Privacy, plainly

Privacy Policy

Who we are

Yellow Tomato is made and published by an individual developer (sole proprietor) based in Portugal. There is no company backend, no user account system, and no service that receives your data. Because we operate in the EU, this policy is written with the GDPR in mind.

---

The iOS app

App Store

The iOS app contains no networking code of any kind — no analytics, no crash reporting, no third-party SDKs, and no data transmission. Nothing you enter or generate is ever sent anywhere.

What’s stored, and where

Everything is stored locally on your device, including in the iOS App Group container the app shares with its own extensions:

• Timer sessions & statistics — your completed and abandoned focus sessions.
• Streaks — your focus history, kept only for you.
• Tasks / to-dos — anything you add to a session.
• Settings — your timer, break, and app preferences.
• Blocklist selection — the apps, categories, or sites you choose to block (see below for how this works).

Blocking distractions & Screen Time

The optional “Block distractions” feature uses Apple’s Family Controls / Screen Time framework with individual authorization — meaning you manage it for yourself; it is not a parental-controls setup. We request Screen Time authorization only when you turn this feature on.

You choose what to block through Apple’s system FamilyActivityPicker. iOS hands the app only opaque tokens for your selection: the app cannot see which apps you picked, and it cannot read any usage data. Shields (the block screens) apply only during a focus session you start, and are removed when the session ends or you stop it.

Notifications

Any notifications are scheduled locally on your device. No push server is involved.

Deleting your data

Deleting the app deletes all of its data from your device.

---

The Chrome extension

Chrome Web Store

Like the iOS app, the Chrome extension makes no network requests of any kind — no fetch, no analytics, no beacons, and no remotely-loaded code anywhere in its source. Nothing you do leaves your browser.

What’s stored, and where

All data is stored locally in your browser, and the extension does not use chrome.storage.sync — so your data stays on the machine it was created on and does not sync between your Chrome profiles or other computers. (If your blocklist doesn’t follow you to another machine, that’s why — it’s intentional.)

• chrome.storage.local — timer state, streaks, your active task, and settings.
• IndexedDB — your to-dos.
• localStorage — your theme preference.

Permissions the extension requests

• storage & unlimitedStorage — to save the local data listed above.
• alarms — to run the countdown timer reliably in the background.
• notifications — to show local notifications when a session or break ends.
• tabs — Chrome labels this “read your browsing history,” but the extension uses it only to find tabs on distracting sites and redirect them to the block page during a focus session. This check happens entirely on your machine; tab URLs are never stored beyond that momentary check and are never transmitted.
• offscreen (optional) — used only when needed to support timer/notification behavior. No host permissions, no content scripts, and no remote code are used.

Limited use disclosure

Yellow Tomato’s use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Tab information accessed via the tabs permission is used solely, and on your device, to redirect distracting sites to the block page during a focus session. It is never transferred to us or any third party, never sold, and never used for advertising or any other purpose.

Removing the extension

Uninstalling the extension removes its chrome.storage.local and IndexedDB data. You can also clear the theme preference and other site data through your browser’s normal “clear browsing data” controls.

---

Data storage & deletion, at a glance

Neither product sends your data to us — we have no way to receive it. Your information lives on your device (on iOS, within the app and its App Group container; on Chrome, in the browser’s local extension storage, which does not sync across machines). You remove it by deleting the app or removing the extension.

Permissions, explained

iOS: Screen Time / Family Controls authorization is requested only to apply your chosen blocks during a focus session, and only when you enable “Block distractions.” Notification permission, if granted, is used only for local reminders.

Chrome: the extension requests storage / unlimitedStorage (local data), alarms (the timer), notifications (local alerts), tabs (to redirect distracting sites to the block page during a session, locally), and optionally offscreen. It requests no host permissions and uses no content scripts or remote code. See the extension section above for the full explanation, including the Limited Use disclosure for the tabs permission.

Children’s privacy

Yellow Tomato is a general-audience productivity tool. It is not directed at children, and we do not knowingly collect any information from anyone — children included — because we do not collect information at all.

GDPR

Because nothing is collected, transmitted, or processed off your device, we do not process any personal data as a controller or processor in the course of running these products. There is no profiling, no advertising, and no data sharing. If you have questions about your privacy or wish to exercise any rights you believe apply, you can contact us at yevhen.codes@gmail.com.

Changes to this policy

If this policy changes, we’ll update the “Last updated” date above and, where a change is significant, note it on this page. Continued use after an update means you accept the revised policy.

Contact

Yellow Tomato is maintained by an individual developer in Portugal. For any privacy question, email yevhen.codes@gmail.com.