1. Overview
Purrodoro is a Pomodoro focus timer. You can use the app as a guest (data stays on your device) or sign in with Google to sync tasks, habits, and focus history across devices.
This policy explains what information we collect, how we use it, and your choices. If you do not agree, please do not use the app.
2. Information we collect
We collect information you provide (tasks, habits, timer settings, display name) and, when you sign in, Google account details (email, name, profile photo URL) plus a Supabase user ID for sync.
We also receive subscription status from Google Play, crash diagnostics from Firebase Crashlytics (release builds), soundscape catalog metadata, and downloaded audio files you choose to cache.
We do not collect precise location, contacts, microphone, or camera data. We do not sell personal information or use advertising SDKs.
3. How we use information
- Run the Pomodoro timer, tasks, habits, and soundscapes
- Sync your data across devices when you are signed in
- Show your account name and avatar in Profile
- Verify Premium subscription status
- Send local notifications for timer completion (if allowed)
- Diagnose crashes and improve stability
- Respond to support requests
4. Where data is stored
Guest data is not uploaded to our servers unless you sign in.
- Your device — local app database, preferences, and encrypted sign-in session. Sensitive files are excluded from Android cloud backup.
- Supabase — signed-in user data protected by row-level security.
- Google — sign-in credentials and Play Billing records.
- Firebase Crashlytics — crash stack traces and diagnostic logs.
- Cloudflare R2 — public soundscape audio files and catalog metadata.
5. Third-party services
| Service | Provider | Role |
|---|---|---|
| Supabase Auth & Database | Supabase, Inc. | Google sign-in, cloud sync |
| Google Sign-In | Google LLC | Authentication |
| Google Play Billing | Google LLC | Premium subscriptions |
| Firebase Crashlytics | Google LLC | Crash reporting (release builds) |
| Cloudflare R2 | Cloudflare, Inc. | Soundscape audio hosting |
6. Permissions
You can deny notifications or alarm permission; core timing still works while the app is active.
| Permission | Why |
|---|---|
| Internet | Sign-in, sync, soundscape catalog and downloads |
| Notifications | Timer completion alerts |
| Foreground service | Keep the focus timer running reliably |
| Schedule exact alarms | Fire segment-end alerts in the background (optional) |
| Wake lock | Timer reliability while the screen is off |
7. Data retention and deletion
To delete your account and cloud data, use our account deletion page. To delete local data only, uninstall the app or clear app storage in Android Settings.
- Guest data stays on your device until you uninstall the app or use in-app delete features.
- Signed-in data is kept in Supabase while your account exists. Sign out clears the on-device session.
- Crash logs are retained per Firebase Crashlytics defaults (typically about 90 days).
- Manual backups remain wherever you save exported JSON files.
8. Security
- Supabase sessions use encrypted storage on device (Android Keystore).
- Cloud access uses HTTPS and row-level security.
- Sensitive local files are excluded from Android cloud backup.
9. Children
Purrodoro is not directed at children under 13. We do not knowingly collect personal information from children. Contact us if you believe a child has provided data and we will delete it.
10. International transfers
Our service providers (Supabase, Google, Cloudflare) may process data in the United States and other countries. By using Purrodoro, you understand your information may be transferred to jurisdictions with different data-protection laws.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your data, withdraw consent, or lodge a complaint with a data protection authority.
EU/UK (GDPR): legal bases include contract, legitimate interests (security, crash fixes), and consent (notifications, optional sign-in).
California (CCPA/CPRA): we do not sell personal information. You may request access or deletion via the contact email below.
12. Changes
We may update this policy. We will post the new version at this URL and change the effective date. Continued use after changes means you accept the updated policy.
13. Contact
Questions or requests about privacy:
Email: nandra.saputrass@gmail.com
Developer: Endiar — Purrodoro
Delete account: Request account & data deletion