Legal & Compliance

End-User Licence Agreement — Desktop

Version: v1.0Last reviewed: 2026-06-30Source: policies-public/eula-desktop.md

End-User Licence Agreement — TimerOS Desktop

Version 1.0 - Effective 2026-05-28 - Last reviewed 2026-06-17 - Owner: Vezoft - Status: Published

This End-User Licence Agreement ("EULA") is a binding contract between you ("you", "Licensee") and Vezoft (a company registered in Bulgaria under company number (EIK) 202823109, with its registered office in Kardzhali, Bulgaria) ("Vezoft", "we", "us") (see Imprint for the full registered address). It governs your installation and use of the TimerOS Desktop application (the "Software"), namely:

  • the TimerOS Desktop application binary for Microsoft Windows (macOS support planned), including the bundled rule engine, the bundled small on-device classifier, and any updates we make available.

The Software is the locally-installed Windows client for the TimerOS service. Your use of the hosted TimerOS service itself (the API, the web dashboard application, the Android companion application, the marketing and admin website, the client portal) is governed separately by the Terms of Service, the Privacy Policy, the Data Processing Agreement, and the Acceptable Use Policy. In case of conflict between this EULA and the Terms of Service, the Terms of Service prevail for matters relating to the hosted service and this EULA prevails for matters relating to the locally-installed Software.

The Android companion app is not licensed under this EULA. The TimerOS Android companion application is a review-and-management dashboard distributed through Google Play; it does not track time or run the activity classifier. It is licensed and governed by the Terms of Service together with the Google Play Terms of Service (and, when iOS launches, the Apple App Store terms), not by this Desktop EULA.

You accept this EULA the first time you launch the Software, by clicking the "I agree" button presented on the first-run screen, or by installing the Software where the installer presents the EULA. If you do not accept it, do not install or use the Software.

1. What the Software is

The Software is the locally-installed Windows client of the TimerOS platform:

  • TimerOS Desktop — a signed binary for Microsoft Windows at launch, with native macOS support planned. It runs a small timer bar and a separate dashboard window on your machine, and communicates with the hosted TimerOS API at https://api.timeros.ai over HTTPS.

The TimerOS Desktop binary bundles two additional components that are the subject-matter of this EULA in their own right, because they are proprietary to Vezoft and are not third-party software:

  • The rules engine source-of-truth tables. A deterministic, scored rule engine compiled into the Software together with the curated lists of well-known work and non-work apps and websites against which it scores activity. These tables are Vezoft's editorial work-product and are protected by copyright and the EU sui-generis database right (Directive 96/9/EC).
  • The bundled in-house classifier weights. A small (a few tens of kilobytes) on-device statistical classifier trained by Vezoft from the rule engine's own seed tables plus a hand-curated extra-seed dataset. The model weights are compiled into the installer; there is no third-party model licence, no Hugging Face download, no Llama, no Qwen, no Gemma, no OpenAI weights, and no upstream open-source model licence that applies to these weights. They are wholly owned by Vezoft.

The Software also incorporates open-source components whose licences are listed in open-source-licenses.md. Section 5 below describes how those licences interact with this EULA.

1A. The Android companion app is governed elsewhere

The TimerOS Android companion app (a review/management dashboard that does not track time or run the classifier) is not licensed under this EULA. It is distributed through Google Play, operated by Google LLC, and your installation and use of it is governed by the Terms of Service together with the Google Play Terms of Service. Google LLC's role (Google Play distribution and Firebase Cloud Messaging push delivery) is described in the Sub-processors page. When a TimerOS app for iOS launches through the Apple App Store, the corresponding Apple App Store terms will apply to that app — again outside this Desktop EULA. Nothing in this EULA grants, restricts, or otherwise governs any licence to the Android or (future) iOS apps.

