Wakatime
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- They say they do not sell or share your data.
- The documents do not say who can read your content.
They log coding activity and file paths, can close you anytime, auto-renew paid plans, and you them.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Email, billing via Stripe, plugin coding stats, file paths, hostname, OS, and sometimes sites you visit.
Read the exact line
Privacy policy
“We collect and store the path of the file you are editing, timestamps, project names, branch names, editor names & versions, languages, libraries/imports from opened files”
Training
They say they use it to run and improve the service, and will ask before other uses.
Read the exact line
Privacy policy
“We use the information we collect to provide, maintain, and protect services for our users. We may also use this information to improve your user-experience with our services.”
Sharing
They say they do not sell private info; sharing is with your consent, in aggregate, or if the law requires it.
Read the exact line
Privacy policy
“We do not sell our users’ private personal information. We share information about you in the limited circumstances spelled out below”
Kept
They keep data while your account is active and say it is deleted when you delete the account.
Read the exact line
Privacy policy
“We retain your data while you have an active account. You may delete your WakaTime account at any time using this form.”
Controls
You can delete your account with a form and remove integrations, which they say deletes that content.
Read the exact line
Privacy policy
“You can remove an integration at any time which unbinds that integration on a go-forward basis and immediately deletes all content that was received from that service.”
Fine print
They can shut you off without notice; paid plans auto-renew; you them; Delaware courts.
Read the exact line
Terms of service
“WakaTime may terminate your access to all or any part of our Service at any time, with or without cause, with or without notice, effective immediately.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Delete your WakaTime account
Privacy policy: the account deletion form linked as “this form”
Cancel a paid Upgrade
Billing section of Account Settings, before the subscription period ends
Remove an integration
In the product; they say this immediately deletes content from that service
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can lock you out whenever they want, even with no reason and no warning.
Read the exact line
Terms of service
“WakaTime may terminate your access to all or any part of our Service at any time, with or without cause, with or without notice, effective immediately.”
For example, you could lose access to your coding stats overnight with no email first.
If someone sues them because of how you used the product, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to and WakaTime, it's contractors, and it's licensors, and their respective directors, officers, employees and agents from and against any and all claims and expenses, including attorneys' fees, arising out of your use of the Service”
For example, if a workplace dispute involves your WakaTime data, they could ask you to cover lawyer fees.
Paid plans keep charging unless you cancel before the period ends.
Read the exact line
Terms of service
“Unless you notify WakaTime before the end of the applicable subscription period that you want to cancel an Upgrade, your Upgrade subscription will automatically renew”
For example, if you forget to cancel, they charge the next month or year on the card they have.
The plugin sends detailed work activity, including file paths, not just a simple timer.
Read the exact line
Privacy policy
“We collect and store the path of the file you are editing, timestamps, project names, branch names, editor names & versions, languages, libraries/imports from opened files”
For example, they may store that you edited /Users/you/secret-app/src/auth.py at 2:14pm.
Google Analytics can track when you come back to the site.
Read the exact line
Privacy policy
“Third parties, including but not limited to Google Analytics, may also use cookies to track your return visits to the website.”
For example, a Google cookie can see you visited the dashboard again after a week.
They do not promise the site will work or be error-free.
Read the exact line
Terms of service
“The Site is provided "as is". WakaTime and it's suppliers and licensors hereby disclaim all of any kind, expressed or implied”
For example, if stats go missing, the terms say you used the site at your own risk.
They say they do not sell your private personal information.
Read the exact line
Privacy policy
“We do not sell our users’ private personal information.”
For example, they claim they will not sell your email list to a marketing company.
They say the plugin does not send the actual code in your files.
Read the exact line
Privacy policy
“We do not receive or store your source code.”
For example, they store that you edited a Python file, not the file’s contents.
Deleting the account is supposed to wipe profile and connected-app data.
Read the exact line
Privacy policy
“When you delete your own WakaTime account, your account and profile information and all integration data including Slack, Google, GitHub, Zoom, and Microsoft integration information is deleted”
For example, after you use the delete form, they say GitHub and Slack integration data is gone.
If they change the terms, keeping using the site counts as agreeing.
Read the exact line
Terms of service
“YOUR CONTINUED USE OF THE SITE AND/OR SERVICE AFTER THE MODIFICATION OF THIS AGREEMENT MEANS THAT YOU ACCEPT ALL SUCH CHANGES.”
For example, they could add new rules and you accept them just by opening the dashboard later.
Words to know
Legal words from the lines above, in plain English.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- auto-renewal
- Your subscription keeps charging you at the end of each period until you cancel it. For example, a free trial turns into a paid monthly plan unless you cancel before it ends.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
How we got here · grade D · score 40/100 · 14 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect account email, plugin coding activity (paths, projects, hostname, OS, cursor, AI tool stats), site usage, cookies, and optional integration data. They say they do not store source code.
Does it record your voice, face or body, and what happens to that?
The documents do not describe collecting voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Google Analytics and other third parties may use cookies to track return visits.
Do they sell or share your data, and can you opt out?
They say they do not sell private personal information and share mainly with your consent, in aggregate, or as required by law.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You delete the account with a form; they say account, plugin, and integration data is then deleted. They do not give a 30- or 90-day in-app wipe timeline.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe SSL, salted password hashing, and Stripe for cards. No independent audit is described.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
Both documents are dated. Privacy says they may notify for significant changes; terms say continued use means you accept changes.
Can they close your account without warning, and can you get your data out first?
They may end access at any time, with or without cause or notice.
If something goes wrong, who pays?
The service is “as is,” liability is capped at fees you paid, and you must indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Upgrades auto-renew unless you cancel first. They say they do not offer refunds except if you cancel within 14 days of upgrading. Fee changes get email notice.
The privacy policy is 932 words at a college level (Flesch reading ease 49.9); the terms are 1,566 words at a college level.
