What Half5 keeps track of, and who can see it.
Your timeline is encrypted on your own devices and nobody else can open it, not your manager, an admin or Half5. What you log (hours, leave, drives) your manager does see. This page lists per role what that means.
- Timeline
- Only you; your manager sees your entries
- Marketing
- No Google or Meta measurement before consent
- Contact
- [email protected]
Four kinds of data.
Exactly which data exists depends on the integrations and apps an organisation uses.
- Account and company setup
- Names, email addresses, departments, roles, working days, rates, clients, projects and settings.
- Personal timeline
- Programs, windows, websites, files, commits, AI sessions, visits, detected drives and phone calls (number, contact name, direction, time and duration; never the content). Encrypted on your device and only synced between your own devices. The server stores it encrypted, without the key. Meetings from your own calendar connection are visible only to you as well.
- Entries
- Hours, leave and drives that someone saves themselves: date, duration, client, project, activity, description, approval status and invoice status.
- Integrations, support and website
- Integration settings, support messages, questions to the assistant, necessary cookies, and marketing measurement only after consent.
Where the boundary is, and why it is fixed.
- Timeline: only you
- A manager, admin or Half5 cannot open your timeline. The key exists only on your devices; no setting or role changes that.
- Saved by you
- A suggestion only becomes an entry once you save it. Only then is it visible to your manager.
- Approval before invoicing
- With approval switched on, only approved hours go on an invoice. Someone else approves your own hours.
- Integrations
- Accounting software receives clients, projects and invoices. An AI agent over MCP only reads and logs the hours of the person who connected it. No integration can read the timeline.
Per role: timeline, entries and whose.
No role can open someone else's timeline. Reports show entries per person too, within the same limits.
| Role | Timeline | Entries | Whose |
|---|---|---|---|
| You | Opens and corrects your own timeline. | Your own hours, leave and drives. | Only yourself. |
| Department manager | Cannot open it. | Hours, leave and drives; approves or rejects; reports per person. | People whose primary department it is, plus all hours on that department's projects. |
| Admin | Cannot open it. | Hours, leave, drives, reports, invoices and settings. | The whole organisation. |
| Integrations and agents | Cannot open it. | Bookkeeping: clients, projects, invoices. AI agent: logging and reading hours. | An AI agent only the hours of the person who connected it. |
From timeline to invoice, in four steps.
Only step 1 is private. From step 2 on, you work with entries you saved yourself.
The route
- 01 Personal timeline
- Only for you, encrypted on your devices.
- 02 Entry
- You save an hour, leave or a drive. From here your manager sees it.
- 03 Approval
- A manager approves, or rejects with a reason.
- 04 Invoice and bookkeeping
- Approved hours become invoice lines; the invoice can go to your accounting software.
Roles
There are three: admin, department manager and employee. None of them can open someone else's timeline.
AI features
Recognising clients and projects happens on your device. When you tap the button to have a description written, that hour's window titles and commits go to Google Gemini or OpenAI. The help assistant doesn't read your timeline.
Integration scopes
AI agents sign in with OAuth on the user's account. In Half5 you see which agents are connected and revoke access.
What you can ask for.
Email [email protected]. If it concerns data your employer manages, such as your entries, the request goes through your employer.
- Access to which personal data Half5 processes about you.
- Correction, deletion or export of your data.
- Objection or restriction where the law allows it.
- You delete your local timeline yourself, in the app's privacy settings.
- You change consent for marketing measurement in the cookie settings.
Deleting your account and data
- Half5: open Profile and choose Delete account. That deletes your account and the data tied to it.
- Half5 Belletjes: unlink the phone in Half5 under Devices, or delete your Half5 account. That also removes the calls the app synced.
- If you can't do it in the app, email [email protected] from your account's email address. We delete your data within 30 days.
Agreements and suppliers.
Roles, AI and integrations are covered above. Below: who is responsible and which suppliers are involved.
Customer as controller, Half5 as processor
When an organisation rolls out Half5, roles, instructions and retention are set down in a data processing agreement.
Website and contact
For website visits and contact requests, Half5 only uses the data needed to reply.
Suppliers and transfers
Half5 uses suppliers for hosting, email, payments, error monitoring and AI features. The subprocessor list names each one, with the data it receives and where.