Privacy Policy

Effective October 13, 2026

Pawmato ("the app") is a study timer for iPhone made by the Pawmato team ("we", "us"). This page explains what the app keeps, what it sends, who helps us run it, and how to delete your data.

1. What stays on your phone

Your pet and its name, your player name, coins, gems, items and outfits, your room, focus history and stats, notes, and settings are saved on your iPhone. We don't receive them. Deleting the app deletes them.

If you allow notifications (for example "your session is done"), they are made on your phone. No notification data is sent to us.

2. Your anonymous account (Supabase)

The first time the app goes online it makes an anonymous account: a random id, with no email, phone number, password or real name. It is stored with Supabase, the service that runs our server. With that id we keep only:

• Your name and tag, like maple#1234, only if you pick one. It is your friend code, so friends and people you share it with can see it.
• Friends and blocks: who you added and who you blocked.
• Invites: who invited whom, and the invite progress.
• Session counts for invites: for each finished focus session, a random session id, how many minutes it was, and when it ended. We use it only to check invite progress (for example "3 sessions on 2 days") and to stop cheating.
• Codes: which codes you redeemed, and the times you tried (to limit guessing).
• Gifts waiting for you (coins, gems or items from invites and codes) and when you claimed them.
• Plus status: whether Plus is active, the plan and when it ends, so features work.
• Early access: which test features you turned on, and the paws (1 to 5) and note you give them, if you do.

Other players can see only your name and tag. The rest is readable only by you (an invite, by both people in it). Everything travels over encrypted connections (HTTPS).

3. Purchases (Apple and RevenueCat)

Plus and gem packs are bought through Apple's App Store. Apple handles the payment; we never see your card details or your Apple ID. To check whether you have Plus and to restore purchases, the app uses RevenueCat. RevenueCat receives your anonymous account id, the record of what you bought and when (from Apple), and basic technical details such as the app version and your store country. It does not receive your name, email or contacts.

4. Crash reports (Sentry)

When the app crashes or hits an error, it sends a crash report to Sentry so we can fix it: what went wrong in the code, the app version, the iOS version and the phone model. Crash reports carry no user id and no personal data: we turned off sending IP addresses and user details, and the app removes your pet's name, your player name, your tag and friends' names before a report leaves the phone. There are no screenshots and no session replay.

5. Reward videos (Google AdMob)

The app has no banner or pop-up ads. If you don't have Plus, the Shop offers an optional "Watch a short video" for a reward. Google's ad service (Google AdMob) starts only when you tap it; nothing ad related loads before that.

• Ads are always non-personalized and rated PG at most.
• In some regions (such as the EU and UK) Google may first show a short consent message.
• The app never asks to track you (no tracking prompt) and does not use Apple's advertising id.
• We send Google nothing of ours: no account id, no names.
• Google's own software does collect some data to show and count the ad and to stop fraud: your IP address (which gives a rough location), a device id for this app's maker (Apple's IDFV, not the advertising id), what happened with the ad (shown, tapped, watched), and diagnostics. See how Google uses data from apps that use its services.

6. What we don't do

• No account email, and no sign-in is needed.
• No analytics or tracking services.
• No personalized ads, and no tracking across other companies' apps and websites.
• We don't sell or rent information about you.
• No access to your contacts, location, photos, camera or microphone. When you share your code or a picture, your iPhone's share sheet does the sending; we don't see who you send it to.

7. Who we share data with

Only the services above, each to run its part of the app: Supabase (server), RevenueCat (purchases), Sentry (crash reports), Google AdMob (reward videos, only when you tap one) and Apple (the App Store). We may also share information if the law requires it.

8. How long we keep it, and how to delete it

• On your phone: delete the app and it's gone.
• Your online account: a button to delete your account in the app is coming. Until then, email us (below) with your name and tag if you picked one, and we'll delete your account and everything stored with it. Deleting the app alone does not delete the online account.
• Crash reports are kept by Sentry for a limited time and then deleted.
• Purchase records are kept by Apple and RevenueCat as needed for your purchases and the law.

You can also ask us for a copy of what we hold about you, or to correct it.

9. Children

Pawmato is made for students and young adults. It is not directed to children under 13, and we don't knowingly collect information from children under 13. If you think a child under 13 has given us information, email us and we'll delete it.

10. Changes

If this policy changes, we'll post the new version on this page with a new date. If a change is big (for example, sign-in with email), we'll also tell you in the app before it applies.

11. Contact

The Pawmato team
Email: dropvaultmarket@outlook.com