Onboarding wizard

New users see a 4-step wizard: create workspace, configure monitoring, invite team members, and finish / download the agent.

Timezone & week start

Set the workspace timezone in Settings. This affects attendance boundaries, shift limits, and the day used for daily aggregates. Choose the first day of the week for weekly reports.

Monitoring mode

• Automatic: the agent tracks whenever the user is within their configured shift window.
• Manual: the user starts and stops tracking from the tray or floating panel.

Workspace tokens

Generate workspace tokens in Settings → Tokens for legacy device enrollment via the /api/v1/agent/register endpoint. Tokens can be revoked at any time.

Email & password

The default sign-in method. Passwords are hashed with bcrypt. Sessions use secure, HTTP-only cookies.

Multi-factor authentication (MFA)

Users can set up TOTP-based MFA from Settings. After entering the correct password, a 6-digit code from an authenticator app is required. MFA is also enforced when enrolling the desktop agent via email/password.

Invitation-based access

Admins invite users by email. The recipient clicks a secure tokenized link, creates a password, and joins the workspace automatically.

Role-based access

Roles include Owner, Admin, Manager, Team Lead, HR, Contributor, Time Reporter, Viewer, and Auditor. Permissions are enforced by the role-permission matrix and can be overridden per tenant.

Team directory

View active members and pending invitations. Each row shows name, email, role, status, last-seen info, and a quick-info modal.

Invitations

• Go to Team and click Invite Member.
• Enter the email and choose a role.
• Pending invitations can be cancelled.
• The invitation email is branded and contains a secure acceptance link.

Roles

Built-in roles: Owner, Admin, Manager, Team Lead, HR, Contributor, Time Reporter, Viewer, Auditor. You can also customize the role-permission matrix in Settings → Roles.

Member actions

• Change role or status (active / disabled).
• Reset password.
• Edit profile: name, email, employee ID, timezone, payroll currency/rate, schedule flags.
• Set remote log level for agent debugging.
• Delete member (owner cannot be deleted).

Date ranges

Filter by today, yesterday, this week, last week, this month, last month, or a custom range.

KPI cards

• Active time & idle time
• Productivity score
• Uncategorized percentage
• Total users & active devices
• Screenshot count

Visualisations

Top apps, top window titles, top domains, top categories, category tree chart, sunburst chart, team timeline, and per-app timeline.

Live status & meetings

See who is online/offline, their last seen time, and today's tracked seconds. Meeting analytics include total meeting time, count, average duration, idle overlap, hourly/weekly breakdown, and app usage during calls.

Captured data

The agent records the foreground application name, window title, browser URL (with the browser extension), active/idle state, and aggregate input counters (keystrokes, mouse clicks, moves). It does not capture keystroke content, passwords, clipboard, files, webcam, microphone, or location.

Classification

Each activity is classified as Productive, Unproductive, or Neutral based on the workspace category rules. Uncategorized time is shown separately so admins can fine-tune rules.

Meeting detection

Meetings are detected from window titles for Microsoft Teams, Zoom, Google Meet, Webex, Skype, GoTo, BlueJeans, and Slack huddles.

Idle time

Idle time is calculated from OS input events and merged into continuous idle intervals. A configurable threshold (default 300s) determines when tracking pauses.

Attendance grid

View attendance by day, week, month, or custom range. Status can be present, absent, late, or partial.

Scheduled shifts

Create recurring (weekly) or one-off schedules with start/end times and working-hours limits. Schedules are timezone-aware.

Manual / offline time

Users can submit offline time requests with a reason and duration. Managers approve or reject them from the attendance page.

Export

Export the attendance grid to CSV for payroll or external reporting.

Available reports

Export & print

All reports support CSV export. Project & Tasks also supports PDF export. A dedicated print layout is available for clean hard copies.

Gallery

Browse screenshots by user and date with pagination. Each screenshot shows the app, title, URL, activity percentage, keyboard/mouse percentage, and productivity percentage.

Privacy controls

• Blur: screenshots can be blurred at capture time.
• Visibility delay: a configurable delay (default 15 minutes) before screenshots appear in the gallery.
• Retention: automatic deletion after the configured number of days.

Project/task assignment

Assign a screenshot's duration to a project and task for accurate client or project billing.

Storage

Screenshots can be stored locally or in Wasabi / any S3-compatible object store with presigned URLs.

Projects

• Create, edit, archive, and delete projects.
• Set time limits per week, month, etc.
• Assign all members or specific users.
• Auto-detect projects from activities where configured.
• Export projects to CSV.

Tasks

Each project can have tasks. Users select the current project/task from the agent's floating panel so activity and screenshots are tagged automatically.

Payroll runs

Create a run for a date range. Time Progress computes pay from each user's rate, rate period (hourly, daily, monthly, yearly), and scheduled hours.

Overtime & adjustments

Apply overtime and short-hour rules per user. Add manual adjustments to any line item. Lock previous pay runs when a new run is created.

Payslips

Send payslip emails to every user in a run with one click.

Daily AI reports

Generate per-user daily reports that include productivity score, focus score, burnout risk, top distraction, and a written narrative.

AI providers

If Azure OpenAI is configured, narratives are generated by GPT. Otherwise a heuristic fallback generates the narrative locally from the day's data.

Plans

Choose from Free, Starter, Business, or Enterprise plans. Each plan has different feature limits.

PayPal checkout

Upgrades use PayPal orders and capture. A webhook endpoint verifies payment status server-side.

Trial lifecycle

New workspaces start with a 14-day free trial. Reminder emails are sent 3, 2, and 1 days before expiry. Expired free-trial workspaces are automatically suspended.

