Legal

Privacy Policy

Last updated: October 7, 2026

This is an English translation of the Turkish Privacy Policy (Gizlilik Politikası). If the two versions differ, the Turkish version prevails.

Contents

This Privacy Policy explains how your personal data is collected, used, shared and protected when you use the PomoSprint mobile application (the "App") and the pomosprint.app website (the "Site").

1. Data Controller and Contact

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation, the developer who operates PomoSprint is the "data controller" for personal data processed through the PomoSprint App and Site:

Data controller: the developer who builds and operates PomoSprint
Address: Our postal address for formal requests is provided on request via destek@pomosprint.app.
Email: destek@pomosprint.app

To contact the data controller, ask a question about this policy, or exercise your rights listed in Article 11 of the KVKK, write to the email address above.

The notice required by Article 10 of the KVKK is available on our KVKK Privacy Notice page.

2. Data We Collect

PomoSprint only collects the data needed to provide the service:

Account information: Your email address and password (the password is stored only as a one-way hash and is never visible to us in plain text). If you sign in with Google or Apple, the name and email address provided by that provider (Apple may provide a private relay address instead of your real address).
Consent records: The version of the Terms of Use you accepted at sign-up, the version of the Privacy Policy and KVKK Privacy Notice you confirmed reading, the time of acceptance and your optional commercial electronic message (newsletter) preference (see Section 6).
Profile information: Your display name, the hourglass character (avatar) you choose, and your friend code.
Onboarding information: Your birth year (only to enforce the minimum age of 13), your study target (LGS, YKS, TUS, DUS, KPSS, language, university, or work and personal growth), your study categories and daily study goal.
Study data: Your Pomodoro and Marathon sessions; start, end, duration, category and pause information; streaks, points, sand balances and unlocked characters. When you use mock exams, we also store the exam type, completion or abandonment status, planned and actual duration, selected tests, optional exam title and private note, correct/wrong/unanswered counts by subject, calculated net scores and personal study-time insights. Normal and mock exam points, sand balances, target categories and league rankings are kept separately. Exam notes and subject results are not shown to friends or in public rankings.
Social data: Your friend connections, requests and the block list stored on our servers; while the "Show in Social List" setting is on, your live study status ("focusing right now" and the subject you are studying) shown to your friends and the daily study summary your friends can see (total time, number of sessions, the subject you studied most), as well as milestones such as streaks and 4 hours in a day. Your league promotions may also be shown to your friends as milestones.
User reports: An in-app report stores the reporter and target account IDs, the screen it was sent from, reason, optional details, the target's display name and relevant live-feed subject at the time of the report, and its submission time on our servers. An email report shares your email address, information identifying the user you reported and your description (see Section 5).
Data kept on your device: Your notification, language and theme preferences and the list of users you hid are stored only on your device and are not sent to our servers. Notifications, the lock screen countdown and the Live Activity are generated entirely on your device (see Section 13).
Technical and error data: App version, device model, operating system and version; when the App hits an error or crashes, the error report (error message, related code lines, technical events leading up to the error) and sampled performance measurements. When the App connects to our servers, our infrastructure provider keeps access logs (such as IP address and request time) for security and debugging.
Waitlist (Site): The email address you enter in the "Notify me at launch" form on the Site, your consent to commercial electronic messages, the consent text version and the time of consent.
Newsletter: If you consented to commercial electronic messages at sign-up or subscribed to our newsletter, your email address; you can unsubscribe using the link in every newsletter.

We do not request or collect your location, contacts, photos, camera or microphone. The App contains no ads and no third-party SDKs for advertising or tracking.

3. How We Use Your Data

To create, verify and manage your account,
To record your sessions, calculate your points, streak, sand grains and reports, and sync your data across your devices,
To run social features such as Friends, the League System and rankings (see Section 4),
To send transactional emails about your account (e.g. email verification, password reset),
If you joined the waitlist, to let you know when the App launches; if you subscribed to the newsletter, to send product updates,
To enforce the Terms of Use: blocking inappropriate display names, reviewing user reports, and preventing cheating and abuse,
To keep a record of the consents you gave at sign-up and of the fact that we informed you,
To detect and fix errors, improve the service and keep it secure.

