Privacy Policy

App: Pomodoro Plus (com.pomodoroplus.app)

Publisher: Beluga Forge

Last updated: 2 September 2026

Applies from app version: 1.0.13

*This version replaces the policy dated 12 June 2026.*

In short: Pomodoro Plus keeps everything on your device. It has no accounts, no servers of its own, no analytics, no advertising and no tracking, and it is excluded from Android's backup system entirely. Beluga Forge never receives your timer history, your settings or your photos. The only thing that ever leaves your phone is your Google Play purchase, if you choose to make one.

1. Who is responsible for your data

Pomodoro Plus is developed and published by Beluga Forge ("we", "us"), an independent app developer based in the United States. Where the General Data Protection Regulation (EU) 2016/679 ("GDPR") or the UK GDPR applies to this app, we act as the data controller.

You can reach us at any time about privacy at:

• Email: beluga.forge@gmail.com

We have not appointed a Data Protection Officer, and are not required to, because we carry out no large-scale or systematic processing of personal data. We have likewise not appointed an EU or UK representative under Article 27, relying on the exemption in Article 27(2)(a): our processing is occasional, involves no special categories of data, and is unlikely to result in a risk to your rights and freedoms — no personal data is ever transmitted to us at all. Your privacy questions go directly to the developer at the address above.

2. What this policy covers

This policy covers the Pomodoro Plus Android app distributed through Google Play. It does not cover Google Play itself, the Android operating system, or any other app you may open from Pomodoro Plus (such as the Play Store listing when you tap "Rate this app"). Those are governed by their own privacy policies.

3. The short version: we collect nothing

Pomodoro Plus does not:

• ask you to create an account or sign in;

• ask for your name, email address, phone number or date of birth;

• contain any analytics, telemetry, crash-reporting or attribution SDK;

• contain any advertising or advertising identifiers;

• build a profile of you or make automated decisions about you;

• track you across apps or websites;

• sell, rent or share personal data with anyone — there is nothing to sell;

• transmit your timer history, your settings, or your chosen photo to us or to any third party.

We operate no servers, no database and no backend for this app. There is no place on our side where your data could be stored, because it is never sent to us.

4. What the app stores on your device

Everything below is written to Pomodoro Plus's own private storage area on your device. Other apps cannot read it, and neither can we.

4.1 Session history

Stored in a local database file named focus_timer.db. For each focus session, the app records:

• how many cycles you completed and how many you had planned;

• the focus and break durations you used;

• the timestamps at which the session started and ended;

• whether the session ran to completion or was stopped early.

Why: so the History screen can show you your own record of past sessions. This is the only reason.

4.2 Your settings and preferences

Stored in a local preferences file named user_settings. This includes your default focus and break durations, cycle count, theme mode and colour palette, sound and vibration preferences, whether Gravity Mode is on, whether you have finished the first-launch walkthrough, and whether the Appearance Upgrade has been unlocked.

Why: so the app opens the way you left it.

4.3 Saved favourite configurations

If you save a favourite timer setup, the app stores the name you gave it together with its durations, cycle count, colours, theme and sound choices.

Why: so you can reuse a setup without configuring it again. The name is free text — please do not type anything sensitive into it.

4.4 Your chosen notification sounds

If you pick a custom sound for the end of a focus or break phase, the app stores a reference (a content URI) to the sound you selected from Android's system ringtone picker. The audio file itself stays where Android keeps it; the app does not copy it.

4.5 Your custom background photo

If you set a custom background, the app stores a reference (a content URI) to the image you picked, plus the scale, position and opacity you chose when adjusting it.

Important: the app does not copy, upload, analyse or transmit your photo. It stores only a pointer to the image in your own gallery, and reads it back to draw the background. We never see it.

The photo is chosen through the Android Photo Picker, which lets you hand over one specific image without granting Pomodoro Plus access to your whole photo library. The app requests no storage or media permission at all.

4.6 Device motion (Gravity Mode)

When Gravity Mode is switched on and a timer is running, the app reads your device's accelerometer so it can pause the timer when you pick the phone up and resume it when you set it face down.

These readings are used in memory, moment to moment, purely to decide whether to pause or resume. They are never stored, logged or transmitted, and the app stops listening to the sensor as soon as the timer stops or Gravity Mode is switched off.

5. Permissions the app requests, and why

• Notifications — to show the running timer in your notification shade and alert you when a phase ends. Android asks you for this; if you decline, the timer still runs but cannot notify you.

• Foreground service — to keep the timer counting accurately while the app is in the background or your screen is off.

• Prevent sleeping — to stop the device from sleeping through the end of a phase, and to keep motion events arriving while Gravity Mode has the timer paused.

• Vibration — to buzz at the end of a phase, if you have enabled vibration.

• Google Play billing — to offer the one-time Appearance Upgrade through Google Play.

• Internet and network state — not used by the app's own code. These are added automatically by the Google Play Billing library so it can talk to Google Play. Pomodoro Plus makes no network requests of its own.

• Run at startup — added automatically by a Google support library. The app defines no boot-time behaviour.

The app does not request access to your location, contacts, camera, microphone, call logs, SMS, calendar, files or media library.

6. Android backup is switched off

Many Android apps let the operating system copy their data into the user's Google account through Android Backup. Pomodoro Plus does not.

