Privacy Policy

Effective 10 August 2026 · Last updated 10 August 2026

This policy explains what Momo: Pomodoro Gamified ("Momo", "the app") collects, why, who processes it, and what you can do about it. Momo is operated by [Legal entity] ("we", "us"). Contact us any time at support@momo.app.

1. What we collect

Account information

To sign in you provide either an email address and password, or you use Sign in with Apple. If you choose Apple's "Hide My Email", we only ever receive the private relay address Apple generates — not your real one. We also store the display name you choose and the name you give your character.

Your focus sessions

One record is written per session attempt, because this is the app's core function:

• when it started and ended, the length you chose, and the time you actually focused;
• whether it completed or failed, and if it failed, why (you left the app, or you gave up);
• how many times the session was interrupted;
• the local date and hour in your own timezone — this is what makes streaks and the "when do you focus best" heatmap correct rather than shifted by timezone;
• the optional label you can give a session, such as "write report";
• which character was equipped, and the XP and coins earned.

Progress and inventory

Level, XP, streak, coin balance, achievements, and which characters, pets and accessories you own and have equipped.

Social features

If you use them: your friend connections and pending requests, your presence status (online, focusing, or offline) while you are signed in, and your membership of any co-focus room you join. Your profile's public fields — display name, character, level, XP and streak — are visible to other signed-in users through friends lists and the leaderboard. Your coin balance, purchase status, email address and notification token are never readable by other users.

Notifications

If you allow notifications, we store a device push token so we can send session reminders and friend or room activity. Denying or revoking the permission stops this, and the token is removed from your account when you sign out or delete your account.

Subscription status

Momo requires a subscription after the free trial. Purchases are processed by Apple or Google — we never see or store your card details. RevenueCat manages the subscription state and tells the app whether your entitlement is active. Your RevenueCat identifier is your Momo account ID, which is how your subscription follows your account onto a new device.

Technical and abuse-prevention data

Firebase App Check attests that requests come from a genuine copy of the app, and our servers log ordinary technical data (timestamps, coarse device and OS information, error traces) so we can fix crashes and stop cheating on the leaderboard.

What stays on your device

Strict Mode (iOS) uses Apple's Screen Time and Family Controls frameworks. The apps you choose to block are handled entirely on your device by the operating system. We cannot see which apps you selected, and that list is never transmitted to us or to anyone else. Your theme choice and other local preferences also stay on the device.

2. What we don't collect

• No advertising identifiers, ad networks or third-party ad trackers. There are no ads.
• No precise location. No contacts. No microphone, camera or photo access.
• No reading of your other apps' content or notifications.
• No payment card details — those go directly to Apple or Google.

We do not sell your personal information, and we do not share it for advertising purposes.

3. Why we use it

4. Who processes your data

We use a small number of service providers, each under contract and only on our instructions:

We may also disclose data if the law requires it, to protect our rights or someone's safety, or as part of a merger or acquisition — in which case we will tell you before your data moves.

5. Where your data is stored

Our providers store and process data on servers in the United States and other countries. Where data leaves the UK or EEA, transfers rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.

6. How long we keep it

• Account, sessions, progress and social data — for as long as your account exists.
• After you delete your account — removed from live systems promptly, and purged from encrypted backups within 30 days.
• Purchase records — kept as long as tax and accounting law requires, typically six to seven years. These sit with Apple, Google and RevenueCat.
• Presence status — ephemeral; cleared automatically when you disconnect.

7. Deleting your account

Open Profile → Delete account in the app. This is irreversible: it removes your profile, sessions, progress, inventory, friend connections and push token. An active subscription is not cancelled by deleting your account — cancel it separately through the App Store or Google Play, or you will keep being billed. If you would rather we did it, email support@momo.app from your account address.

8. Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another service. You can withdraw consent for notifications at any time in your device settings. We will never charge you for exercising these rights or treat you differently for it.

Email support@momo.app and we will respond within 30 days. If you are in the UK or EEA and unhappy with our response, you may complain to your national data protection authority — in the UK, the Information Commissioner's Office.

9. Children

Momo is not intended for children under 13, and we do not knowingly collect their data. Some countries set a higher age for agreeing to an online service without a parent — where that applies to you, that age is the minimum instead. If you believe a child has created an account, email support@momo.app and we will delete it.

10. Security

Data is encrypted in transit and at rest by our providers. Access rules stop one user reading another's private data, sensitive fields such as your coin balance can only be written by our servers, and App Check rejects requests that don't come from the real app. No system is perfectly secure, but if a breach affects you we will notify you and the relevant regulator as the law requires.

11. Changes

If we change this policy we will update the date above, and for anything significant we will tell you in the app before it takes effect.

12. Contact

[Legal entity]
[Business address]
support@momo.app