimeLink website and app.
Resend
Sends our email.
Anthropic
The AI behind letter help, the quote of the day and the help chat.
The full list, with what each company holds and where, is on our subprocessors page.
Data protection
- ✓Encrypted everywhere. All data is encrypted in transit (HTTPS/TLS) and at rest (AES-256). There is no unencrypted path between your browser and our servers.
- ✓Media access is time-limited. Photos, voice recordings, and videos are served via signed URLs that expire. Media is never permanently exposed on the open internet.
- ✓No data sales. Your messages, media, and personal information are never sold to third parties. See our promises and Privacy Policy.
- ✓Minimal data collection. We collect only what is necessary to operate the service. No analytics, advertising, or tracking cookies. See Privacy Policy §17.
- ✓No automated scanning. Nothing you write, record, or upload is scanned automatically; by us or by anyone else.
AI privacy
When you use an AI feature (letter help, the quote of the day, the help chat), only the text that feature needs is sent to Anthropic, and only to produce a reply. Nothing is sent unless you use the feature. TimeLink does not use anything you write, record, or upload to train AI models.
What we say plainly
Your messages and files are encrypted while they travel and while they are stored. They are not end-to-end encrypted: the people at TimeLink with administrator access to our systems could technically open them. We say this because other services in this space do not, and you deserve to know.
Questions?
If you have questions about how we protect your information, contact us at inquiries@timelinklife.com.