2. The licence we grant you

Subject to your continuing compliance with this EULA and with your organisation's active subscription to the hosted TimerOS service, Vezoft grants you a personal, non-exclusive, non-transferable, non-sublicensable, revocable, royalty-free licence to:

(a) install and run the Software on workstations that you own, lease, or are authorised to use for your work;

(b) use the Software for its intended purpose — recording your own work time, viewing your own time entries, and receiving on-device activity classifications — in connection with a valid TimerOS user account on a paid or trial tenant; and

(c) make a reasonable number of back-up copies of the installer file for archival purposes.

The licence is per-user, not per-device. The same individual may install the Software on the workstations they personally use (for example, a primary laptop and a secondary desk machine). The licence is not floating, concurrent, or transferable between individuals — your account credentials are personal and may not be shared.

The licence is co-terminous with: (i) the underlying TimerOS subscription, and (ii) your individual user account on that subscription. If either ends, the licence ends and you must uninstall the Software per Section 8.

3. What you may not do

You may not, and may not permit any third party to:

  • copy, modify, translate, adapt, or create derivative works of the Software, except as expressly permitted by the open-source licences of any embedded open-source components;
  • reverse engineer, decompile, or disassemble the Software, except to the minimum extent that applicable law (for example, Article 6 of the EU Software Directive 2009/24/EC on interoperability) cannot be lawfully excluded;
  • extract, copy, retrain on, or distribute the bundled classifier weights or the rule-engine source-of-truth tables, in whole or in substantial part, whether for use in a competing product, for training another machine-learning model, or for any other purpose;
  • remove, obscure, or alter any copyright, trademark, version, or licence notice in the Software or its installer;
  • use the Software to provide a hosted or managed service to third parties (you may not "rebrand" the desktop client and offer it under your own brand);
  • circumvent any licence enforcement, telemetry suppression, update suppression, or anti-tamper mechanism in the Software;
  • use the Software in any way that violates the Acceptable Use Policy, applicable export-control law, or applicable workplace-monitoring law (see Section 6 of the Terms of Service).

The bundled model weights and the curated rule tables are confidential and proprietary information of Vezoft. They are licensed, not sold. No rights are granted by implication, estoppel, or otherwise.

4. The on-device classifier — what it processes and where it stays

The Software includes a two-layer activity classifier that runs entirely on your workstation. This section is part of the licence terms because it determines how the bundled tables and weights are used, and what user-generated data the Software keeps locally.

4.1 The rules layer

The rules layer is a deterministic, scored rule engine that takes a context object — the title of the current foreground window, the name of the running application, the user's employee role, the user's assigned projects, and the user's current tasks — and combines weighted signals to produce a confidence score for productive versus idle. Signals include matches against the built-in lists of well-known work and non-work apps and websites, matches against curated window-title lists (the main signal for browser tabs), overlap between the window title and the user's assigned projects or tasks, and a job-title keyword bonus. The engine returns a result tagged with the source of the matching signal. When no signal matches at all, the engine defers to the on-device classifier layer.

4.2 The on-device classifier layer

The on-device classifier layer is a small statistical classifier (productive vs idle) that runs in-process on your CPU. It uses the name of the running application and the title of the current foreground window only.

The training seed dataset is compiled into the binary and is built from the rule engine's own built-in lists of well-known work and non-work apps and websites plus a small hand-curated set of realistic window-title examples. The trained model and any corrections you record through the timer-bar UI are stored only locally on your computer. The model is retrained on seed + corrections so that it adapts to your workstation over time, using a bounded local-only list of your corrections.

We maintain a model card and an EU AI Act applicability assessment for the classifier, available to competent authorities on request.

4.3 What does not leave your machine

Nothing about the classifier's inputs is transmitted off your device. Neither layer issues network calls. There is no model download, no inference server, and no GPU dependency. The training seed is compiled into the binary; the trained model and your corrections are stored only locally on your computer where the correction was made. Raw application names and window titles never leave your machine for classification purposes.

This is a deliberate privacy upgrade over earlier TimerOS designs that contemplated a locally-running large language model. The current architecture runs entirely on your device with no cloud AI service, no model download, and no large language model, and removes any background subprocess that touches your activity data.

