Last updated: September 12, 2026.
Controller and contact
Damian Molinero Ramírez is the data controller for Deep Work Pomodoro. Address: Cerrada Cedros Lote 17 Manzana 3, Colonia Tlacoyaque, C.P. 01859, Álvaro Obregón, Ciudad de México, México. Privacy contact: privacy@deepworkpomodoro.com. Support: support@deepworkpomodoro.com.
Scope and service status
This notice covers the prelaunch website and the local edition of the app currently being prepared. Public accounts with cloud synchronization, purchases, and commercial measurement are not enabled yet. Before enabling them, we will update this notice to describe the actual processing and providers, and request the permissions that apply.
Information and purposes
When you visit, the server may record your IP address, date and time, requested path, browser, device technical details, and errors. These records deliver the website, protect it, and help diagnose problems. When you contact support or privacy, we process your email, name if supplied, message, and technical information you choose to share to respond and follow up. We do not request passwords, full payment card details, or sensitive personal information. Please avoid including them in messages.
Deletion requests
The deletion form asks for the account email and sends a confirmation link. We keep the request status and a protected version of the verification code. The link expires after 48 hours. Confirming an email shows access to that mailbox; before deleting an account, we also verify that the request belongs to its owner. Temporary abuse prevention controls apply. An email address alone never authorizes deletion. Deleting an account does not cancel an Apple or Google subscription.
Information in the local app edition
The local edition stores timer settings, preferences, categories, tasks, and history on your device. You can manage, export, and import history in the app. Exported files remain under your control. Uninstalling may remove local data; system backups and files you created may retain copies. This website does not automatically receive your session history or task text.
Cookies, advertising, and optional uses
This website version includes no third-party advertising or analytics tags. WordPress and security tools may use necessary technical functions for administrator login, form verification, and protection. We do not sell personal information or share it for behavioral advertising. We do not send newsletters or reuse support messages for marketing without separate permission. New optional processing will have specific controls before it is enabled.
Providers and international processing
Namecheap provides hosting, email, protection, and backups; our contracted server is in the United States. Messages also pass through your email provider and the technical providers needed for delivery. Access is limited to what is needed to operate the service and handle requests. We do not plan commercial transfers to independent third parties. We may disclose information when required by applicable law and will inform you of new uses or transfers as required.
Retention
We keep messages and request records while handling the matter and afterward for as long as needed to document the response or meet legal duties. We periodically review information and delete it when no longer needed. Verification codes become unusable when redeemed or expired; temporary form abuse controls last one hour. Server logs and backups follow technical rotation cycles and may retain copies during their security cycle. Information retained for a legal duty or dispute will be restricted to that purpose. We do not promise immediate erasure from every backup.
Your rights and requests
You can request access, correction, cancellation/deletion, or objection; withdraw consent; or limit use or disclosure by emailing privacy@deepworkpomodoro.com with the subject “Deep Work Privacy”. Provide your name, a reply channel, the right you want to exercise, and details that help locate the information. Describe any requested correction. Tell us if you act as a representative. We will verify identity and authority proportionately; do not send identity documents or passwords without being asked. We will first provide an appropriate procedure and channel. Exercising one right does not prevent another.
Responses and follow-up
For Mexican ARCO requests, we will communicate a determination within the statutory maximum of twenty days after receipt and, where granted, implement it within fifteen days after the response. Any legally permitted extension will be explained. Consent withdrawal or restriction uses the same contact channel and procedure. Withdrawal is not retroactive and does not prevent processing required by law. If we cannot fulfill a request, we will explain why and the available next steps. You may also contact the competent data protection authority. Mandatory rights under other applicable laws remain unaffected.
Children, security, and changes
The service is a general productivity tool and is not specifically directed at children. Contact privacy for requests involving a minor’s data. We use access controls, encrypted connections, and backups; no protection eliminates every risk. Updates will appear on this page with their date, with additional notice when needed. We will request consent before a new purpose when the law requires it.