Privacy policy

 

WakaTime (Pty) Ltd (“WakaTime”, “we”, “us”, or “our”) recognizes the importance of protecting personal information and is committed to processing such information lawfully, responsibly, and transparently.

Last Updated: 2025/12/19 

1. Introduction and Purpose

This Privacy Policy explains how personal information is collected, used, stored, shared, retained, and protected when you access or use:

  • Our website(s);
  • Our mobile or web-based applications; 
  • Our physical devices and associated software;
  • Our customer support, communications, and related services; 

(collectively referred to as the “Services”).

This policy is drafted in accordance with:

  • The Protection of Personal Information Act 4 of 2013 (“POPIA”);
  • The Electronic Communications and Transactions Act 25 of 2002 (“ECTA”);
  • Applicable consumer, contractual, and common-law principles of the Republic of South Africa. 

By using the Services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. 

2. Scope, Applicability, and Development Status

WakaTime is a developing technology ecosystem that combines physical devices with software-based functionality. As such:

  • Certain features, integrations, and services may be introduced, modified, or retired over time;
  • Data-processing activities may evolve in line with product development;
  • This Privacy Policy applies to current and reasonably anticipated future processing activities directly related to WakaTime’s purpose. 

Nothing in this policy obliges WakaTime to implement any specific feature or data-processing activity.

3. Categories of Personal Information Collected

We aim to collect only the minimum personal information reasonably required to operate the Services.

3.1 Information Provided Directly by You 

Full name or preferred name
Email address
Mobile Number
Account Registration details
Device registration and pairing information
Communication sent to us (support requests, feedback, enquiries)
Preferences, configurations, and in-app settings

You warrant that all information provided is accurate, complete, and lawful. 

 

3.2 Technical, Device, and System Information 

When you use the Services, we may automatically collect:

Device identifiers and serial references
NFC Interactions records
Application usage logs
Operating system, app version, and platform type
IP address and general geographic region
Time, date, and duration of interactions

This information is used primarily for functionality, diagnostics, and security.

 

3.3 Behavioural and Functional Usage Information

WakaTime may process limited behavioural data strictly related to product functionality, including:

 Interaction completion records
Consistency or streak indicators (e.g. mornings completed without snoozing)
Feature usage frequency
Non-medical engagement metrics

 

Explicit exclusion: 

WakaTime does not collect:   

  • Sleep stage data (e.g. REM, deep sleep);
  • Medical, biometric, or health information;
  • Audio, video, or ambient monitoring data.

 

3.4 Information Received from Third Parties 

We may receive limited personal information or usage data from authorised third-party service providers who assist us in operating, supporting, or improving the Services. Such information is processed in accordance with this Privacy Policy and applicable law.

 

4. Account Creation and User Responsibilities

User accounts may be created only after the lawful purchase of a WakaTime device and completion of the onboarding process. You are responsible for:

  • Maintaining the confidentiality of your login credentials;
  • All activity occurring under your account;
  • Immediately notifying us of any unauthorised use or security breach. 

WakaTime reserves the right to suspend or terminate accounts where misuse, fraud, or unlawful activity is suspected.

 

5. Children, Minors and Parental Consent

WakaTime products may be used by children and teenagers, particularly where devices are purchased by parents or guardians. Age-Based Framework:

Children under 4 years May use the Services only under the supervision and consent of a parent or legal guardian.
Children aged 4 years and older May use the Services independently, subject to this Privacy Policy.

 

WakaTime does not knowingly collect personal information from children under 4 (four) without appropriate consent. Where such information is identified, reasonable steps will be taken to delete it. Parents or guardians are encouraged to supervise usage and settings.

 

6. Purpose Limitation and Use of Personal Information

Personal information is processed solely for legitimate and lawful purposes, including but not limited to:

  • Providing and operating the Services;
  • Enabling device and application functionality;
  • Tracking streaks and behavioural consistency metrics;
  • Improving product design, stability, and performance;
  • Communicating service updates, notices, and support responses;
  • Conducting internal analytics and research;
  • Preventing misuse, fraud, and unauthorised access;
  • Complying with legal, regulatory, and contractual obligations.

We do not use personal information for unrelated or excessive purposes. 

 

7. Lawful Basis for Processing

All processing of personal information is conducted in accordance with POPIA and is based on one or more of the following lawful grounds:

  • Your consent;
  • Performance of a contract;
  • Compliance with a legal obligation;
  • Legitimate business interests, balanced against your rights and expectations. 

Where consent is required, it may be withdrawn at any time, subject to legal and operational limitations.

 

8. Payments and Third-Party Transactions

Payments for WakaTime products or services are processed through independent third-party payment platforms integrated into external e-commerce systems. WakaTime:

  • Does not store full payment card details;
  • Does not control third-party payment infrastructure;
  • Is not responsible for the privacy practices of payment processors. 

Users are encouraged to review the privacy policies of relevant third parties before transacting.

 

9. Third-Party Platforms and E-Commerce Providers

Our Services may integrate with or rely on third-party platforms that provide website hosting, e-commerce functionality, payment facilitation, analytics, or infrastructure services.

