Privacy, in plain words.

Pomodoro Planter runs without an account. This page lists what the app stores, where it lives, and how to take it back.

Focus first — no account needed.

The timer, your custom cycle, and your first guest plant live in this browser's local storage or the mobile app's device storage. Clearing that storage removes your guest garden and timer.

Sound and notification preferences stay on each device. If you enable mobile notifications while signed in, we store an Expo push token with your account to send cycle alerts. Signing out removes that device's registration.

Your sign-in and garden stay together.

Sign-in is handled by Clerk, a dedicated authentication service. Your credentials stay with Clerk; the app itself receives just your email address and display name.

Your garden — focus sessions, plants, and rooms — is stored in Convex, the app's database, and belongs to your account alone. Others see it only when you choose: pressing Share creates a link that shows your display name and your field, and joining a focus room shows your name and timer to the people in that room.

Auto-continue finishes the configured cycle you started, including while the app is closed. You can pause or cancel it from any signed-in device. Reports, blocks, accepted community terms, feedback, and letters are also stored in Convex to support those features.

We count what helps people focus.

The app records product events with PostHog — pageviews, starting a focus, planting — so we can see which parts of the garden actually help. Events belong to your account when you are signed in and to an anonymous visitor otherwise. There are no ads here, and nothing is sold or shared for marketing.

Delete your account and its associated data.

Use Delete account in the app's settings or the account deletion page. We remove your Clerk sign-in, garden, sessions, letters, feedback, notification registrations, and account-linked analytics. Deletion runs in the background and retries if a service is unavailable. Shared rooms keep other gardeners' earned progress; your contributions and identifying details are removed.

A temporary deletion record prevents an existing sign-in token from recreating your account. It is removed 24 hours after cleanup finishes. Anonymous analytics that cannot be linked to your account are not included in an account deletion.