Privacy Policy

Last updated: March 22, 2026

Pomodo Flow is a productivity app built for focused work. This Privacy Policy explains what data we collect, why we collect it, and how we handle it. We keep it minimal and never sell your data.

1. Data We Collect

Account information

When you sign in with Google or Apple, we receive your email address and display name to create and identify your account. Authentication is handled entirely by Firebase Auth — we do not store your password.

Onboarding profile data

During onboarding you may optionally provide your name, age range, productivity goals, typical screen time habits, and similar self-reported information. This data is used to personalise your experience and, with your consent, stored in your analytics profile to help us improve the app. All onboarding fields are voluntary.

Session & usage data

With your explicit consent (requested during onboarding), we collect anonymous analytics events to understand how the app is used — e.g. Pomodoro sessions started, settings changed, onboarding steps completed. This data is tied to your account or a random anonymous ID if you are not signed in. You can withdraw consent at any time from Settings → Privacy. No browsing history or contacts are ever collected.

Crash reports

With your explicit consent, if the app crashes we receive a report including device model, OS version, app version, and the error stack trace. Used exclusively to fix bugs. Powered by Firebase Crashlytics, active only in production builds and only after consent is granted.

Purchase data

Subscriptions are processed by Apple's App Store. We use RevenueCat to verify subscription status — it receives a purchase token from Apple, never your payment details. Purchase verification is required for app functionality and is not gated behind analytics consent.

App blocking selections

When you choose which apps to block during focus sessions, those selections are managed entirely on your device via Apple's Screen Time API (Family Controls). We do not transmit this list to our servers — it never leaves your device.

2. Data We Do NOT Collect

3. How We Use Your Data

We do not use your data for advertising or sell it to third parties.

4. Third-Party Services

5. Data Retention

Analytics events and your profile are retained while your account is active. Crash reports are automatically deleted by Firebase after 90 days. PostHog analytics data is retained for 1 year by default. If you delete your account, your data is removed within 30 days.

6. Analytics Consent

Analytics and crash reporting are opt-in. We ask for your consent during onboarding before collecting any analytics or crash data. You can review our privacy practices at any time by tapping Privacy Policy inside the app's Settings screen. To withdraw consent or request data deletion, contact us at support@pomodoflow.site — we will process your request within 30 days.

Essential app functionality (authentication, purchase verification) is not affected by your analytics consent choice.

7. Your Rights

8. Children

Pomodo Flow is not directed at children under 13. We do not knowingly collect personal information from children. Contact us if you believe a child has provided us with data and we will delete it.

9. Changes to This Policy

We may update this policy as the app evolves. The "Last updated" date at the top reflects the current version.

10. Contact

Questions or data requests: support@pomodoflow.site