Under Article 5 of the KVKK, this processing is based on the establishment and performance of a contract (Art. 5/2-c), our legal obligations (Art. 5/2-ç), our legitimate interest in security, cheat prevention and debugging (Art. 5/2-f), and — for commercial electronic messages such as the waitlist and the newsletter — your explicit consent. Which data is processed for which purpose and on which legal ground is set out in a table in our KVKK Privacy Notice.

We never sell, rent or share your data with third parties for advertising.

4. Rankings and Social Visibility

Your display name, character and points are visible to your friends and to other users in the App's league and monthly rankings. If you are among the top 10 users with the most points in a month, your display name (its first word plus the initial of the second word, e.g. “Elif Y.”; a one-word name is shown as is), character and monthly points are also shown in the public ranking on the pomosprint.app home page, which anyone can see without signing in. Your email address, birth year and other account details are never shown in any ranking.

If you sign in with Google or Apple, your display name initially is the name provided by that provider. You can change it at any time on the Profile screen.
By turning off the "Show in Social List" setting on your Profile, you stop appearing in your friends' "Focusing Right Now" list, in the App's monthly ranking and in the public ranking on the Site. Users in your league room can still see your name and character in the league ranking, and your friends can still see your name, character and total points in their friend list and under Ranking → Friends.

5. Reporting, Hiding and Blocking Users

If a user bothers you or uses an inappropriate display name, you can report them to us with the Report user option in the App, and make them invisible on your own device with the Hide user option.

Reporting: You can select a reason and add optional details in the in-app form; the report is saved on our servers and linked to your account. In a view where a user ID is unavailable, an email addressed to destek@pomosprint.app is prepared in the email app on your device; you send that email yourself. We use this information only to review the report and enforce the Terms of Use; we do not reveal your identity to the user you reported.
Hiding: The list of users you hid is stored only on your device; it is not sent to our servers and the hidden user is not notified.
Blocking: Your block list is stored on our servers and linked to your account. Blocking a user removes your friendship and any pending friend requests between you; new friend requests and access to each other's live study status are blocked. Unblocking does not automatically restore the previous friendship.
Display name filter: Display names pass through an automatic filter; names containing inappropriate words are not accepted.

6. Sign-Up Consents and Commercial Messages

When you create an account:

Accepting the Terms of Use is required,
Confirming that you have read the KVKK Privacy Notice and this Privacy Policy is required; this confirmation is not a declaration of explicit consent,
Consent to commercial electronic messages (the newsletter) is optional; not giving it does not affect your use of the App.

The versions of the texts you accepted, the time of acceptance and your newsletter preference are stored with your account and deleted when you delete your account. You can withdraw your consent to commercial electronic messages at any time using the unsubscribe link in every newsletter or by writing to destek@pomosprint.app.

7. Waitlist

The email address you enter in the Site's form is stored in our waitlist on Supabase's infrastructure and is only used to let you know when the App launches. To sign up you also need to tick the separate consent box for commercial electronic messages in the form; it is never pre-ticked. You can ask us to remove your address at any time by writing to destek@pomosprint.app.

8. Third-Party Services

PomoSprint works with the following service providers to deliver the service. These providers process your data only to provide services to us.

Supabase — database, authentication and server functions. Your account information, study data and waitlist entries are stored on servers within the European Union (Stockholm, Sweden). (Supabase Privacy Policy)
Sentry — monitoring errors and crashes in the App. Technical data such as error reports, device model, operating system and App version, together with a random installation ID that Sentry assigns to the App installation, is sent to Sentry; this ID is not linked to your account, and the data is used only to find and fix errors. (Sentry Privacy Policy)
Sign in with Google — if you choose to sign in with your Google account, Google shares your name and email address with us for authentication. (Google Privacy Policy)
Sign in with Apple — if you choose to sign in with your Apple ID, Apple shares your name and email address (or a private relay address) with us for authentication. (Apple Privacy Policy)
Resend — sending transactional emails, the launch announcement and the newsletter. Your email address is shared with this service only to deliver emails to you. (Resend Privacy Policy)
Google (support email) — emails you send to destek@pomosprint.app (including account deletion requests and user reports) are forwarded to our support inbox hosted on Google's email service.
Cloudflare — hosting and content delivery for the pomosprint.app Site and forwarding of emails sent to destek@pomosprint.app. When you visit the Site, standard access data such as your IP address and browser information passes through Cloudflare's infrastructure. The Site uses Cloudflare Web Analytics, which sets no cookies and does not identify you personally, to keep aggregate visit statistics (page views, country, device type). The Site's fonts and animation library are also served from our own domain; the Site does not load files from other servers such as Google Fonts or jsDelivr. (Cloudflare Privacy Policy)
App Store and Google Play — the store you download the App from processes download and device information under its own privacy policy.

