Privacy Policy
Last updated: July 11, 2026
This Privacy Policy explains how Pomobit (“we”, “us”) collects, uses, and protects your personal data when you use the Service. We are committed to handling your data responsibly and in line with applicable laws such as the GDPR, UK GDPR, CCPA/CPRA, and LGPD.
1. Who We Are
Pomobit is operated by the Pomobit team. For any privacy-related questions, contact us at [email protected].
2. Data We Collect
- From Google Sign-In: your email address, name, profile picture, and Google account ID.
- Data you create: habits, habit logs, focus/Pomodoro sessions, reports, and settings.
- Technical data: authentication tokens and basic log data needed to run and secure the Service.
3. How We Use Your Data
We use your data to provide and personalize the Service (to perform our contract with you), to keep it secure and improve it (our legitimate interests), and to comply with legal obligations.
4. Google User Data
We use the data obtained through Google Sign-In only to authenticate you and provide the Service. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell your data or use it for advertising.
5. Sharing & Third Parties
We do not sell your personal data. We share it only with infrastructure providers (such as our hosting and database providers) that process it on our behalf under contract to operate the Service.
6. International Data Transfers
Where your data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses to protect it.
7. Data Retention
We keep your data while your account is active. When you delete your account, we delete or anonymize your personal data within 90 days, except where longer retention is required by law.
8. Your Rights
Depending on your location, you may have the right to access, correct, delete, or export your data, and to object to or restrict its processing. You can delete your account and data from your account settings, or contact us at [email protected] to exercise these rights.
9. Cookies & Local Storage
We use your browser’s local storage to keep you signed in. We do not use third-party tracking or advertising cookies.
10. Children’s Privacy
The Service is not intended for children under 16 (or the local age of digital consent). We do not knowingly collect data from children.
11. Security
Your data is encrypted in transit over HTTPS, and access to your account is protected by token-based authentication.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified in the app or by email.