Privacy Policy

Last updated: March 2026

SmilePom is built for focus — not data harvesting. We collect only what's needed to make the app work and improve your experience. We never sell your data.

1. Who We Are

SmilePom ("we", "us", "our") is a productivity app for iOS and Android developed by Splat That, based in Orlando, Florida, USA. If you have questions about this policy, contact us at support@smilepom.com.

2. Data We Collect

Account data

Email address and display name (when you create an account)
Profile photo (if you choose to upload one)
Authentication provider (email/password, Google, or Apple)

App usage data

Focus sessions: duration, category, tasks, completion status
Pomodoro timer history
Tasks and subtasks you create
Calendar events you create within SmilePom
Onboarding preferences (role, work rhythm, goals)
App settings and preferences

Device and technical data

App usage statistics (which apps you use during focus sessions) — used only to calculate your focus score and distraction coaching
Crash reports and error logs (via Firebase Crashlytics)
Anonymous usage events (via Firebase Analytics) — e.g. which features are used
Device type and operating system version

Location data

Approximate location — only when you add a location to a calendar event. Never collected in the background.

Biometric data

If you enable biometric unlock (Face ID / fingerprint), authentication is handled entirely by your device's secure enclave. We never receive or store biometric data.

3. How We Use Your Data

To provide and personalise the app experience
To power AI-driven coaching and scheduling suggestions (via Google Gemini)
To sync your data across your devices
To improve app performance and fix bugs
To send important account and service emails (no marketing without consent)

4. Third-Party Services

SmilePom uses the following third-party services, each with their own privacy policies:

Google Firebase — authentication, database (Firestore), file storage, analytics, crash reporting, and AI features. Firebase Privacy
Google Maps Platform — location search when adding event locations. Google Privacy Policy
Google Sign-In / Apple Sign-In — optional social authentication

We do not use advertising networks or sell data to third parties.

5. Data Storage and Security

Your data is stored on Google Firebase servers, which are SOC 2 and ISO 27001 certified. Data is encrypted in transit (TLS) and at rest. Access is restricted to authenticated users only via Firebase Security Rules.

App usage statistics (which apps you use during sessions) are processed on-device where possible and stored only in your personal Firestore account — not shared or aggregated across users.

6. Your Rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your account and all associated data
Export your data in a portable format
Object to certain processing (e.g. analytics)

To exercise any of these rights, contact us at support@smilepom.com. We will respond within 30 days. Account deletion can also be performed directly within the app under Settings → Account → Delete Account.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is removed from our systems within 30 days. Anonymised, aggregated analytics data (not linked to you) may be retained longer.

8. Children's Privacy

SmilePom is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy as the app evolves. We will notify you of significant changes via email or an in-app notice. The "last updated" date at the top of this page will always reflect the most recent version.

10. Contact

Questions or concerns? Email us at support@smilepom.com.