Privacy Policy
Last updated August 18, 2026 · See also the Terms of Service.
1. The short version
We collect what the product needs to work, plus basic product analytics to understand which features get used. No ads, no selling data, no advertising trackers. Anonymous mode keeps your focus data in your own browser.
2. What we store when you have an account
Your email address and password hash (handled by Firebase Authentication — we never see your password), your public profile (display name, name color, optional picture URL), private profile details you choose to add (occupation, date of birth — never shown to other users), your timer and appearance settings, tasks, completed focus sessions, statistics and streaks, room memberships, and the chat messages you send. Leaderboard entries store your display name and focus totals. If you submit feedback, a bug report, or a support comment, that's stored under your account too. If you report another member, we store the report and any details you add — and link your current analytics session so staff have context when reviewing it; the same applies to reports filed against you.
3. Anonymous mode
Without an account, your tasks, sessions, settings and stats live in your browser's localStorage only. They never reach our servers, and we can't recover them for you — clearing browser data deletes them. Creating an account later migrates what your browser holds.
4. What other users can see
Inside a room, members can see your display name, avatar, online status — and, depending on your privacy settings, your current task, timer phase and activity. You can turn each of those off under Settings → Privacy. The public leaderboard shows your display name and focus totals. Your email and private profile details are never shown to anyone.
5. Cookies & local storage
One session cookie keeps you signed in — no advertising or cross-site cookies. localStorage holds anonymous-mode data plus small conveniences (dismissed banners, a cached copy of your own theme so the page paints in your colors instantly) and the analytics identifier described below — analytics deliberately uses localStorage instead of cookies.
6. Product analytics
We use PostHog to understand how PomoFriends is used: page views, feature-usage events (like completing a pomodoro or joining a room), your approximate location and device/browser type (worked out automatically from your IP address — not precise GPS), performance metrics, and errors. We also record session replays — a reconstruction of how the interface looked and was used — to find and fix usability problems; anything you type into inputs is masked and never recorded. When you're signed in, this activity is linked to your account so we can understand usage across devices; without an account it's linked to a random identifier stored in your browser. Analytics events never include your tasks, messages, or other content you write, and this data is never sold or used for advertising.
7. Where your data lives
PomoFriends runs on Vercel (hosting), Google Firebase (authentication and database), and PostHog (product analytics, hosted in the US). They act as processors and may store data on servers in different regions. We don't share data with anyone else, except where the law requires it.
8. Retention & deletion
Your data stays as long as your account exists. Deleting your account from the profile page permanently removes your profile, settings, tasks, sessions, stats and private details from our database, and deletes your login. Chat messages in rooms you participated in are removed when the room itself is cleaned up. Rooms abandoned by everyone are deleted automatically.
9. Children
PomoFriends isn't directed at children under 13 (or the minimum age in your country). If you believe a child is using an account, contact us and we'll remove it.
10. Changes & contact
If this policy changes meaningfully we'll announce it in the app and update the date above. For questions or data requests (access, correction, deletion), use the Feedback button in the navigation bar or the Support page.