Pomodoro Sync LogoPomodoro Sync

Privacy Policy

This Privacy Policy (hereinafter referred to as the "Policy") outlines how Pomodoro Sync (hereinafter referred to as "we", "us", or "our") handles the personal information and related data of users in the web application and Chrome extension Pomodoro Sync (hereinafter referred to as the "Service").

Article 1 (Information Collected and Collection Methods)

We collect and use the following information within the Service:

  1. Information Related to User Authentication
    • Unique identifiers (UID) associated with the use of Google Login (Firebase Authentication).
    • Note: While email addresses are processed by the authentication system, they are not stored or accumulated in our database. As a general rule, we will not use your email address for proactive notifications or marketing communications.
  2. Data Integrated from External Services
    • Todoist API (Provider: Doist Inc.): Task names, project names, and other data that the user has permitted the Service to access via the Todoist API.
    • Slack API (Slack Technologies LLC / Salesforce, Inc.): Slack User ID, Workspace (Team) ID, and Team Name, Authentication and authorization credentials (OAuth access token), and status synchronization settings.
    • Microsoft Teams (Microsoft Graph API / Microsoft Corporation): User ID, Tenant (Organization) ID, and Organization Name, Authentication and authorization credentials (OAuth access token), and status synchronization settings.
  3. Information Collected via the Browser Extension (e.g., Browsing History)
    • Access status and accumulated time spent on specific websites (e.g., entertainment sites) that the user voluntarily registers within the Service.
    • Note: We only record information and save statistical data for specific domains that you have pre-registered. We never collect browsing history for unregistered websites.
  4. Information Related to Payments
    • Purchase history and payment status associated with subscription payments using Dodo Payments. Payment information, such as credit card details, is securely managed by Dodo Payments, and we do not hold this information directly.
  5. Information Collected Upon Inquiry
    • Your email address and the content of your inquiry, provided when you contact us via Google Forms or email and request a reply from us.

Article 2 (Purpose of Use)

We use the collected information for the following purposes:

  1. To provide, maintain, and manage the Service (e.g., task time tracking, focus assistance features).
  2. To provide the time aggregation and statistical graph display features for the specific sites registered by the user.
  3. For user identity verification and secure authentication.
  4. To deliver notifications within the Service (e.g., timer alerts).
  5. To confirm, respond to, and provide support for user inquiries.
  6. To improve the features of the Service, analyze traffic, and enhance user convenience.
  7. To provide automatic status (text and emoji) and Do Not Disturb (DND) / presence updates for Slack and Microsoft Teams in accordance with timer activities (focus, short break, long break, pause) and manage integration preferences.

Article 3 (Use of External Tools)

The Service utilizes the following third-party tools to provide features and conduct analysis:

  1. Firebase Authentication (Provider: Google LLC)
    • Purpose: Secure user authentication.
  2. Firebase Cloud Messaging (Provider: Google LLC)
    • Purpose: Push notification features, such as timer alerts within the Service.
  3. YouTube API Services (Provider: Google LLC)
    • Purpose: Integration for playing background music (videos) for studying/working within the Service.
    • The Service uses YouTube API Services. By using this Service, users are deemed to have agreed to the YouTube Terms of Service and the Google Privacy Policy.
  4. PostHog (Provided by: PostHog, Inc.)
    • Purpose: To analyze web traffic, understand how users interact with our service, and improve our product features.
    • Data Collection and Cookie Usage:
      • We collect access data using a "Cookieless approach" that operates entirely in memory without using Cookies. We do not store or utilize Cookies or persistent data on your device.
    • Information Collected and User ID Handling:
      • When not logged in: We collect anonymous data that cannot identify you personally, using a randomly generated identifier assigned by PostHog.
      • When logged in: We collect usage data associated with your internal User ID. This allows us to analyze usage alongside account attributes, such as your current plan (Free/Paid), to further improve our service.
    • Further Information: For more details on how PostHog processes and handles data, please refer to the PostHog Privacy Policy.
  5. Slack (Provider: Slack Technologies LLC / Salesforce, Inc.)
    • Purpose: Status synchronization features based on timer activities.
    • Privacy Policy: Slack Privacy Policy
  6. Microsoft Teams (Provider: Microsoft Corporation)

Article 4 (Security Measures for Personal Information)

We take necessary and appropriate measures, such as communication encryption (SSL/TLS) and utilizing highly reliable cloud services (e.g., Firebase), to prevent the leakage, loss, or damage of acquired data and to ensure its secure management.

Article 5 (Restriction on Provision to Third Parties)

Except as required by law, we will not provide collected personal information, browsing data, or external service integration data and credentials (access tokens, etc.) to any third party without the prior consent of the user.

Article 6 (Data Retention Period and Procedures for Disclosure, Correction, and Deletion)

  1. Data Retention Period
    • External service integration data (authentication tokens and integration metadata for Todoist, Slack, Microsoft Teams, etc.) is retained only for the duration the user maintains the integration within the Service, or as long as the user's account remains active.
    • Personal data such as browsing time statistics is retained only for the duration the user maintains an active account.
  2. Self-Service Disconnection and Deletion Procedures
    • Users can immediately delete integration data at any time by clicking the "Disconnect" button on the Settings page (/settings). When an integration is disconnected, authentication tokens and integration configuration data stored in the database are immediately deleted, and access token revocation with the external service provider is executed.
  3. Complete Eradication via Account Deletion
    • Users may request the deletion of their account at any time via the Service settings or the contact information in Article 8. Upon a request for Complete Eradication via Account Deletion, all user information, external service integration data, and browsing time records stored in the database will be promptly erased.

Article 7 (Changes to the Privacy Policy)

We may change this Policy as necessary. In the event of any changes, we will notify users by posting the updated Policy within the Service or announcing it on our website.

Article 8 (Contact Information)

For inquiries regarding this Policy, consultations about data handling, and other official inquiries regarding the Service, please contact us via the Google Form or email address provided on the "Contact" page below. (Note: Cancellation of paid plans can be done by the user at any time from the settings page (/settings) within the Service.)

When making an inquiry via Google Forms or email that requires a reply from us, the user must provide a contact email address, to which we will send our response.

We have set up a channel for the Service within a Discord server managed by the operator as a place for casual questions, requests, and user interaction (links are available in the header/footer of the Service). However, since Discord is strictly a voluntary community and a place for supplementary support, we do not handle official procedures or issues related to payments and personal information on Discord.

(Operator: Pomodoro Sync)

Supplementary Provisions

Enacted: August 1, 2026
Revised: August 27, 2026
Revised: September 28, 2026