Privacy Policy
Plain and simple: what we keep, what we never do with it, and how to get rid of it.
Last updated:
The short version. We keep the things you create in PomoTodo, like your account, your tasks and your focus sessions, because that is the whole point of the app. We never sell your information to anyone. We never read or mine your notes. And whenever you want out, delete your account and it goes with you.
PomoTodo is made by Saiprasad Acharya. This page explains how your information is handled, without the usual wall of legal text. If anything here is unclear, just email acharyasaiprasad@gmail.com and ask.
What we keep
- Your account. Your email address, your name, and a password. Your password is scrambled before it is stored, so nobody here can read it. If you sign in with Google, we get your name, email and profile picture instead. Nothing else, and never your Gmail, Drive or contacts.
- Your stuff. The tasks, boards, notes and focus sessions you create. This is saved so it is still there when you come back and on your other devices.
- Basic usage info. Ordinary things every website sees, like your browser type and which pages loaded, so we can fix what breaks.
What we never do
- We never sell your information. Not to advertisers, not to data brokers, not to anyone.
- We never read your notes or tasks to build a profile of you, target ads at you, or train AI models.
- We never hand your content to other people. The only exception is the one you create yourself: if you invite someone to a board, they can see that board, along with your name and avatar.
Who helps us run PomoTodo
PomoTodo is a small operation, so it runs on a handful of well-known services. They only ever handle what they need to do their job:
- Supabase stores your account and your content.
- Vercel hosts the website and serves the pages.
- Google handles sign-in with Google, basic analytics, and the ads on the free pages.
Cookies and ads
A few cookies keep you signed in. Without those, the app cannot work.
The free pages, meaning the timers, calculators, templates and blog, show ads served by Google. The app itself (your dashboard, tasks and boards) shows no ads.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and to other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on those visits. Google explains how it uses information from sites that use its services and how it uses cookies in advertising.
You can opt out of personalised advertising any time in your Google Ad Settings. You can also opt out of other vendors' use of cookies for personalised advertising at aboutads.info or, in Europe, youronlinechoices.eu. Your browser settings let you block or delete cookies more broadly.
PomoTodo Focus, the Chrome extension
PomoTodo Focus blocks distracting websites while a focus session runs. It works without an account, and then everything stays inside your browser:
- Kept on your computer. Your block lists, timer settings, focus history and the count of blocked visits live in Chrome's own storage for the extension. If you use Chrome sync, Chrome copies your lists and settings to your other computers. None of it is sent to us.
- The sites you visit. To block a site, the extension compares the address of pages you open with your block list, inside your browser. It never records your browsing history and never sends a web address to us or anyone else.
- Site access. Chrome asks you before the extension can show its own page on a site, one site at a time. That access is used for blocking and nothing else.
If you choose to connect the extension to your PomoTodo account:
- What it sends. Each focus session you finish: how long it was, when it ended, the task you picked and the note you typed. They are saved to your account like sessions from the dashboard timer.
- What it reads. Your open tasks, today's focus totals and your plant progress, so it can show them to you.
- How it stays signed in. The extension keeps its own sign-in token, and your email address to show which account is connected, in Chrome's storage for the extension. Disconnecting in the extension's settings deletes both.
The extension shows no ads, contains no analytics or tracking code, and never sells or shares your data. Its use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
You are in control
- Change your name and details any time in your account settings.
- Delete your account whenever you like. That removes your profile, tasks, boards and session history.
- Want a copy of your data, or want it gone sooner? Email acharyasaiprasad@gmail.com and we will sort it out.
Backups can take a little while to cycle out after a deletion, and records of any payments stay with our payment provider for their own bookkeeping.
Keeping it safe
Everything travels over an encrypted connection, passwords are hashed, and the database is set up so that your account can only reach your own data. No service can promise perfect security, so please use a strong password and keep it to yourself.
Young users
PomoTodo is not built for children under 13. If a child under 13 has made an account, email us and we will remove it.
If this page changes
If we change how any of this works, we will update the date at the top of this page, and tell you directly if it is something significant.
Questions
Email Saiprasad Acharya at acharyasaiprasad@gmail.com. Our Terms of Service covers the rest.