OnPoint Time & Billing is made by Tycho Works LLC, a Colorado limited liability company ("we," "us," "OnPoint"). You can reach us at support@onpointtimeentry.com.
OnPoint is built around an account that keeps your work synced and backed up. When you create an account and sign in, the information you enter in the app is stored in our cloud database so that it is backed up and available on every device where you sign in. The data that syncs to your account includes:
You can keep working when you are offline — entries are held on your device and sync to your account the next time you connect. An account is required to sync across devices. If you use the app without signing in, your entries remain only on that device until you sign in, at which point they sync to your account.
To create and protect your account, we collect your email address and the authentication information needed to sign you in and keep the account secure. We use your email to operate your account and to contact you about your subscription, security, or important changes to the service. We do not use it for advertising.
Our cloud database, authentication, and storage are provided by Supabase, which runs on managed cloud infrastructure. Your data travels over encrypted connections (TLS) and is stored on that infrastructure, which encrypts data at rest. Access is restricted to your own account through per-row access controls, so other users of the app cannot read your data.
We use reasonable administrative and technical safeguards to protect your information. No method of transmission over the internet or method of electronic storage is completely secure, however, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
We share information only with the providers that make the service work, and only as needed for them to perform their function:
Each provider processes data under its own terms solely to provide its part of the service. We do not sell or rent your data to anyone.
Because OnPoint is a paid subscription, the app periodically confirms your subscription is active. This check does not involve your time entries, client names, narratives, rates, or bills. Subscriptions purchased on our website are processed by Lemon Squeezy (merchant of record), and the app reads their status from your own account in our cloud database (Supabase). Subscriptions purchased inside the iOS app are billed by Apple, and the app confirms them through RevenueCat, which receives your account identifier and returns your purchase state. If you are offline, the app keeps working and re-checks the next time you connect.
If you use the in-app microphone, speech-to-text is performed by your device's own built-in speech recognition. OnPoint receives only the resulting text and never records, stores, or transmits audio. Where that speech recognition runs is governed by your device and its settings.
OnPoint uses AI in three places, all over the same encrypted path: Live Capture turns your dictated text into structured entries; Polish rewrites a rough narrative into bill-ready wording; and the Assistant answers questions about your logged time and performs actions you request. When you use these while signed in, the text you dictated or typed — along with your client codes/names and matter names so the AI can match them, and never audio — is sent over an encrypted connection through our server to our AI provider, Anthropic, which returns the result. Anthropic does not use data submitted through its API to train its models, and retains it only briefly for abuse monitoring before deletion. Voice commands (such as "hold this" or "next entry") are handled entirely on your device. If you are not signed in, are offline, or the AI service is unavailable, Live Capture falls back to on-device processing.
When you use the app's email options, the app opens your mail service with a draft prefilled. Your messages travel through your email provider, not through us, and we never see them.
On the web app you can optionally connect your Microsoft 365 / Outlook account so OnPoint can suggest time entries from your calendar and email for a day you choose. This is off unless you turn it on, and it is built to keep Microsoft data on your device:
OnPoint has no advertising, runs no third-party tracking or analytics inside the app, and sets no advertising cookies. We do not sell, rent, or trade your personal information. Our service providers keep limited operational logs as described above to run and secure the service.
We keep your synced data for as long as your account is active so the app can do its job. You stay in control of it:
Data held on your device is removed when you delete entries, clear this site's browsing data, or remove the app from the device. Backup files you download remain wherever you saved them until you delete them.
Depending on where you live — including under the Colorado Privacy Act — you may have the right to access the personal data we hold about you, correct it, delete it, obtain a portable copy, and appeal our decision on a request. The app's export/backup feature gives you a portable copy of your data directly; for access, correction, deletion, or appeal, email support@onpointtimeentry.com and we will respond as required by applicable law. We will not discriminate against you for exercising these rights.
Your account data is stored and processed on cloud infrastructure located in the United States. By using the app, you understand that your information will be processed there.
OnPoint is a professional tool and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
If we change this policy, we will post the updated version here with a new effective date and, where appropriate, notify you in the app or by email.
Questions about this policy: support@onpointtimeentry.com.