Privacy Policy

Just Pomodoro · Last updated: 18 May 2026

This Privacy Policy explains what information the Just Pomodoro mobile app ("Just Pomodoro", "the app", "we", "us") collects, how we use it, and the choices you have. By using Just Pomodoro you agree to this policy.

Information we collect

We try to collect as little as possible. The data Just Pomodoro handles falls into a few categories:

Account information

When you create an account, we collect your email address and a securely hashed password. Authentication is handled by Supabase. We never store your password in plain text.

Usage data you create in the app

To sync your progress across devices, we store the data you generate inside the app on our servers, associated with your account. This includes:

• Pomodoro sessions you complete (duration, completion time, optional intent, optional mood rating and reflection note)
• Your streak history (current and best streaks)
• Projects you create (name, emoji, color, per-project timer settings)
• Friends you have unlocked and your selected favorite buddy
• Badges and achievements you have earned

This data is stored on Supabase (Postgres, hosted in the EU) and is only accessible to you when signed in.

Subscription data

If you purchase a Just Pomodoro subscription, the purchase is processed by Apple via the App Store. Subscription state (active / expired / which plan) is managed by RevenueCat on our behalf so that we can grant or revoke premium features. We do not receive or store your payment information, credit card details, or Apple account password.

Data stored only on your device

Some preferences are stored locally on your device and never leave it, including your selected theme, dark mode preference, notification preferences, ambient sound settings, and authentication tokens (kept in iOS Keychain via Expo SecureStore).

Notifications

Just Pomodoro uses iOS local notifications for timer alerts, streak reminders, and weekly summaries. These are scheduled and delivered entirely on your device. We do not operate a push notification server and we do not collect your device token.

What we do not collect

• We do not use analytics or crash-tracking SDKs that profile you.
• We do not show advertisements.
• We do not track you across other apps or websites.
• We do not access your contacts, photos, location, microphone, or camera.
• We do not sell your data to anyone, ever.

Service providers we use

Just Pomodoro relies on a small number of third-party services to function. Each of them processes only what is necessary for their role:

• Supabase — authentication and cloud sync of your app data. supabase.com/privacy
• RevenueCat — subscription management. revenuecat.com/privacy
• Apple App Store — payments for in-app purchases. apple.com/legal/privacy

Your rights and choices

You can, at any time:

• Sign out of the app to stop further sync from this device.
• Request that your account and all associated data be permanently deleted by emailing us at the address below. Account deletion is typically processed within 7 days.
• Manage or cancel your subscription from your device's Settings → Apple ID → Subscriptions.

Children

Just Pomodoro is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

If we update this policy, the "Last updated" date at the top of the page will change. For material changes we will, where appropriate, also notify you inside the app.

Contact

Questions about this policy? Email emrah.anl@gmail.com.