Privacy Policy

1. Data Controller

Rawi Studios is the data controller responsible for your personal data.

Contact: support@rawistudios.com
Website: https://pomoluxe.com

2. Information We Collect

Information You Provide:

• Account Information: When you sign in with Google, we collect your name, email address, and profile picture.
• User Content: Tasks, to-do lists, notes, and feedback you voluntarily submit.
• Support Communications: Inquiries, bug reports, and feedback.

Information Collected Automatically:

• Device Information: Device type, operating system, browser type and version.
• Usage Data: Timer statistics (pomodoros completed, breaks taken), session duration, feature usage, and performance data.
• Network Information: IP address and approximate location (country/region level).
• Cookies and Similar Technologies: Session cookies and local storage for preferences (theme, volume, settings).

3. How We Use Your Information

We use collected information to:

• Provide Services: Create accounts, sync data across devices, track productivity statistics, and manage leaderboards.
• Improve Experience: Analyze usage patterns, optimize performance, and develop new productivity features.
• Communications: Send service notifications, updates, and support responses.
• Safety & Security: Detect cheating on leaderboards, prevent fraud, and enforce Terms of Service.
• Legal Compliance: Meet legal obligations and respond to legal requests.
• Analytics: Understand user behavior and improve app functionality.

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract: To provide the Service you requested (productivity tracking, sync).
• Legitimate Interests: To improve our Service and ensure security.
• Consent: For optional features and marketing (where applicable).
• Legal Obligations: To comply with applicable laws.

5. Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google): Authentication, database, hosting, and analytics.
• YouTube API Services: Used to play video backgrounds and music.
• Spotify API: Used for music integration.

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

6. Data Retention

• Account Data: Retained until account deletion request.
• Usage Statistics: Retained indefinitely to maintain long-term productivity history, unless deletion is requested.
• Support Tickets: 2 years.
• Analytics Data: 26 months.

After deletion, some anonymized data may be retained for statistical analysis and service improvement.

7. Data Security

We implement industry-standard security measures including encryption of data in transit (HTTPS/TLS), encrypted password storage (managed via Google Auth), and regular security audits. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. By using our Service, you consent to such transfers.

9. Your Rights

Under GDPR (European Users):

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion ("right to be forgotten").
• Restriction: Limit processing of your data.
• Portability: Receive your data in a portable format.
• Object: Object to certain processing.
• Withdraw Consent: Where processing is based on consent.

Under CCPA (California Users):

• Right to know what information is collected.
• Right to delete personal information.
• Right to opt-out of sale (we do not sell data).
• Right to non-discrimination.

To exercise these rights, contact us at support@rawistudios.com.

10. Children's Privacy

Our Service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children below these ages. If we discover such data, we will delete it immediately.

11. Cookies and Tracking

• Essential Cookies: Required for authentication and core functionality.
• Preference Cookies: Remember your settings via local storage.
• Analytics Cookies: Help us understand usage patterns (Firebase Analytics).

12. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify affected users within 72 hours via email and provide information about the breach and recommended actions.

13. Marketing Communications

We may send service-related emails. Marketing emails are only sent with your consent and you can opt-out at any time via the unsubscribe link or by contacting us.

14. Do Not Track

Our Service does not currently respond to "Do Not Track" browser signals. However, you can control tracking through cookie settings and by opting out of analytics.

15. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or prominent notice on the Service at least 30 days before the changes take effect.

16. Supervisory Authority

EU users have the right to lodge a complaint with their local data protection authority if they believe their rights have been violated.

17. Contact Information

For privacy-related questions, requests, or complaints:

Rawi Studios
Email: support@rawistudios.com
Website: https://pomoluxe.com
Response time: We aim to respond to all privacy requests within 30 days.