Privacy
What Horalog stores, where it lives, what leaves for third parties, and how to take it all with you.
Who is responsible
Horalog is a personal project by Marcelo Michelli. It is not a company, has no paid tier and sells nothing. Questions or requests about your data: @semeupulsofalasse.
What is stored
Your account. Name, e-mail and profile picture, from Google sign-in.
Your collection. Brand, model, reference and specifications of each watch; purchase and sale dates and amounts; warranty; and your notes.
The record book. Spending per watch and any receipts you attach — image or PDF, invoices included.
The use log. Which watch on which day, the occasion and your notes.
Your profile. The collector questionnaire, wrist preference, the "about me" text, language and currency.
Photos. Of the watch, of the wrist and of receipts.
The report. The curation text generated at your request, and any feedback you give on it.
Where it lives
On Firebase, from Google Cloud. The database is in the Sao Paulo region (southamerica-east1) and files sit in the same project's storage. The functions that process this data run in the United States (us-central1).
What leaves for third parties
Anthropic (United States). To generate the report, to fill a watch sheet automatically and to review what is stored, the contents of your collection and use log are sent to Anthropic's API. Under that API's commercial terms, the content is not used to train models.
Google (United States). When you use the watch sketch, the photo is sent to Gemini to generate the image.
Nobody else. There are no ads, no trackers, no audience analytics, and nothing is sold or handed to anyone. The app uses no third-party cookies; what it keeps in your browser is what it needs to keep you signed in and remember your language.
For how long
As long as the account exists. When you delete your account the data is erased immediately — there is no copy kept elsewhere and no grace period. The project's own operating-cost figures survive with no link to you: your account identifier is stripped from them.
Taking it with you, and leaving
Under Profile in the app there are two export buttons — the collection and the use log, both as CSV — and account deletion.
Deletion erases the whole tree: watches, each one's record book, use logs, profile, report, photos and receipts, the access record and the sign-in credential itself. It cannot be undone. Export first.
Beta
Access is by invitation and the app is in beta. If anything on this page changes, the date above changes with it.
Updated 17 September 2026.