The App and the Site do not work with ad networks, analytics tools for advertising or tracking, or data brokers. The Site does not use cookies for advertising or analytics.

9. International Data Transfers

Your main data (account, study data and waitlist) is hosted within the European Union. Some service providers such as Sentry, Google, Apple, Resend and Cloudflare may, due to the nature of their infrastructure, process data on servers in other countries, including the United States. These transfers are made within the framework of the data protection safeguards described in those providers' privacy policies (e.g. EU Standard Contractual Clauses) and applicable law. Transfers outside Türkiye are carried out in line with the procedures set out in Article 9 of the KVKK; the data transferred and the recipients are listed in our KVKK Privacy Notice.

10. Data Retention and Deletion

Your data is kept for as long as your account is active. You can delete your account at any time directly within the App, without needing a third party:

In the App, via Profile & Settings → Delete Account, or
By emailing destek@pomosprint.app from the email address registered to your account.

For step-by-step instructions and the list of data that is deleted and kept, see the Delete Your Account page.

When you delete your account, your email address, profile, friend connections, study data, consent records and newsletter subscription are permanently deleted from our systems within a reasonable period (no later than 30 days). Error reports and server access logs are deleted automatically when the provider's retention period ends. Waitlist and newsletter entries are deleted when you request it or unsubscribe. A waitlist entry matching your verified account email address is also removed when you delete your account. For an entry created with a different address, you can request deletion separately from that address. Account references in in-app user reports are removed when the account is deleted; the report details, the target's name and relevant content at the time of the report, and the handling outcome may be kept to review and resolve the report. You can contact support to request deletion of these records.

11. Data Security

Your data is encrypted in transit with TLS/HTTPS, and passwords are stored using one-way hashing. Database access is restricted by row-level security rules (Row Level Security) and the principle of least privilege. Although no system is 100% secure, we apply industry-standard measures to protect your data and will notify you in line with applicable law in the event of a breach.

12. Children's Privacy

PomoSprint is not intended for children under 13, and we do not knowingly collect personal data from users under 13. The minimum age of 13 is enforced with the birth year entered during onboarding. Users under 18 should use the App with the knowledge of their parent or legal guardian. If you become aware that a child has provided us with personal data, please contact us and we will delete it.

13. Notifications and the Lock Screen

With your permission, the App sends local notifications to let you know your session is complete. Permission is requested when you start your first session. While a session is running, the remaining time is also shown on the lock screen:

Android: A persistent notification showing the remaining time appears on the lock screen and in the notification shade. To tell you exactly when your session ends, the App uses the exact alarm permission (USE_EXACT_ALARM on Android 13 and later, SCHEDULE_EXACT_ALARM on earlier versions). This permission is used only to schedule the end-of-session notification for a session you started; no other alarms are set and no data is collected through it.
iPhone: On supported iOS versions, a Live Activity showing the remaining time appears on the lock screen and, on supported models, in the Dynamic Island.

These notifications and indicators are generated and scheduled entirely on your device; no personal data is sent to a server or third party to show them. Because session details such as the category you are studying and the remaining time may appear on your lock screen, anyone who can see your phone may also see them. You can turn notifications off at any time in the App under Profile & Settings → Notifications, and turn off lock screen notification content and Live Activities in your device settings.

14. Your Rights

Under Article 11 of the KVKK and (for users in the European Union) the GDPR, you have the right to learn whether your data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred in Türkiye or abroad, to request correction of incomplete or inaccurate data, to request deletion or destruction, to withdraw your consent, and to object to processing. To exercise these rights, contact us at destek@pomosprint.app; requests are resolved within 30 days at the latest. The application procedure and the full list of your rights are in our KVKK Privacy Notice.

15. Changes to This Policy

We may update this policy from time to time. For significant changes, we will publish the updated policy on this page and update the "Last updated" date.

16. Contact

For any privacy questions or requests: destek@pomosprint.app

Please also read our Terms of Use, KVKK Privacy Notice and Delete Your Account page.