These third-party platforms process personal information in accordance with their own privacy policies and security practices. WakaTime does not control, and is not responsible for, the privacy practices or content of such third-party platforms.

 

10. Cookies, Analytics, and Similar Technologies

We may use cookies, SDKs, and similar technologies to:

  • Enable essential site and app functionality;
  • Maintain secure sessions;
  • Analyse performance and usage trends;
  • Improve reliability and user experience.

Certain cookies are essential and cannot be disabled without impairing functionality. Others may be managed via browser or device settings.

 

11. Sharing and Disclosure of Personal Information

We do not sell personal information. Personal information may be shared only where reasonably necessary with:

  • Hosting, cloud, and infrastructure providers;
  • Analytics and diagnostics service providers;
  • Third-party vendors required for functionality;
  • Professional advisors (legal, accounting, compliance);
  • Regulatory, governmental, or law-enforcement authorities where legally required.

All service providers are required to implement appropriate data-protection safeguards.

 

12. Business Transfers and Corporate Transactions

In the event of a merger, acquisition, restructuring, reorganisation, sale of assets, insolvency, or other corporate transaction involving WakaTime, personal information may be transferred or disclosed as part of that transaction, subject to applicable data-protection laws.

Any successor entity will be required to process personal information in a manner consistent with this Privacy Policy or to provide equivalent protections.

 

13. Cross-border Processing

WakaTime primarily operates within South Africa. However, some service providers may process data outside the Republic. Where cross-border processing occurs, we ensure that:

  • The recipient jurisdiction provides adequate protection; or
  • Contractual safeguards provide protection substantially similar to POPIA.

 

14. Information Security Measures

We implement reasonable and appropriate technical and organisational safeguards to protect personal information, including:

  • Secure system architecture;
  • Access controls and authentication measures;
  • Encrypted communications where appropriate;
  • Ongoing monitoring and risk assessments.

Despite these measures, no system can guarantee absolute security. Use of the Services is at your own risk. 

 

15. Data Breach Notification

In the event of a security compromise, data breach, or any unauthorised access to personal information (“Security Incident”), WakaTime will take reasonable and lawful steps to:

  • Investigate and contain the incident;
  • Assess the nature and extent of the personal information affected;
  • Restore the integrity of our systems where reasonably possible.

Where required by the Protection of Personal Information Act (POPIA), WakaTime will notify:

  • The Information Regulator; and
  • Affected data subjects,
  • As soon as reasonably possible, after becoming aware of the compromise.

Such notification will include, where reasonably available:

  • A description of the nature of the breach;
  • The categories of personal information affected;
  • Measures taken or proposed to address the breach;
  • Recommendations to data subjects to mitigate potential harm.

To the maximum extent permitted by law, WakaTime shall not be held liable for any loss or damage resulting from a Security Incident that occurs despite reasonable safeguards being in place or that arises from factors beyond our reasonable control. 

 

16. Data Retention and Deletion

Personal information is retained only for as long as:

  • Necessary to fulfil the purposes for which it was collected;
  • Required by law or regulation; or
  • Legitimately necessary for operational purposes.

Once no longer required, information is securely deleted or anonymised.

 

17. Data Subject Rights Under POPIA

As a data subject under POPIA, you have the following rights, subject to applicable legal limitations:

17.1 Right of Access 

You may request confirmation of whether WakaTime holds personal information relating to you and request access to such information.

17.2 Right to Correction or Deletion

You may request the correction, destruction, or deletion of personal information that is inaccurate, excessive, out of date, incomplete, misleading, or unlawfully obtained.

17.3 Right to Object 

You may object, on reasonable grounds relating to your particular situation, to the processing of your personal information, except where processing is required by law.

17.4 Right to Withdraw Consent

Where processing is based on consent, you may withdraw such consent at any time. Withdrawal of consent may limit or prevent access to certain features or services.

17.5 Right to Lodge a Complaint 

You have the right to lodge a complaint with the Information Regulator if you believe that WakaTime has not complied with POPIA.

WakaTime reserves the right to verify your identity before processing any request and to refuse requests that are manifestly unfounded, excessive, or not legally required.

 

18. Automated Processing

Certain features may involve automated processing to support functionality or insights. Such processing does not produce legal or similarly significant effects without human oversight.

 

19. Limitation of Liability

To the maximum extent permitted by law, WakaTime shall not be liable for: •  

  • Unauthorised access beyond our reasonable control; 
  • Failures attributable to third-party platforms or providers;
  • Indirect, incidental, or consequential damages arising from data use.

 

20. Amendments to this Policy 

We may amend this Privacy Policy from time to time. Updated versions will be published on our website or app. Continued use of the Services constitutes acceptance of the revised policy.

 

21. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the Republic of South Africa. Any disputes shall be subject to South African jurisdiction.


22. Information Regulator Details

If you are dissatisfied with how WakaTime has handled your personal information or a related request, you may escalate the matter to the Information Regulator:

Information Regulator (Republic of South Africa)

 

Questions

If you have any questions about the privacy policy, send us an email at hello@wakatime.co.za