Sugo Sync
Privacy policy
Last updated: 4 November 2026 (draft)
Draft. This text has not been reviewed yet and does not apply until Sugo Sync launches. Parts marked [TODO] are still to be filled in.
Sugo is a Pomodoro timer that keeps your data on your computer. The app sends no data about you. This policy is about Sugo Sync, the optional service that keeps your timers the same on your computers, and about this website.
In short
- We keep your email address, the names of your computers, and your timers in a locked form.
- Your timers are locked on your computers before they reach us. We cannot read them.
- No tracking, no advertising, and we never sell your data.
- You can delete your account, and with it everything we keep, at any time from your account page.
Who is responsible
The controller of your personal data is [TODO: name of the operator], [TODO: postal address, country]. Contact: [TODO: privacy contact email].
What we keep and why
| Data | Why |
|---|---|
| Your account: email address. If you sign in with Google or GitHub, also the name and picture those services share. [TODO: check what Clerk keeps] | To sign you in and to contact you about your account (for example before a change to these terms). |
| Your devices: the name of each device (by default the computer's name, which you can change in Sugo), its platform (Linux or macOS), its public key, and when it was linked and last active. When you disconnect a device, its record is deleted at once. | To link devices, enforce the device limit of your plan, and let you see and disconnect them. |
| Your encrypted data: your timers, encrypted on your device; your data key, sealed for a device you are linking (deleted once that device has collected it) or encrypted with your recovery code. | To sync your timers. We cannot decrypt any of it: the keys never leave your devices. |
| Sign-in records: short-lived sign-in codes, with the name, platform and public key of the device being linked, and the tokens of each device. The code you type is stored as it is; the code Sugo keeps and the tokens are stored only as hashes. | To link a device and keep it signed in. |
| Technical data: IP addresses and request details, briefly. | To protect the service against abuse (for example limiting sign-in attempts) and to fix problems. |
We do not receive your timers in clear text, your session history, your statistics, your task notes or your settings: they stay on your computers.
Legal bases
- Providing Sugo Sync to you, as described in the terms (Art. 6(1)(b) GDPR).
- Our legitimate interest in keeping the service secure and free of abuse (Art. 6(1)(f) GDPR).
Who processes data for us
- Clerk, Inc. (United States) runs sign-in and keeps your account details. [TODO: link Clerk's DPA and transfer mechanism]
- Cloudflare, Inc. (United States) hosts this website and the Sugo Sync server, its database and the storage of your encrypted data. [TODO: link Cloudflare's DPA, storage region]
Transfers outside the European Economic Area rely on [TODO: EU–US Data Privacy Framework and/or Standard Contractual Clauses]. We do not share your data with anyone else, unless the law requires it.
How long we keep it
- Your account, devices and encrypted data: until you delete your account.
- Sign-in codes: they stop working after 10 minutes, or once the device is linked, and are deleted within about two hours at the latest.
- A disconnected device's record: deleted as soon as you disconnect it.
- Technical logs: [TODO: retention of Cloudflare logs].
When you delete your account, we delete it, your devices and your encrypted data from our server and ask Clerk to delete your account details. Copies in backups disappear within [TODO: e.g. 30 days].
Cookies
This website uses no analytics and no tracking cookies. The sign-in pages (/link and /account) use cookies set by Clerk that are strictly needed to keep you signed in. The theme you choose with the button in the header is remembered in your browser only.
Your rights
You can ask for access to your data, its correction or deletion, a copy in a portable format, a restriction of processing, or object to it. You can see and delete your devices and your account yourself on your account page; for anything else, write to [TODO: privacy contact email]. You also have the right to lodge a complaint with a data protection authority, such as [TODO: the supervisory authority of the operator's country].
Children
Sugo Sync is not meant for children under [TODO: 16].
Changes
If we change this policy, we publish the new version here with its date. For important changes we write to the email address of your account before they apply.