Privacy Policy

Last updated: April 11, 2026

This Privacy Policy describes how Echo Persona LLC ("we," "us," or "our") handles information when you use Pomlo, our website at https://pomlo.app, and related mobile applications (collectively, the "Service").

1. Information we may collect

Depending on how you use the Service, we may collect:

  • Account information — such as email address, display name, and profile details you provide.
  • Authentication identifiers — if you sign in with Apple or Google, we receive your email and a stable user identifier from the provider. You can also sign in with email and password.
  • User content — time entries, projects, clients, tags, invoices, and related data you create in the Service.
  • Calendar data — if you grant access, we read calendar events to suggest time entries and may write tracked time back to your calendar. Calendar data stays on your device unless you explicitly sync it to your account.
  • Purchase and subscription data — if you subscribe to a paid plan through the Apple App Store or Google Play, we receive transaction identifiers, plan, and status from the store and our subscription provider (RevenueCat). We do not receive your payment card number.
  • Diagnostics and usage — app events, device type, operating system version, and crash diagnostics, used to operate and improve the Service.
  • Analytics (web only) — on our website we use Google Analytics to collect aggregated usage data (page views, interactions, device and browser type, approximate location). Our mobile apps do not use third-party analytics SDKs.
  • Support communications — information you send when you contact us at support@pomlo.app.

2. How we use information

We use information to:

  • Provide, maintain, and improve the Service.
  • Authenticate you and keep your account secure.
  • Process subscriptions, renewals, and purchases through the app stores.
  • Respond to support requests and communicate with you.
  • Monitor usage, detect abuse, and protect the security and integrity of the Service.
  • Comply with legal obligations.

3. Legal bases (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract (to provide the Service you signed up for); legitimate interests (to secure and improve the Service); consent (where required, for example for optional analytics); and compliance with legal obligations.

4. Service providers and sub-processors

We share information with the third parties listed below, who process it on our behalf under contractual confidentiality and security obligations. We do not sell your personal information.

5. Cookies (website)

Our website uses strictly necessary cookies to keep you signed in and to remember preferences. We also set analytics cookies via Google Analytics to understand aggregate usage. You can block or delete cookies in your browser settings; some parts of the Service may not work correctly if you do.

6. Retention

We retain personal data for as long as your account is active. When you delete your account, we delete or anonymize your personal data within 30 days, except where we need to retain specific records for legitimate business or legal purposes (for example, tax records, fraud prevention, or dispute resolution), in which case we retain only the minimum necessary and for no longer than required by applicable law.

7. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your personal data.
  • Portability — receive your data in a portable format.
  • Restriction and objection — restrict or object to certain processing.
  • Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, contact us at support@pomlo.app. We will respond within the timeframe required by applicable law (generally 30 days). You also have the right to lodge a complaint with your local data protection authority.

8. California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information. Echo Persona LLC does not sell or share personal information as those terms are defined under the California Consumer Privacy Act. To exercise your rights, contact us at support@pomlo.app. We will not discriminate against you for exercising these rights.

9. Deleting your account

You can delete your Pomlo account at any time from inside the app under Settings → Account → Delete Account, or by emailing support@pomlo.app from the address associated with your account. Deleting your account permanently removes your personal data from our active systems within 30 days, subject to the retention exceptions described in Section 6. Deleting the app from your device does not delete your account.

10. Security

We use reasonable administrative, technical, and organizational measures to protect information, including encryption in transit (TLS) and encryption at rest for authentication and database storage through our hosting providers. No method of transmission or storage is completely secure.

11. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

12. International users

If you access the Service from outside the United States, your information may be processed in the United States or other countries where we or our providers operate. These countries may have data protection laws different from those of your country. Where required (for example, transfers out of the EEA or UK), we rely on appropriate safeguards such as the Standard Contractual Clauses.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes will be communicated through the Service or by email where appropriate.

14. Contact

Echo Persona LLC — support@pomlo.app
Website: https://pomlo.app

See also our Terms of Service and Disclaimer.