Privacy

Tomatito doesn't collect, sell or share any personal data. There's no account, no advertising and no analytics. The only personal data we ever receive is a message you choose to send us.

What stays on your device

Your timer settings, the timer itself and your harvest (how many tomatoes you've finished each day) are stored only on your own devices. Nobody else, including us, can see them.

iPhone and Apple Watch

• Your iPhone and Apple Watch keep each other in sync directly, using Apple's built-in connection between the two. Nothing passes through any server.
• Alerts are scheduled on your device. They aren't sent from the internet.
• If you use Siri or Shortcuts with Tomatito, your voice request is handled by Apple under Apple's privacy policy.

Mac

• The timer works entirely offline.
• Once a day, the Mac app asks tomatito.app whether there's a new version. Like any visit to a website, that request carries your IP address, and your Mac adds the app's version and your macOS version. Nothing about you or your tomatoes is sent. To stop it, turn off "Check for updates" in Settings.
• If you choose to update, the new version is downloaded from GitHub. The disk image on this website comes from GitHub too.

Web version and this website

• The web version saves your timer and settings in your browser's own storage on your device, and keeps a copy of its own files there so it works offline. None of it is sent anywhere.
• This website and the web version are hosted on GitHub Pages. GitHub may log visitors' IP addresses for security, as described in GitHub's privacy statement.
• This website is served through Cloudflare, which may also log visitors' IP addresses for security, as described in Cloudflare's privacy policy.
• Our pages set no cookies, and there's no analytics or tracking of any kind.

The contact form

If you write to us with the contact form, your name, email address and message are passed through Cloudflare and delivered to our email inbox. We use them only to reply to you, and the form itself keeps no copy. We keep messages only as long as we need them to help you, and delete them within 12 months of the conversation ending, or sooner if you ask.

To keep out spam bots, the contact page uses Cloudflare Turnstile, which checks in your browser that a person is sending the message. To do that, Cloudflare looks at your IP address and basic details about your browser, and uses them only to tell people from bots, not to identify you or advertise to you. Turnstile runs only on the contact page.

Why we're allowed to

Data protection law (the UK GDPR, and the EU GDPR for visitors in Europe) asks us to say why we handle each piece of personal data. For everything on this page it's our legitimate interest: answering the messages you send, keeping this website and the contact form safe and free of spam, and letting the Mac app keep itself up to date. You can object at any time, and you can always turn the Mac app's update check off.

Who else handles it

Cloudflare and GitHub (named above) and our email provider handle data for us or alongside us. Some of them are in the United States. They protect those transfers with the EU-U.S. Data Privacy Framework and its UK Extension, or with standard contractual clauses. We never sell or share your data with anyone else.

Your rights

You can ask us for a copy of any personal data we hold about you, or ask us to correct it, delete it, limit what we do with it, or send it to you in a portable form. Use the contact form and we'll answer within a month. Since your timer and harvest never leave your devices, you can delete those yourself by deleting the app or clearing your browser's data for the web version.

If you're unhappy with how we've handled your data, you can complain to the UK's Information Commissioner's Office, or to the data protection authority where you live.

Children

Tomatito is suitable for everyone and collects no information from anyone, including children, beyond a message someone chooses to send.

Changes and contact

If this policy ever changes, the new version will be posted here with a new date.

Questions? Use the contact form.