We have disabled backup for this app at the manifest level, and additionally excluded every storage area from both cloud backup and device-to-device transfer. Your session history, settings, favourites and photo choice are therefore never copied to Google's servers, and are never carried across when you set up a new phone.

The deliberate trade-off: if you move to a new device or reinstall the app, your session history will not come with you. We think that is the right default for an app whose entire premise is that your data stays on your device.

7. The one thing that leaves your device: your Google Play purchase

Pomodoro Plus offers a single optional one-time in-app purchase (the "Appearance Upgrade", product ID pomodoro_appearance_upgrade), which unlocks additional colour palettes and backgrounds.

That purchase is handled entirely by Google Play. You enter your payment details into Google's interface, not ours. We never see, receive or store your name, payment card, billing address or any other payment information. All Pomodoro Plus receives back from Google Play is the answer to one question — whether this product has been purchased — which it stores on your device as a single true/false flag.

For this transaction, Google acts as an independent data controller under its own terms. See the Google Privacy Policy and the Google Play Terms of Service.

If you never make a purchase, no data connected with Pomodoro Plus leaves your device at all.

8. Legal bases for processing (GDPR Article 6)

For everything described above, we never come into possession of your data, so in practice there is no processing by us to justify. Where the GDPR nonetheless applies to processing that happens through the app, we rely on:

• Performance of a contract (Art. 6(1)(b)) — storing your settings, favourites and session history so the app can deliver the timer functionality you asked for, and verifying your Appearance Upgrade purchase so we can give you what you paid for.

• Consent (Art. 6(1)(a)) — for anything you explicitly opt into: allowing notifications, enabling Gravity Mode and its use of the motion sensor, and selecting a photo or sound for the app to use. You can withdraw any of these at any time, in the app's Settings or in Android's system settings, without affecting anything done before you withdrew.

We do not rely on legitimate interests for any profiling, marketing or analytics, because we do none.

9. How long data is kept

Your data stays on your device until you remove it. We hold nothing, so we have nothing to delete on our side and no retention schedule to apply.

You are in full control:

• Clear session history: open the History screen and tap the delete icon. This permanently removes all session records.

• Remove your custom photo or sounds: change or clear them in Settings.

• Erase everything: in Android Settings → Apps → Pomodoro Plus → Storage, tap Clear storage. This wipes the database and all preferences.

• Uninstall the app: this removes all of its local data from your device.

Because backup is disabled, there is no copy of your data anywhere else to chase down. Your purchase record remains with Google Play, so you can restore the Appearance Upgrade if you reinstall.

10. Your rights under the GDPR

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the rights to access your data, to have it corrected, to have it erased, to restrict or object to its processing, to data portability, and not to be subject to automated decision-making.

In the case of Pomodoro Plus these rights are unusually simple to exercise, because you already hold the only copy. All of your data is on your device, visible in the app, and erasable by you at any time using the steps in section 9 — no request to us is needed, and no waiting period applies.

If you would like to exercise a right formally, or you believe we hold data about you, write to beluga.forge@gmail.com and we will respond within one month as the GDPR requires. In most cases our honest answer will be that we hold no data about you at all.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU or UK country where you live, work, or believe an infringement occurred. A list of EEA authorities is published by the European Data Protection Board; in the UK, the authority is the Information Commissioner's Office.

11. Your rights in the United States

Several US states — including California, Virginia, Colorado, Connecticut, Utah and Texas — give residents rights over personal information held about them, such as the rights to know, access, correct, delete and opt out.

The same answer applies as above: we hold no personal information about you, so there is nothing for us to disclose, correct or delete. To be explicit, as the California Consumer Privacy Act asks us to be:

• we do not sell your personal information, and have not done so in the preceding twelve months;

• we do not share your personal information for cross-context behavioural advertising;

• we do not use or disclose sensitive personal information for any purpose beyond what is permitted without an opt-out;

• we do not knowingly collect or sell the personal information of anyone under 16.

You will never be discriminated against for exercising any of these rights. To make a request, write to beluga.forge@gmail.com.

12. International transfers

We transfer nothing, so we make no international transfers of personal data. Any transfer connected with your Play Store purchase is made by Google under its own safeguards; see Google's privacy policy for details.

13. Children

Pomodoro Plus is a general-audience productivity tool. It is not directed at children, and we do not knowingly collect personal data from anyone, including children. Because the app collects no personal data and has no accounts, no sign-up and no user-to-user features, there is no children's data for us to hold.

14. Security

Pomodoro Plus relies on Android's application sandbox, which prevents other apps from reading its database or preferences. Because the app stores no credentials, transmits nothing, has no server component and is excluded from backup, its exposure is limited to the device itself.

We recommend protecting your device with a screen lock, since anyone with physical access to an unlocked phone can open the app and see your session history.

15. Changes to this policy

If we change how the app handles data, we will update this policy, change the "Last updated" date above, and publish the new version both in the app and at https://sites.google.com/view/pomodoroplus/privacy. Where a change is significant, we will make it prominent in the app rather than relying on you to check.

16. Contact

Questions, concerns or requests about privacy:

• Email: beluga.forge@gmail.com

• Publisher: Beluga Forge, United States