PomoCraft ("the App", "we", "us") is a Pomodoro productivity platform built and operated by an independent developer. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
1. Information We Collect
Account Information
When you sign in with Google, we receive your name, email address, and profile picture from Google. This is used solely to identify your account and personalize your experience.
Productivity Data
We store data you create within the App: Pomodoro session history, tasks, projects, focus statistics, and your app settings. This data is tied to your account and stored securely in our database.
Google Calendar Data
If you connect Google Calendar, we request read-only access to fetch your calendar events for display alongside your Pomodoro sessions. We do not modify, delete, or share your calendar data.
Google Tasks Data
If you connect Google Tasks, we request access to read and update your tasks so you can manage them within the App. We only modify tasks that you explicitly act on within PomoCraft.
2. How We Use Your Information
- To provide and operate the PomoCraft service
- To sync your productivity data across devices
- To display your Google Calendar events and Tasks when you choose to connect them
- To calculate statistics such as focus streaks, total focus time, and session history
- To improve the App based on aggregated, anonymous usage patterns
We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as required to operate the service (e.g. our database provider, Supabase).
3. Google API Services
PomoCraft's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Google data is used only to provide features you explicitly request
- We do not use Google data for serving advertisements
- We do not allow humans to read your Google data unless required by law or with your explicit consent
- We do not transfer Google data to third parties except as necessary to provide the service
4. Data Storage and Security
Your data is stored securely using Supabase, a managed PostgreSQL database platform with row-level security. Access to your data is protected by authentication — only you can access your own records.
Google provider tokens (used to access Calendar and Tasks) are stored in short-lived secure HTTP-only cookies and are never exposed to client-side JavaScript.
5. Data Retention
Your account data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing us at TheDevAthlete@gmail.com. We will process deletion requests within 30 days.
6. Your Rights
You have the right to:
- Access — request a copy of the data we hold about you
- Correction — update incorrect or incomplete data
- Deletion — request that we delete your account and data
- Revoke Google access — disconnect Google Calendar or Tasks at any time via your Google Account settings at myaccount.google.com/permissions
7. Cookies
PomoCraft uses cookies and local storage for:
- Authentication session management (Supabase auth cookies)
- Storing your app preferences locally (timer config, theme, tasks)
- Short-lived Google provider tokens (HTTP-only, expires in 55 minutes)
We do not use tracking cookies or third-party advertising cookies.
8. Children's Privacy
PomoCraft is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted at https://pomocraft-ochre.vercel.app/privacy with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact Us
For any privacy-related questions, data requests, or concerns, contact us at: