Privacy Policy

Effective date: October 1, 2026 · Updated October 8, 2026

1. Camera

Shrimpodoro uses your front camera only while you are on the squat screen. On iPhone, Apple's on-device Vision framework finds body points in each frame to count squats; on Android, Google's MediaPipe pose model does the same, also entirely on the device. Frames are processed in memory, then discarded. We never record, save, or upload camera video or images, and we never see them.

2. Data that stays on your device

Your pomodoro history, squat counts, tomatoes, stamps, and settings are stored locally on your phone. We have no server copy. Deleting the app deletes this data.

3. Data sent to service providers

• Apple and Google — App Store and Google Play distribution and payments. We never see your payment details.
• RevenueCat — checks whether you have Pro and restores purchases. It receives an anonymous app user ID and your purchase history from Apple or Google Play.
• PostHog — anonymous product analytics, such as "pomodoro started", "squats finished", or "paywall shown", plus the app version, device type, language, and an approximate country derived from your IP address (the IP address itself is not stored). There is no name, email, or camera data, no session replay, and no advertising tracking. Events use a random app ID, not an account.
• Sentry — crash and performance reports, with device, OS, and app diagnostics.

We do not sell your data. We do not use it to track you across other companies' apps or websites.

4. Notifications

Pomodoro reminders are local notifications scheduled on your phone. No push server is involved.

5. Website and waitlist

If you join the waitlist on this website, your email and the link you came from (for example, a TikTok video) are stored in Tally. We use your email only to send one launch email, and you can ask us to delete it at any time. The website is hosted on Vercel, which keeps standard server logs.

Vercel Web Analytics provides cookie-free, aggregate website traffic statistics. Optional Google Analytics stays off until you choose Allow analytics. It counts visits, recognized AI referral sources, link clicks and successful waitlist callbacks; a callback is not a purchase. The Panda Stretch and Shrimpodoro websites share a reporting property with separate website labels and no cross-domain linker. Analytics receives only a public source name or an AI service homepage, not your email or full referral URL. Google Analytics may use analytics cookies after consent; advertising features and Google signals are disabled. Your consent resets on reload, and you can turn analytics off using the website controls. Cookies may remain until you remove them in browser settings.

For requests that name a known AI bot, our server monitoring records only its name, stated purpose and a public page path. It does not add IP addresses, request queries or raw User-Agent strings. User-Agent matches do not verify a bot's identity or show that your visit came from an AI recommendation.

6. Your choices

You can deny camera access and still use the timer. Squats can be skipped, and a skipped round gives you a black tomato. To ask about or delete your data, email ianloe666@gmail.com. This covers analytics, crash reports, purchase records, and waitlist data. For purchase records, include your App Store or Google Play order number. We delete the matching data within 30 days and reply to confirm. Analytics and crash data are linked only to a random app ID, and uninstalling the app resets that ID.

7. Children

Shrimpodoro is not directed to children under 13, and we do not knowingly collect their personal information.

8. Changes

If this policy changes, we will update this page and the date above.

9. Contact

ianloe666@gmail.com

隐私政策