Effective 2026-07-20. Applies to the trinket app on Android, iOS, Windows, macOS, and Linux.
trinket is a time-tracking and timesheet app built and operated by Klarälvdalens Datakonsult AB ("KDAB", "we", "us"). This policy explains what data the app handles, where it goes, and your rights over it.
trinket is primarily a tool for KDAB employees. Anyone may install the app, but the features that collect or send personal data (uploading timesheets, syncing time-tracking events, and the associated account) require a valid KDAB login. Without those credentials, no personal data is uploaded from the app.
The data controller is:
Klarälvdalens Datakonsult AB (KDAB)For privacy questions about trinket specifically, you can also contact werner.scholtz@kdab.com.
Most of what you enter is stored only on your device and is never sent to us:
Invoice and banking details never leave your device. We do not receive or store them.
When you are logged in and use the relevant features, the app sends data to servers that KDAB operates itself. It is not shared with any outside company.
charm-cloud.kdab.com. These events are encrypted on your device before they are sent, so the server only stores encrypted data (end-to-end encryption).lotsofcake.kdab.com. Before a timesheet is uploaded, the exact times of day you started and stopped are removed: each entry keeps only the date and the total time worked, not the precise start and end times.sentry10.kdab.com, in released versions of the app only. A crash report includes technical details such as your device model, operating system version, app version, and the error's technical trace. It does not include your timesheet content.As with any internet request, the KDAB servers you connect to can see your device's IP address. The app also identifies itself and its version to these servers.
trinket contains no advertising, no analytics, and no third-party trackers. Every server the app contacts is operated by KDAB. We do not sell or share your data with anyone.
Some features process data locally and send nothing over the network: pairing with a Timeular tracker over Bluetooth, scanning QR codes with the camera (used to move sync credentials between your own devices), desktop idle-time detection, local notifications, and the built-in automation server, which listens only on your own machine.
We process this data to provide the time-tracking and timesheet service and to administer employees' working time, which is necessary for KDAB's legitimate business and employment purposes. Crash reports are processed on the basis of our legitimate interest in keeping the app reliable.
Timesheet and time-tracking data are kept on KDAB's servers for as long as needed for employment administration and to meet KDAB's record-keeping obligations.
Connections to KDAB servers use encrypted (HTTPS) transport. Time-tracking events are additionally encrypted on your device before syncing. Credentials and other sensitive items are held in your operating system's secure storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Because KDAB is based in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these, contact us using the details above.
You also have the right to lodge a complaint with a data protection authority. In Sweden this is the Swedish Authority for Privacy Protection (IMY, Integritetsskyddsmyndigheten).
To ask KDAB to delete the personal data trinket holds about you, email werner.scholtz@kdab.com (or info@kdab.com) with your name and KDAB account username. We will respond within one month.
We will delete the personal data we hold about you, except records we are legally required to keep, such as timesheet records retained for employment administration and bookkeeping. Those are kept for the period required by law and deleted once it ends.
Data stored only on your device (including your invoice and banking details) is not held by us. You can remove it at any time by clearing the app's data or uninstalling the app.
trinket is a workplace tool and is not directed at children. We do not knowingly collect personal data from children.
We may update this policy from time to time. When we do, we will post the updated version on this page and change the effective date above.
Questions or requests about this policy can be sent to info@kdab.com or werner.scholtz@kdab.com.