At niltimer, we take your privacy seriously. This Policy explains what information we collect, why we collect it, and how we protect it — in plain language.
1Information We Collect
Information you provide
- Email address (when registering with email)
- Name or display name
- App data such as task content and Pomodoro session records
Information from social login
- Google: email address, full name, profile picture
- X (Twitter): user ID, display name, username
Information collected automatically
- IP address, browser type, and access timestamps
- Cookies and similar identifiers
- Usage data such as page views and feature interactions
2How We Use Your Information
We use the information we collect to:
- Create, manage, and authenticate your account
- Provide and improve the Service
- Respond to support requests
- Detect and prevent fraud or security threats
- Comply with legal obligations
- Send important service-related notices (and marketing only with your consent)
3Social Login
When you sign in with Google or X, we receive only the minimum information necessary to create and manage your account.
- Google: email, name, and profile picture (Google's Privacy Policy applies)
- X (Twitter): user ID, display name, and username (X's Privacy Policy applies)
We never receive your password or other sensitive credentials from these platforms.
4Sharing with Third Parties
We do not sell or share your personal information with third parties, except in the following cases:
- Service providers: Infrastructure partners such as AWS (servers and database) who process data on our behalf
- Legal requirements: When required by a court order or government authority
- Business transfers: In connection with a merger or acquisition, subject to equivalent data protection obligations
All service providers are bound by data processing agreements that require them to protect your information.
5Data Retention
We retain your information for as long as your account is active. After you delete your account, we will delete your personal data within a reasonable period, unless retention is required by law.
System logs and access records are retained for up to 90 days.
6Security
We implement the following security measures to protect your data:
- TLS encryption for all data in transit (HTTPS)
- Authentication and authorization managed by AWS Cognito
- Regular security reviews
While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.
7Cookies & Similar Technologies
We use cookies for the following purposes:
- Authentication: Keeping you signed in (essential)
- Security: CSRF protection during OAuth flows (essential)
- Preferences: Saving your language and display settings (functional)
You can disable cookies in your browser settings, but some features may not work correctly as a result.
8Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your account and data
- Restriction: Request that we stop certain processing of your data
- Portability: Export your data (when the feature is available)
To exercise any of these rights, please contact us at privacy@niltimer.com. We will respond within a reasonable timeframe.
9Children's Privacy
The Service is not directed at children under 13. If we become aware that a user is under 13, we will promptly delete their account and associated data.
Users between 13 and 18 should obtain parental or guardian consent before using the Service.
10Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you via the Service or your registered email address. Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.
3Social Login
When you sign in with Google or X, we receive only the minimum information necessary to create and manage your account.
We never receive your password or other sensitive credentials from these platforms.