Privacy Policy

Last Updated: October 4, 2026

1. Introduction

Toastmaster Timer ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Zoom app.

2. Information We Collect

Toastmaster Timer is designed with privacy in mind. We collect minimal information:

• Local Storage Data: The app stores timing rules, agenda items, reports and any card artwork you upload in your browser's local storage. On a free device, meeting reports stay on your device only; on a device that has joined a Pro club, they are also saved to that club's archive, as described below.
• Zoom Participant Information: When you use the app in a Zoom meeting, we may access participant names to help you select speakers. Participant names are used only within the app and are not sent to our servers.
• Zoom User Identifier: When you open the app, Zoom provides a signed context containing your Zoom user ID. We use it to recognise you as a returning user so your settings can follow you between devices, and to count returning users in our product analytics. On its own it is an opaque identifier: it is not your name or your email address. If you use the app as an unauthenticated guest, Zoom does not provide it and we do not identify you at all.
• Zoom Account Email and Name: When you approve the app in Zoom — when you first add it, when you approve it again after an update, or when the app asks Zoom for your approval while you use it — and when you sign in on our website, Zoom tells us the email address and the first and last name on your Zoom account. If you have already approved the app, Zoom may pass these details on when the app asks, without showing you its approval screen again. We store them against your Zoom user ID so we can contact you about the app: important changes, new features, and occasional requests for feedback. Every such email includes a way to stop receiving them, and you can also opt out at any time by writing to us at the address below. We never show these details to other users, we do not share or sell them, and if Zoom does not provide an email address we simply store none.
• Subscription Status: If you subscribe to the Pro plan, we store your plan, its status and renewal date, and the identifiers of your Stripe customer and subscription, against your Zoom user ID. We never see or store your card number: payment details are entered on Stripe's own pages and held by Stripe.
• Billing Email Address: If you subscribe to the Pro plan, we store the email address you entered on Stripe's checkout page, against your Stripe customer identifier. It is stored for one purpose: a Pro subscription covers a whole club, and the club's officers change, so the club's settings page can be reached by a sign-in link sent to the address that pays. We do not use it for marketing and we do not share it. It is kept separately from your Zoom account email, described above.
• Club Information (Pro): A Pro subscription creates a club record holding the club's name, an optional logo you upload, a colour, the club's shared timing presets, and a list of the devices and Zoom user IDs that have joined the club with its code. A club member's role (admin, editor or member) is stored against their Zoom user ID.
• Timing Reports (Pro clubs only): On a device that has joined a Pro club, each finished speech is saved to that club's archive on our servers: the speaker name as the timer typed it, the role, the duration, and any comment the timer added. Speaker names on the timing report are typed by the timer, so please enter only what your club is comfortable recording. On a free device, reports stay on the device and are never sent to us. If a club shares a report as a link, that report becomes readable by anyone holding the link.
• Sign-in on the web (optional): On our website you can sign in with your Zoom account. Zoom then tells us your Zoom user ID and your Zoom account email and name, as described above, so your settings and plan are the same on the web and in Zoom. We do not receive your password, and we do not keep the access token Zoom issues.
• Usage Data: We collect anonymous product analytics — which features are used, how many speeches are timed, and approximate country — to understand how the app is used and what to improve. We do not sell this data or use it for advertising.

3. How We Use Your Information

We use the information we collect solely to:

• Provide timer functionality for Toastmasters meetings
• Manage your agenda and speaker lists
• Generate timing reports
• Control virtual backgrounds in Zoom meetings (when you grant permission)
• Keep your settings and card artwork the same on every device you use (Pro plan)
• Know whether you have an active Pro subscription, so the paid features work
• Deliver your club's shared timing presets and branding to every device that has joined it with the club code (Pro plan)
• Keep your club's timing reports so the club can look back at them and share them (Pro plan)
• Send a sign-in link to the club's billing address when someone asks for one, so a club is never locked out of its own settings (Pro plan)
• Contact you by email about the app — important changes, new features and requests for feedback — unless you opt out

4. Data Storage

Your settings are stored on your device first, and the app works fully without a network connection. If Zoom identifies you, we additionally store a copy of your preferences — timing rules, roles, agenda, display options and any card artwork you upload — against your Zoom user ID, so the same setup is there when you run a meeting from another computer. This copy is held on Cloudflare infrastructure and is readable only by a request carrying your own signed session.

Your Zoom account email and name are stored on Cloudflare infrastructure against your Zoom user ID. The app never reads them back and no other user can see them; only we can, for the purpose above. When you remove the app from your Zoom account, we automatically delete the synced copy of your settings, your card artwork, and your Zoom account email and name, unless Zoom tells us you chose to let us keep your data.

On a free device, meeting reports are not synced and never leave your device. On a device that has joined a Pro club, each finished speech is additionally saved to that club's archive on Cloudflare infrastructure, so the club keeps its own timing history and nothing is lost if a laptop fails mid-meeting. The archive is readable by anyone holding the club's code; a report the club chooses to share as a link is readable by anyone holding that link.

You can remove everything stored on your device by clearing your browser's local storage. You can have the synced copy of your settings and your Zoom account email and name deleted, and you can have a club's record, its archive or an individual report deleted, by contacting us at the address below.

5. Virtual Backgrounds

When you use the virtual background feature, the app changes your Zoom virtual background to indicate timing phases (green, yellow, red). This requires permission to control your virtual background, which you grant when installing the app. Background images are hosted on our servers but contain no personal information.

6. Third-Party Services

Toastmaster Timer integrates with Zoom's platform. Your use of Zoom is subject to Zoom's Privacy Policy.

We use three service providers and no others: PostHog for the product analytics described above, Cloudflare to host the app and store synced settings, contact details and subscription status, and Stripe to process payments for the Pro plan. When you subscribe, Stripe collects your payment details and email address for receipts under its own privacy policy; we receive your plan status, opaque Stripe identifiers, and the email address you entered, which we store for the club sign-in link described above. Sign-in emails are sent through Cloudflare. We do not sell your information or share it with advertisers.

7. Data Security

The app never asks you for a password and never receives one. Zoom's app context is encrypted and can only be read by our server; synced settings are reachable only with a short-lived signed session issued from that context, and one user's settings cannot be read by another.

Data stored on your device is protected by your device, so we recommend standard practices such as screen locks and keeping your Zoom client updated.

8. Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Your Rights

You have the right to:

• Access your locally stored data at any time through the app
• Delete your data by clearing your browser's local storage
• Opt out of emails from us at any time, using the link in any email or by contacting us
• Ask us to delete the synced copy of your settings, your Zoom account email and name, your club's billing address, or your club's timing archive, by contacting us at the address below
• Use the app as a Zoom guest, in which case we do not identify you at all
• Uninstall the app at any time, which will remove all associated permissions

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: shuhao@starwatchlabs.com