Privacy Policy

Pomodomo ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the Pomodomo web application.

By using Pomodomo, you agree to the terms outlined in this policy.

We collect information to provide and improve our services.

Email address (required for registration and authentication)

Display name (user-provided)

Avatar URL (obtained from OAuth providers such as Google or GitHub)

Unique user identifier (UUID)

Account creation and last sign-in timestamps

Session information including title, duration, break duration, and cycles completed

Completion status and timestamps

User-created tags for session categorization

Task and todo details with completion status

Onboarding completion status

Users may access basic timer functionality without creating an account

Guest data is stored locally in the browser only

Guest data is not transmitted to or stored on our servers

Page views and navigation patterns

Performance metrics (Core Web Vitals)

Geographic region (country/region level only)

Device type, operating system, and browser information

Referrer URLs

We use collected information to:

Provide authentication and account management services

Save and display your session history and productivity analytics

Maintain and secure our services

Improve application performance and user experience

Communicate important service updates when necessary

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Pomodomo uses the following third-party services to operate:

Supabase

Purpose: Authentication and database services

Data Shared: Email address, display name, session data

Privacy Policy: supabase.com/privacy

Vercel

Purpose: Web hosting and analytics

Data Shared: Anonymous usage metrics

Privacy Policy: vercel.com/legal/privacy-policy

Google OAuth (Optional)

Purpose: Alternative sign-in method

Data Shared: Email address, name, profile picture

Privacy Policy: policies.google.com/privacy

GitHub OAuth (Optional)

Purpose: Alternative sign-in method

Data Shared: Email address, username, avatar

Privacy Policy: docs.github.com/site-policy/privacy-policies

Google Fonts

Purpose: Font delivery

Data Shared: IP address for content delivery

Privacy Policy: policies.google.com/privacy

We use essential cookies to maintain your authenticated session. These cookies are:

Managed by Supabase authentication service

Secure and HttpOnly where applicable

Necessary for core functionality

We do not use advertising or tracking cookies. For more information, please see our Cookie Policy.

User data is stored indefinitely while your account remains active

Session history, tags, and tasks are retained unless manually deleted

Backup data may persist temporarily for security and recovery purposes

Server logs may be retained for up to 90 days for security monitoring

You have the right to:

Access your personal information by signing into your account

Request correction of inaccurate personal information

Request deletion of your account and associated data

Export your data (feature in development)

To exercise these rights, please contact us at frank.sadik28@gmail.com.

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We may disclose personal information if required by law, such as:

In response to valid court orders or subpoenas

To comply with legal processes

To protect our rights, property, or safety

To prevent fraud or abuse

Pomodomo is accessible globally. Your information may be transferred to and processed in countries other than your country of residence, including the United States and European Union, through our service providers (Supabase and Vercel).

Pomodomo is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy periodically. Material changes will be communicated through in-app notifications or email. Continued use of our services after changes constitutes acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy, please contact:

Email: frank.sadik28@gmail.com Owner: Sadik Bajracharya