Your data: export, deletion, backups
Getting your data out
Every report exports to CSV, filtered however you like, with one row per entry — that is your hours in a format any spreadsheet or accounting system reads. The API can page through entries, projects and clients if you want the whole picture programmatically. Download my data (JSON) in Profile → Data and account gives you everything we hold about you in one file — profile, workspaces, your entries with tags, and the projects, clients and tasks they point at — without passwords or 2FA secrets.
Deleting
A deleted entry is marked deleted and disappears from the app; it is purged after 30 days. That window exists for accidents — if you delete a week of work by mistake, write to us inside it and we can bring it back.
Deleting a project or client is different: their history would go with them, so archive instead. Archived things vanish from pickers and stay in reports.
Deleting your account (Profile → Data and account, confirmed with your password) removes the account and what belongs to it: entries, projects, clients and tags in workspaces where you were the only member. In a workspace you share with others, your entries and membership disappear and the rest of the team carries on. Backups let go of the data within 30 days. It cannot be undone — export first, from the same page.
Backups
The database is backed up daily, encrypted before it leaves the server, and every backup is verified as restorable rather than assumed to be. Backups are kept for a rolling window and older ones are removed automatically.
What leaves the app
Error reports go to Sentry, and they are scrubbed on purpose: entry descriptions and notes are removed, along with anything that looks like a credential. Your clients' work is not a technical detail we need.
The full picture — who processes what, and what is stored in your browser — is in the privacy policy, the sub-processors list and on the cookies page.
Your profile
Profile → Basics is what belongs to you rather than to a workspace: your name and e-mail (a new e-mail is confirmed from the new address and signs you out everywhere), the time zone your days are counted in — the browser's by default, and a fixed choice here wins over the browser on purpose, so travelling does not move your work into another day — your daily goal for the streak on the dashboard, the phone install card, push notifications and the weekly e-mail summary. Integrations holds your API tokens and the Google Calendar connection.
Security
Profile → Security: change your password, turn on two-factor authentication with an authenticator app (keep the recovery codes somewhere that is not this account), and see every device you are signed in on, with a button to sign the others out. Changing the password or confirming a new e-mail signs out all sessions. Personal API tokens cannot touch any of this — see API tokens.
Support access to your workspace
When you write to support about something we can only see from inside your workspace, a member of the Hourino team can connect to it with temporary admin rights. It is not silent: the workspace sees the connection while it lasts, and every action taken under it is written to the audit log with the person's name. Access ends when the connection is closed. We do this to fix what you asked us to fix, not to look around.
Still stuck?
Write to us. A person answers, and a question that had to be asked usually means this page or the app needs fixing.