Data export

Users can export their own data as JSON: devices, activity logs, screenshots, AI reports, and audit logs.

Data deletion

Submit a deletion request from Privacy. Admins see pending requests and can action them.

Branding

Set the workspace display name, logo URL, and primary color for a white-label experience.

SSO

Configure SAML, Azure AD, or Okta fields for single sign-on.

Monitoring settings

Toggle screenshots, set the screenshot interval, blur, retention days, and monitoring mode.

API keys & tokens

Create workspace tokens for agent enrollment and public API keys (tpk_...) with read/write scopes.

Category builder

Manually map apps to categories, bulk assign, use regex rules, or let the AI-assisted builder suggest categories.

Logs

View debug logs with level/search filters and audit logs with action filters. Prune logs older than 30 days.

Cron endpoint

A single endpoint, /cron/daily?token=..., runs once per day and handles every automated email.

Email types

• Weekly timesheet: sent on the last day of each tenant's configured week with tracked hours, productive time, productivity score, project hours, and a category pie chart.
• Trial expiry reminders: 3, 2, and 1 days before a free trial ends.
• Welcome email: sent when a new tenant/workspace is created.
• Plan-paid confirmation: sent after a successful upgrade.
• Invitation email: sent when a team member is invited.
• Payslip email: sent per payroll run.

Mail drivers

The built-in mailer supports a log driver for development and raw SMTP for production. All sends are recorded in the email_logs table.

Supported browsers

Chrome and Edge use Manifest V3. Firefox uses Manifest V2. Standalone ZIP files are available for Chrome, Edge, and Firefox.

What it tracks

The content script reports the active tab URL and title every 5 seconds. Internal browser URLs (chrome://, edge://, about:, extension pages) are ignored.

How it connects

The extension polls the agent's local control endpoint (127.0.0.1:17681/status) and only sends heartbeats to the local ActivityWatch server while the agent reports it is running. Tab/window/focus changes trigger an immediate heartbeat.

Core tracking

Tracks foreground app, window title, active/idle state, and aggregate input counters. Captures periodic full-screen screenshots (if enabled). The browser extension supplies tab URLs/titles.

ActivityWatch integration

Bundles aw-server-rust, aw-watcher-window, and aw-watcher-afk. Events are bucketed as window, idle, browser, input, and meeting.

Sync & offline support

SQLite buffers events and screenshots offline. Data drains when the network returns. Exponential backoff protects the server on failure.

Tray & floating panel

The tray shows today's time, sync status, and controls. The floating panel provides play/pause, project/task selection, and a live timer.

Security & compliance

Device tokens are stored in the OS credential manager (Windows Credential Manager / keyring) with a file fallback. The installer shows a consent page and the first run requires disclosure acknowledgement.

Base URL

All endpoints return JSON. Date parameters use YYYY-MM-DD unless stated otherwise.

Agent Ingestion API

Used by the desktop agent to enroll, sync activity, upload screenshots, and fetch configuration. Authentication is via a device token (dvc_...) returned at enrollment.

Public API v1

Read-only tenant API for integrations. Authentication is via a public API key (tpk_...) created in Settings → API keys.

Authentication model

1. Enrollment: call POST /api/v1/agent/login (email/password) or legacy POST /api/v1/agent/register (workspace token + email).
2. The response includes a long-lived device_token (prefix dvc_).
3. Send that token on every subsequent request as Authorization: Bearer dvc_....

Authentication

Send your public API key as a Bearer token in the Authorization header. Keys start with tpk_ and are scoped to one workspace.

Base URL

Error response format

Agent endpoints

Public API

Public API keys currently share a workspace-level rate limit. If you hit limits, reduce request frequency, cache responses, and implement exponential backoff.

Best practices

• Cache aggregate data where possible.
• Use the largest per value you need (up to 200).
• Retry 429 responses with exponential backoff.
• Don't poll endpoints more often than once per minute.

What are categories?

Categories group applications and websites into Productive, Unproductive, or Neutral buckets. You can also create custom category names.

Using the Category Builder

1. Go to Settings → Categories.
2. Search or pick activities from the discovered list.
3. Choose a rating: Productive, Neutral, or Unproductive.
4. Set the scope: Global (all users) or user-specific.
5. Save. Existing activity will be reclassified on the next aggregation pass.

Regex rules

For advanced cases, create manual rules that match window titles or URLs with a regular expression. Rules are validated before saving.

AI-assisted categories

If Azure OpenAI is configured, click Build with AI to get category suggestions. A heuristic fallback is used when AI is unavailable.

Date and user filters

Pick a date range and choose between all users or a single user. Managers and admins can view tenant-wide data; members see only their own.

Exporting

Every report page has a CSV export button. Project & Tasks also has PDF. Use the print layout for clean paper copies.

Automated reporting

The weekly timesheet email is sent automatically on the last day of your configured week. It includes tracked hours, productive time, a productivity score, project hours, and a category pie chart.

Adding members

1. Open Team and click Invite Member.
2. Enter the user's email address.
3. Select a role. Owner and Admin have full access; Viewer is read-only.
4. Send the invitation.

User roles

Disabling or deleting users

Disabled users cannot sign in or track time. Deletion removes the user from the workspace. The owner account cannot be deleted to prevent lockouts.

Creating a project

1. Go to Projects & Tasks and click Add Project.
2. Enter the project name.
3. Assign all members or specific users.
4. Set a time limit if needed (per week/month/etc.).
5. Save.

Adding tasks

Open a project, click the task count or actions menu, and add tasks. Users can then pick a project/task from the agent's floating panel.

Archiving

Archive completed projects to keep the active list clean. Archived projects remain available in reports.