Privacy Policy

1. Information We Collect

When you use Pomofy, we collect information you provide directly to us, such as when you create or modify your account, use our services, or communicate with us. This may include:

• Account information (email address, name, profile picture).
• Data regarding your focus sessions, tasks, productivity metrics, earned coins, and unlocked focus artwork.
• Room messages, block preferences, community-rule agreement and moderation reports. Restricted report evidence and identifiers are retained for up to 90 days; recovery backups have separate retention.
• OAuth tokens if you connect third-party integrations like Google Calendar.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services. Specifically, we use your data to:

• Provide personalized productivity insights.
• Sync your data across devices.
• Process transactions (via our payment partners).
• Send you technical notices and support messages.

3. Third-Party Services

If you choose to connect Google Calendar or other third-party services, we request only the permissions necessary to provide the features you enable. Pomofy's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Payments. Pomofy Plus is sold on pomofy.xyz through Polar, which acts as the seller and handles payment details, receipts, tax and billing emails. Pomofy never sees your card details. Polar tells Pomofy your email address, its customer and subscription identifiers, and whether your plan is active and until when, so Plus can be switched on for your account.

Crash reports. If the Android app crashes, Firebase Crashlytics sends a crash report: device model, Android and app version, and the technical details of what went wrong. It never includes your tasks, notes or focus history. You can turn this off in Settings under Privacy and security.

AI features. A few optional features send a request to Groq, an AI service, only when you use them: Suggest steps sends the task title; Sum up my week sends the titles of recent tasks and focus rounds with your weekly totals; the calendar's smart scheduling sends the titles and lengths of the tasks being scheduled; and Math to LaTeX sends an image of the handwriting you selected. Groq processes the request to return a result under its own privacy policy. Nothing else is sent to an AI service, and these features never change your tasks or notes without you choosing to.

4. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

5. Android App

The Android app stores tasks, focus sessions, preferences, editor drafts, and pending changes in its private device storage. The app requires a Pomofy account. Workspaces from earlier device-only builds are kept separately and are never automatically merged into your account.

The app sends account requests and saved changes to Pomofy over HTTPS. Sign-in cookies are encrypted using Android Keystore. Passwords and authentication codes are not saved to device storage. Android cloud backup and device-transfer backup are disabled for app data. Optional face or fingerprint unlock uses Android system authentication; Pomofy does not collect biometric templates.

Notification permission is used for timer alerts and optional reminders. When you enable push reminders, Firebase Cloud Messaging processes installation and notification registration identifiers to deliver them. Native Firebase Analytics collection is disabled. Denying notification permission does not prevent timer completion. Home-screen widgets show your saved timer or last synchronized daily progress. When app lock is enabled, widgets hide those values and open Pomofy for authentication. Widgets do not display task notes or account names. Data exports are saved only to a location you choose; pending-data recovery exports can contain work from multiple account scopes. Keep exports private. You can remove pending changes in the app, delete your connected account through Account settings, or uninstall the app to remove its device storage. Uninstalling does not delete data already saved to your server. To prevent interrupted retries from recreating deleted work, the server retains minimal write identifiers and payload fingerprints without a second copy of task or session contents. These retry receipts are removed when you delete your account.

Accessibility service (focus guard). The optional "Block apps during focus" feature uses Android's Accessibility service, and only after you agree to an in-app explanation and turn it on yourself. While a focus round runs, it receives the package name of the app that comes to the front, so it can show a "can wait" screen for apps you chose. It cannot read screen content or what you type, it ignores everything when no round is running, and the app names it sees are never stored, collected or sent off your phone. You can turn it off at any time in Android's Accessibility settings.

Other optional permissions: calendar access adds your focus rounds to a "Pomofy" calendar on your phone; the microphone is used only while you record a lecture in a notebook, and recordings stay with that notebook.

Notes and Account Storage

Pomofy stores notebook titles, typed text, handwriting and highlighting strokes, cover and paper settings, page order, task links, and imported PDF or image content to provide editing, export, recovery and cross-device sync. You choose files through Android’s file picker. Pomofy reads the files you select; this does not give it general access to your files. Imported PDF pages and images are converted into compressed page images for annotation. Pomofy saves the converted content, not an unchanged copy of the original PDF. Notes and imports are not sent to an AI service, except the handwriting you select when you use Math to LaTeX (see AI features).

Notebook files are encrypted in Android's private storage and separated by account. Sync uses your authenticated HTTPS connection to Pomofy. The application server can read cloud content to provide the service; this is not end-to-end encryption.

The account storage view combines saved notebook content and imports, tasks and projects, focus history, profile/preferences, and focus rewards under a 5 GB allowance. This is a usage allowance, not reserved capacity. Individual notebook, file and overall service capacity limits also apply. Notebook uploads take other saved account content into account when checking available space. Storage figures exclude security/operational logs, database indexes and extra copies made for recovery. Deleting live content releases its measured storage; changes are reflected after synchronization.

Encrypted recovery copies are kept in Pomofy's restricted Google Drive backup account using rclone. Pomofy does not gain access to your personal Google Drive. Notes recovery snapshots run every 15 minutes when services are available, with a latest copy and daily snapshots retained for seven days. Full-service backups have separate retention.

Deleting a notebook or account removes its live cloud content. Previously created restricted recovery snapshots may remain until their retention period ends. Logging out retains private device copies for that account. Account deletion also attempts to remove its notebooks from that phone. Uninstalling removes local device data but does not delete cloud content. Account JSON exports include notebook and imported content; notebooks can also be exported as annotated PDFs.

6. Discord and Account Deletion

If you link Discord, Pomofy stores the linked Discord ID and displays existing bot statistics and your Pomofy Plus status. Authenticator codes are not stored on your phone. Temporary Discord authorization proofs are encrypted on your phone, expire after ten minutes, and are cleared when authorization completes or is cancelled.

Deleting your web/app account removes its profile, owned productivity records and Discord link. Existing records in the separate Discord bot service remain unless you request their removal. Shared challenge content, restricted recovery backups and security audit records may be retained for recovery, security and fraud prevention.

Delete your Pomofy account or request data removal. Cancel provider subscriptions separately before deleting an account.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].