Note that the Software may separately transmit the classification result (the label and the confidence) to the TimerOS API as part of time-entry telemetry, so that the hosted dashboard can display whether you are currently active. That transmission is governed by the Privacy Policy, Section 2.3. The classifier itself never transmits the underlying window title or application name.

4.4 The per-workstation nature of your corrections

Because corrections are stored only on the specific workstation where you made them, your trained model does not follow you between workstations. If you install the Software on a second workstation, the second installation starts from the seed model and re-learns from your corrections on that machine. This is a deliberate design choice: it means that your private learning data never traverses the network, and it cannot be aggregated by Vezoft, by your employer, or by any third party. The trade-off is that you must re-teach a new workstation if you switch machines.

If you wish to migrate your corrections, you may manually copy the classifier data directory from one workstation to another at your own discretion. We do not provide a hosted sync facility for this data.

4.5 No automated decision-making under GDPR Art. 22

The bundled classifier is not an automated decision-making system within the meaning of GDPR Article 22. It produces a category label and a confidence score; it does not, by itself, make any decision that produces legal effects concerning a worker or that similarly significantly affects a worker. The Terms of Service, Section 6(d), require Customer organisations to refrain from using the classifier output as the sole basis for any employment decision. Workers retain the right to override any classification through the timer-bar UI, and the recorded correction is fed back into the local training set. See the Privacy Policy, Section 3, for the full EU AI Act Article 50 transparency notice.

5. Open-source components

The Software incorporates open-source software. The list of open-source components, their versions, their copyright notices, and the full text of their licences is published at open-source-licenses.md and is also available in-app at Help → About → Open-source licences.

The open-source components are licensed under their own terms (predominantly MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, MPL-2.0, and ISC). Nothing in this EULA reduces, modifies, or overrides any right you have under those open-source licences with respect to those components. The proprietary Vezoft-authored parts of the Software — including but not limited to the rules-engine source-of-truth tables and the bundled classifier weights described in Section 1 — are not released under any of those open-source licences and remain proprietary to Vezoft under this EULA.

If you have questions about the open-source components, email legal@vezoft.com.

6. Updates and telemetry

We may issue updates, patches, and new versions of the Software from time to time. Updates may be delivered automatically through the Software's update channel and may include changes to the bundled rule tables and the bundled classifier weights. This EULA governs any update unless the update is accompanied by a separate licence, in which case the separate licence governs that update.

The Software performs minimal telemetry: it transmits classification results, time-entry data, and crash diagnostics necessary to operate the hosted service. It does not transmit window titles, application names, screenshots, keystrokes, audio, video, or browsing history. The full set of fields that leave your device is described in the Privacy Policy, Section 2.3.

7. Reservation of rights and intellectual property

All right, title, and interest in and to the Software — including the rules engine, the source-of-truth tables, the bundled classifier weights, the source code, the trademarks "TimerOS" and "Vezoft", the look and feel, and any documentation — are and remain the property of Vezoft and its licensors. This EULA grants you a licence, not a sale. All rights not expressly granted to you in Section 2 are reserved.

The bundled classifier weights and the curated rule tables are confidential and proprietary information of Vezoft. You agree not to disclose them, extract them from the binary, or use them outside the Software.

8. Uninstall — what stays, what goes

You may uninstall the Software at any time using your operating system's standard uninstall mechanism (Add/Remove Programs on Windows; drag-to-Trash on macOS when the macOS desktop build launches). This Section concerns the Windows desktop Software only; uninstalling or removing the Android companion app is handled through Google Play and is outside this EULA. When you uninstall, the Software's uninstall routine will remove:

  • the installed program files;
  • the Software's locally cached auth tokens, theme, and UI preferences;
  • the Software's locally stored application state;
  • the locally stored classifier data, including the trained model cached for your workstation and your local correction history.

