Privacy Policy

Last updated: July 27, 2026

This policy covers PomoDo's Free tier and all Pro plans (3-day free trial, Monthly ₹49/month, Annual ₹249/year). See the About page for plan details.

PomoDo ("we", "our", "the app") is a pomodoro timer and todo list application. We respect your privacy and are committed to protecting your personal data.

1. Information We Collect

Depending on how you use the app, we collect:

Google Sign-In: signing in is done entirely through Google. From your Google account we receive your email address, your display name, and your profile photo URL. We never see, receive, or store your Google password — authentication is handled by Google Firebase Authentication.

Google Sign-In is the only way to sign in to PomoDo. We do not offer email/password accounts, and there is no guest mode.

We also store your todo list (including any optional short notes you add to tasks), task status and timing metadata, timer and alarm-sound preferences, subscription status, and focus streak data.

2. How We Store Your Data

All signed-in user data is stored in Google Firebase Firestore.
Firestore Security Rules enforce strict per-user data isolation — each user can only read and write their own documents. No other user or unauthenticated party can access your data.
Free-tier data stays on your device in your browser's localStorage and is not written to our servers. Cloud sync to Firestore applies to Pro access (the 3-day free trial or a paid plan).

3. How We Use Your Information

To provide and maintain the app's functionality.
To sync your data across devices when you sign in (Pro tier).
To process payments via Razorpay for Pro subscriptions.
To send transactional emails: subscription confirmation, cancellation confirmation, and a 3-day-before-expiry renewal reminder.
To generate PDF and Excel reports that only you can download.

4. Third-Party Services

Google Firebase — Authentication (Google Sign-In) and data storage (Firestore).
Razorpay — Payment processing (PCI DSS compliant). We never see or store your card details.
Vercel — Web hosting and serverless functions for transactional email.
Gmail SMTP — Delivery channel for transactional emails from our admin account.

We do not sell, trade, or share your personal data with any other third parties.

5. Data Security

Firebase Security Rules for per-user data isolation (request.auth.token.email == userEmail).
HTTPS for all data in transit.
Sign-in handled exclusively by Google via Firebase Authentication — no password ever reaches PomoDo.

6. Cookies & Local Storage

We do not use advertising or tracking cookies. We use localStorage on your device to: remember your session, keep the app usable offline, store free-tier data locally, and persist your focus streak and focus insights. You can clear this at any time from your browser settings.

7. Subscriptions & Cancellations

All PomoDo paid plans are one-time payments with no auto-renewal. You can cancel your active subscription at any time from the User Menu or Pricing Modal — a confirmation dialog will show you exactly what you'll lose before the cancellation is finalized. Cancelling takes effect immediately; no pro-rated refunds are issued for the remainder of your paid period, but you retain Pro access until the originally-scheduled expiry date.

8. Data Retention & Deletion

Your data is retained as long as you have an active account. You can delete your account and all associated data at any time by emailing pomodo.support@gmail.com from the address on file.

9. Your Rights

You have the right to access, correct, export, or delete your personal data. For any of these requests, contact us at pomodo.support@gmail.com.

10. Children's Privacy

PomoDo is not directed at children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a new "Last updated" date.

12. Contact

For questions about this privacy policy, contact: pomodo.support@gmail.com

← Back to PomoDo