Privacy policy

In short

You can use Pomovia without giving us your name or e-mail address. We keep what the app needs to run your timer and keep your devices in step: your focus sessions, your block lists, your timer settings and whether you have Plus. We do not sell your data and we do not show ads. You can delete your account and everything in it from the app at any time.

Who is responsible

Pomovia is published by Codesphere Ti Ltda, [company address], São Paulo, Brazil. We are the controller of the personal data described on this page. You can reach us at yolo@myhabitshub.com.

Because we are established outside the European Union, we have appointed a representative in the EU under Article 27 of the General Data Protection Regulation (GDPR): our managing partner, who lives in Germany, at [EU representative address]. You can write to the representative at that address or by e-mail to yolo@myhabitshub.com.

What we collect and why

An account is optional. When you use Pomovia, the Pomovia service keeps:

• An account id. A random identifier for your account. If you start anonymously, this is all that identifies you.
• Your e-mail address, when you give one. You can sign in with Apple on Apple devices or with Google on Android and Mac. Apple and Google tell us the address you choose to share with us.
• Device ids. An identifier for each device you use Pomovia on, so your sessions and block lists reach the right devices.
• Focus sessions. When each session started and ended, how long it ran, how it ended and the tag you gave it. They make up your history and stats.
• Block lists. The apps and websites you chose to block. Blocking itself runs on your device; the service keeps the list so it can reach your other devices.
• Timer settings. Your preset, durations and similar choices, so every device starts the same timer.
• Subscription state. Whether you have Plus, which plan and until when. Apple and Google handle the payment; we never see your card details.

We use this data to provide the service you asked for: running and syncing your timer, keeping your history and unlocking Plus. Where the GDPR applies, the legal basis is the performance of our contract with you (Article 6(1)(b)).

Crash reports. When the app crashes, it sends a crash report so we can find and fix the fault. A crash report carries the device model, the operating system version, the app version and the city derived from the IP address. The legal basis is our legitimate interest in an app that works (Article 6(1)(f)).

Support messages. When you write to us, we keep your message and your e-mail address to answer you.

Who processes it for us

We use a few service providers. Each processes data only to provide its part of the service:

• Apple and Google for sign-in and for buying and managing Plus. Their own privacy policies apply to what you do in their stores and accounts.
• RevenueCat (United States) keeps the state of your subscription.
• Render (Ohio, United States) hosts the Pomovia service and its database.
• Sentry (EU data centre) receives crash reports.
• Mailgun sends e-mail on behalf of the Pomovia service.

Some of this data is processed in the United States. Where the GDPR applies, these transfers rely on the safeguards it provides for them, such as the European Commission's standard contractual clauses.

How long we keep it

We keep your account data for as long as your account exists. When you delete your account in the app (Settings, then Delete account), everything listed above is removed from the Pomovia service within 30 days. If you no longer have the app, this page explains how to delete your account.

Crash reports are kept only as long as we need them to fix the fault. Apple and Google keep their own records of your purchases under their own policies.

Your rights

Depending on where you live, the GDPR (European Union), the LGPD (Brazil) or the CCPA (California) gives you rights over your data. You can ask us to:

• give you a copy of the data we hold about you (access)
• correct data that is wrong (correction)
• delete your data (deletion)
• give you your data in a machine-readable format (portability)
• stop processing your data for a purpose you object to (objection)

Write to yolo@myhabitshub.com from the e-mail address on your account, or tell us how else we can recognise it. We answer within one month. You can also complain to a data protection authority, for example the one in the EU country where you live or, in Brazil, the ANPD.

Under the CCPA, we do not sell or share your personal information, and using your rights never changes the service you get.

Children

Pomovia is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has given us personal data, write to yolo@myhabitshub.com and we will delete it.

Changes to this policy

When we change this policy, we publish the new version on this page and update the date at the top.

Contact

Questions about your data: yolo@myhabitshub.com. See also the terms and the imprint.