After uninstall, no classifier-related data persists on your workstation. The bundled seed tables and seed weights are part of the binary and are removed with the binary itself. Your time entries that were already transmitted to the TimerOS API remain on the TimerOS service and are governed by the Privacy Policy and the Data Processing Agreement; to request deletion of those records, contact your employer (the controller of that data) or, if you are the account owner, follow the deletion process in the hosted dashboard.

If you reinstall the Software after an uninstall, the classifier starts from the bundled seed weights again and re-learns from any new corrections you record on that workstation.

9. Warranty disclaimer

To the maximum extent permitted by law, the Software is provided "AS IS" and "AS AVAILABLE" without warranty of any kind, express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement. Vezoft does not warrant that the Software will be uninterrupted, error-free, or free of harmful components, or that the on-device classifier will produce accurate or consistent labels. The classifier is approximate by design and may, for example, label a browser tab reading documentation as idle if the window title does not match a productive-title pattern.

Mandatory consumer-protection rights (where you qualify as a consumer under local law) are not affected by this Section.

10. Limitation of liability

To the maximum extent permitted by law:

  • Vezoft is not liable for indirect, incidental, consequential, special, punitive, or exemplary damages, or for loss of profits, revenue, goodwill, anticipated savings, business opportunity, or data, even if advised of the possibility.
  • Vezoft's total aggregate liability arising out of or related to this EULA is capped at the greater of (i) one hundred euros (EUR 100) and (ii) the amounts your organisation paid Vezoft for the underlying TimerOS subscription in the twelve months preceding the event giving rise to the claim.
  • Nothing in this Section limits liability for fraud, gross negligence, wilful misconduct, death or personal injury caused by negligence, or any liability that cannot be limited under applicable law (including direct claims under GDPR Art. 82).

11. Termination

This EULA — and the licence granted in Section 2 — terminates automatically:

  • if your underlying TimerOS user account is deactivated or your organisation's subscription is cancelled or terminated;
  • if you breach any material term of this EULA (in particular, the prohibitions in Section 3);
  • if you uninstall the Software per Section 8.

On termination you must stop using the Software, uninstall it from all workstations on which you installed it, and destroy any back-up copies. Sections 3 (restrictions), 4.3–4.5 (data residency facts), 5 (open-source), 7 (IP), 9 (warranty disclaimer), 10 (liability), 12 (governing law), and 13 (miscellaneous) survive termination.

12. Governing law and jurisdiction

This EULA is governed by the laws of Bulgaria, excluding its conflict-of-laws rules and the UN Convention on Contracts for the International Sale of Goods. Each party submits to the exclusive jurisdiction of the courts of Kardzhali, Bulgaria. EU consumers retain the right to bring claims in their country of residence and to use the online dispute-resolution platform at ec.europa.eu/consumers/odr.

13. Miscellaneous

  • Entire agreement. This EULA, together with the Terms of Service, the Privacy Policy, the DPA, the Acceptable Use Policy, and the open-source licences, forms the entire agreement between you and Vezoft for the Software. In case of conflict the order is: order form > DPA > Terms of Service > this EULA > AUP > Privacy Policy > SLA.
  • Changes to this EULA. We may update this EULA. The Software will display the updated EULA on next launch after a material change and require you to re-accept. If you do not accept, you may uninstall per Section 8 without penalty.
  • Assignment. You may not assign this EULA. We may assign it in connection with a merger, acquisition, or sale of assets.
  • Severability. If any provision is unenforceable, the remainder remains in force.
  • No waiver. Failure to enforce is not waiver.
  • Notices. To Vezoft: legal@vezoft.com, with a postal copy to our registered office in Kardzhali, Bulgaria (see Imprint for the full registered address). To you: the email address on your TimerOS account.
  • Export controls. You confirm that you are not on a US, EU, or UK sanctions list and are not located in a comprehensively sanctioned country.

Contact: Vezoft, with registered office in Kardzhali, Bulgaria (see Imprint for the full registered address). Email legal@vezoft.com for licensing questions, privacy@timeros.ai for privacy questions, security@timeros.ai for security incidents. Bulgarian Commercial Register No. (EIK) 202823109.