Privacy Policy

At a glance

• We do not run behavioral advertising or behavioral analytics.
• We do not sell personal information.
• We do not process payments.
• We do not use your tasks or productivity history to make decisions that have legal or similarly significant effects.

Scope and controller

This policy applies to the Customodoro website, its installable Progressive Web App, the Classic and Reverse timers, the Pomodoro guide, and communications sent to Customodoro.

Controller

Brian Yabut, operating as YabuTech in the Philippines.

Contact

brianyabutech@gmail.com

Service

Customodoro at customodoro.app.

Third-party websites opened from Customodoro apply their own privacy policies. This policy does not control their independent processing. The rules for using the service are in the Terms and Conditions.

Information we handle

Information stored locally

Customodoro uses browser storage so the app can remember your settings and work offline. Depending on the features you use, local information may include:

• work, break, automation, sound, and music preferences;
• theme choices, color choices, and a custom background image you upload;
• task titles, task descriptions, completion state, order, and selected task;
• session dates, durations, timer mode, daily totals, focus points, and streak calculations;
• timezone settings and a one-time timezone-conversion record used to assign sessions to the correct day;
• achievement-read state, update notices, focus-mode state, and similar interface preferences; and
• cached app files, images, and audio needed for PWA and offline operation.

Without an account this information stays on your device and is not sent to YabuTech. If you sign in, the sessions, tasks, streaks, and productivity history covered by sync are uploaded to your account so your other devices can read them. Either way, other people who can access your device or browser profile may be able to view the local copy.

Technical and hosting information

When your browser requests Customodoro files, our hosting provider (Vercel) may process the request IP address, approximate location derived from the IP address, browser and device type, requested URL, referring page, response information, and timestamps. These data are used to deliver the service, maintain reliability, prevent abuse, and investigate security problems.

Feedback and communications

The Feedback page links to an external NoteForms form. NoteForms is not loaded automatically. If you open or submit that form, NoteForms may process the answers you provide and technical usage data under its own policy. If you email us, we process your email address, message, attachments, and our replies.

Do not place passwords, government identifiers, financial data, health records, or other highly sensitive information in tasks or feedback.

Account, sync, and leaderboard data

An account is optional and Customodoro works fully without one. If you create an account, we store an email address, display name, user ID, account and verification timestamps, and the sessions, tasks, streaks, and daily productivity history you sync, so the same progress is available on your other devices.

The leaderboard is public. If you take part, the display name on your account and your focus totals are visible to anyone who opens the leaderboard, including people without an account. Choose a display name you are comfortable showing publicly. Your email address, your tasks, and their contents are never shown on the leaderboard.

Information we do not actively collect

Customodoro does not request precise location, contacts, camera or microphone recordings, payment-card data, or advertising identifiers. Browser notification permission is managed by your browser; notification content is generated on your device.

Purposes and legal bases

We process information only for the following purposes:

• Provide the service: deliver the website, run requested features, remember local choices, and respond to requests.
• Security and reliability: prevent abuse, diagnose failures, protect users, and maintain the service.
• Accounts and sync: create and secure your account, synchronize your progress between devices, rank the leaderboard, and fulfill verified access, correction, export, or deletion requests.
• Legal compliance: meet lawful obligations and establish, exercise, or defend legal claims.

Under Philippine law, these activities rely as applicable on your consent for information you voluntarily submit, the need to provide a service you request, legitimate interests that do not override your rights, and legal obligations. Where the GDPR or UK GDPR applies, the corresponding bases are consent, contract, legitimate interests in operating and securing the service, and compliance with law.

Service providers, disclosures, and transfers

We use or retain information with the following provider categories:

• Vercel: website hosting, content delivery, and associated request/security logs.
• NoteForms: the optional external feedback form after you choose to open it.
• Supabase: the cloud database holding account, sync, and leaderboard records for people who sign up.
• Render: the application backend that handles account and synchronization requests, plus associated service logs.

Providers may process information outside the Philippines, including in locations where they or their subprocessors operate. We use provider agreements and reasonable safeguards appropriate to the service. You may contact us for current provider or transfer details relevant to your information.

We may also disclose information if reasonably necessary to obey a valid legal process, protect rights or safety, investigate abuse, or complete a reorganization or transfer of the service subject to applicable safeguards. We do not disclose personal information to data brokers or for cross-context behavioral advertising.

Retention

• Local app data: remains until you delete it, clear browser/site storage, reset the app, or uninstall the PWA, subject to browser-controlled cache eviction.
• Feedback and related correspondence: retained for up to 24 months after submission or the last related correspondence, unless a longer period is reasonably needed for security, legal compliance, or a dispute.
• Account, sync, and leaderboard data: retained while your account is active, and deleted after a verified deletion request or within a reasonable period after account closure, unless law requires limited further retention.
• Hosting and security logs: retained under the hosting plan's configured or provider-controlled period and only as long as reasonably needed for delivery, reliability, abuse prevention, security, or legal obligations.

When information is no longer needed, we will delete, anonymize, or securely dispose of it where reasonably possible. Provider backups may require additional time to cycle out.

Your choices and local controls

• Use the timer without an account. Sync and the leaderboard only apply once you sign in.
• Ask us to delete your account, which also removes your leaderboard entry.
• Decline browser notifications or revoke them in browser/site settings.
• Avoid opening the external feedback form and contact us by email instead.
• Clear Customodoro's site data through your browser's privacy or storage settings.
• Uninstall the PWA and clear the site's stored data if you no longer want local records retained.

Clearing a service-worker cache alone may not delete localStorage. Use your browser's “clear site data” control to remove both cached files and locally stored preferences/history.

Your privacy rights

Subject to applicable law, you may have rights to be informed, object, access, correct or rectify, erase or block, and receive a portable copy of personal information. You may also have the right to withdraw consent where processing relies on consent, seek damages where provided by law, and complain to a regulator.

Send requests to brianyabutech@gmail.com. Describe the request and the email address on your account, if you have one. We will use reasonable, proportionate steps to verify identity before disclosing or deleting account-linked data.

Philippines

Philippine data subjects may exercise rights under the Data Privacy Act of 2012 and may file a complaint with the National Privacy Commission.

EEA and United Kingdom

Where applicable, you may also request restriction, object to legitimate-interest processing, receive portable data, and lodge a complaint with your local supervisory authority. Customodoro does not use solely automated decision-making with legal or similarly significant effects.

United States

Residents of states with applicable consumer privacy laws may have rights to know, access, correct, delete, or obtain a copy of covered personal information and to appeal certain request decisions. Customodoro does not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising an applicable privacy right.

Security

We use reasonable administrative and technical measures intended to protect information, including encrypted HTTPS connections and provider-managed hosting and database infrastructure. No internet transmission or storage method can be guaranteed completely secure. Protect access to your device and browser profile, especially when tasks contain private details.

If an incident requires notice under applicable law, that notice will be provided separately. Updating this Privacy Policy is not a substitute for an incident notice.

Children

Customodoro is not directed to children under 13, and people under 13 should not submit personal information. Users who are minors must have permission from a parent or legal guardian where required. If you believe a child provided personal information, contact us so we can investigate and take appropriate action.

Changes and contact

We may update this policy when the service, providers, or legal requirements change. We will change the “Last modified” date and, for material changes, provide an appropriate notice in the app.

Questions or privacy requests may be sent to Brian Yabut (YabuTech) at brianyabutech@gmail.com.