Privacy Policy

Last updated: 12 November 2026

In short: Bixiibee records work time only while you have the timer running. It counts keyboard and mouse activity but never records what you type or where you click, takes screenshots that you can see (and, where your organization allows, delete), and shows you everything it records about you. We do not sell data and we do not show ads.

1. Who we are

Bixiibee is a work time tracking service made of a desktop app, a web app (app.bixiibee.com and org.bixiibee.com) and this website. It is operated by Stackwave Technologies (“we”, “us”). You can reach us at support@bixiibee.com.

2. Our role

Bixiibee is used by organizations (for example, an employer) to track the working time of their own people. For the time, activity and screenshot data collected in that work, the organization decides how Bixiibee is used and is responsible for it (it is the data controller), and we process that data on its behalf and on its instructions. If you use Bixiibee through your employer or client, questions about why your work is tracked should go to them first; we will help them answer.

For data about our own customers and website visitors, such as account contact details and support emails, we are responsible.

3. What we collect

Your account

• Name, email address, role in your organization and, if you add one, a profile photo.
• Your password, stored only as a one-way hash we cannot read. If you turn on two-factor sign-in, its secret is stored encrypted, and recovery codes are stored as hashes.
• Sign-in records: when you signed in, the browser you used, and IP addresses, used to keep your account safe and to slow down password guessing.

While the desktop app’s timer is running

• Work time in 10-minute blocks, and the project you picked.
• Activity: the number of keyboard and mouse events in each minute, used to show an activity percentage. Only counts are kept.
• Idle periods: when there was no input for a while, and whether you chose to keep or remove that time.
• Screenshots of your screen at random moments, if your organization turns them on (between 1 and 3 per 10 minutes, set by the organization). Your organization can choose to have them blurred on your computer before they are stored or sent. The app shows a notice each time one is taken, and you can see every screenshot taken of you.
• Device details: an identifier for the enrolled computer, its operating system version and the app version.

When you use the web app

• A record each time someone views a screenshot (who, which one, when), so viewing is accountable.
• Changes to settings, roles, invitations and projects, kept in an audit log for your organization.

Email

• We send invitations, password reset links and security notices (such as “your password was changed”). We keep a record that the email was sent, not a marketing profile.

This website

• We use Google Tag Manager on bixiibee.com to understand how the website is used (for example, which pages are visited and where visitors come from). It may set cookies and send information about your visit, such as pages viewed, browser and approximate location, to Google. It is not used in the Bixiibee app (app.bixiibee.com and org.bixiibee.com) or the desktop app, and never sees your work data. The site also remembers your light or dark choice in your own browser. Our web server keeps short-lived technical logs (such as IP address and time of request) for security and troubleshooting.

4. What we never collect

• The content of what you type, which keys you press, passwords you type in other apps, or where you click or move the mouse.
• Anything at all while the timer is stopped.
• Microphone or camera recordings, browsing history or the contents of your files.

5. How we use it

• To provide the service your organization signed up for: recording time, showing the work diary, reports and team overviews.
• To keep accounts and data secure, prevent abuse and investigate problems.
• To send the service emails listed above.
• To meet legal obligations.

We do not sell personal data, use it for advertising, or use your organization’s screenshots or activity data to train artificial intelligence models.

6. Who can see your data

• You can see your own time, activity and every screenshot taken of you.
• Owners and admins of your organization can see everyone’s data in that organization. Managers see the people in the teams they manage. Members see only themselves.
• Our staff access customer data only when needed to run the service, fix a problem you report, or meet a legal obligation, and such access is limited and logged.

7. Service providers

We use a small number of providers to run Bixiibee. They process data only on our instructions:

These providers may store data outside your country, including in the United States and Europe. Where that happens we rely on the provider’s security and contractual commitments. We may also disclose data where the law requires it, and we will tell the affected organization unless the law forbids it.

8. How long we keep it

• Screenshots are deleted automatically after the period your organization sets (from 7 days to 2 years; 90 days unless changed). Deleted screenshots are removed from storage.
• Time and activity records are kept while your organization uses Bixiibee, unless it asks us to delete them sooner.
• Accounts: when someone is removed from an organization their access ends immediately; the organization decides whether their past records are kept.
• Sign-in sessions end after 12 hours, or after an hour of inactivity. Password reset links work for one hour.
• When an organization stops using Bixiibee, we delete its data within 90 days, except copies we must keep by law.

9. Security

• All connections use HTTPS. Each desktop app signs its uploads with its own key.
• Screenshots are stored privately and can only be opened through links that expire after 60 seconds, and every view is logged.
• Passwords are hashed, two-factor secrets are encrypted, and two-factor sign-in is required for owners, admins and managers.

No system is perfectly secure. If a breach affects your data we will tell your organization, and the authorities where required, without undue delay.

10. Your rights

Depending on where you live, including under Ghana’s Data Protection Act, 2012 (Act 843), you may have the right to access your data, have it corrected or deleted, object to or restrict some processing, and receive a copy. Because your organization controls work data, the quickest route is to ask your organization; you can also write to us at support@bixiibee.com and we will pass your request on and help them respond. You can also complain to your data protection authority, such as the Data Protection Commission of Ghana.

Bixiibee is meant for work use by adults and is not intended for anyone under 18.

11. Google and Microsoft sign-in

If you choose “Continue with Google” or “Continue with Microsoft”, we receive your name, email address, whether the email is verified, and an account identifier from that provider. We use them only to sign you in to an existing Bixiibee account and to link that account to the provider. We do not request access to your email, files, contacts or calendar, and we do not share this data with anyone.

Bixiibee’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

12. Changes to this policy

If we make significant changes we will update the date above and tell organizations by email before the change takes effect.

13. Contact

Questions or requests: support@bixiibee.com.