OrO
Download

Privacy Policy

Last updated: July 9, 2026

This Privacy Policy explains how the OrO app collects, uses, shares, and protects your information. OrO is a focus app based on the Pomodoro technique, operated by Emanoel (“we”, “us”). By using OrO, you agree to the practices described here.

Information we collect

Account information

When you create an account using Sign in with Google, Sign in with Apple, or email and password (via Firebase Authentication), we collect your name, email address, profile photo (when available), and a unique user identifier. With Sign in with Apple, you may choose to hide your email; in that case we receive an anonymized relay address.

Content you create

We store the projects, tasks, timer history, and focus statistics you create in the app. This data is held in Cloud Firestore to sync your account across devices.

Usage and analytics data

We automatically collect usage events, screens viewed, session length, features used, app version, device model, operating system, language, and approximate location (derived from your IP address), through Firebase Analytics and PostHog.

Diagnostics and performance

To keep the app stable, we collect crash reports, error logs, device state, and performance metrics (startup time, network latency, rendering), through Firebase Crashlytics and Firebase Performance Monitoring.

Advertising data

In the free version, we show ads using Google AdMob. To do this, the advertising identifier (Android Advertising ID or Apple IDFA, where permitted), IP address, device information, and ad-interaction data may be collected. See the Advertising and AdMob section for details.

Local notifications

The app may schedule local notifications (for example, when a Pomodoro ends). These notifications are generated on your own device and do not send any data to our servers.

How we use your information

  • Provide, maintain, and sync the app across your devices;
  • Authenticate you and keep your account secure;
  • Store your projects, tasks, and statistics;
  • Understand usage and improve features (analytics);
  • Diagnose crashes and improve stability and performance;
  • Serve and measure ads for free-tier users;
  • Communicate important changes to the service;
  • Comply with legal obligations and prevent fraud or abuse.

Advertising and AdMob

We use Google AdMob to display ads in the free version of OrO. AdMob and its partners may use advertising identifiers and device data to serve personalized or non-personalized ads and to measure their performance.

In the European Economic Area, the United Kingdom, and Switzerland, we request your consent through a Google-certified consent management platform (the User Messaging Platform) before serving personalized ads. You can change or withdraw your consent at any time from the app's privacy settings. In the United States, we serve only non-personalized ads — we do not use your data for cross-context behavioral advertising.

You can also limit ad personalization directly on your device:

  • Android:Settings > Google > Ads — to reset or delete your advertising ID and opt out of personalization.
  • iOS:Settings > Privacy & Security > Tracking (App Tracking Transparency) and Settings > Privacy > Apple Advertising.

To learn how Google uses data when you use apps that show ads, visit policies.google.com/technologies/partner-sites.

Third-party services we use

We share data with service providers that process information on our behalf. Each has its own privacy policy:

Google / Firebase

Authentication, Cloud Firestore, Analytics, Crashlytics, Performance Monitoring, AdMob, and Sign in with Google.
Google policy: policies.google.com/privacy · Firebase: firebase.google.com/support/privacy

Apple

Sign in with Apple.
Apple policy: apple.com/legal/privacy

PostHog

Product analytics (usage events and metrics).
PostHog policy: posthog.com/privacy

Legal bases for processing

Where the GDPR (Europe) or LGPD (Brazil) applies, we process your data on the basis of: performance of a contract (providing the app you requested), consent (personalized ads and, where required, analytics), legitimate interests (securing, understanding, and improving the app), and compliance with legal obligations.

How we share information

We share data only: (i) with the service providers listed above, to operate the app; (ii) for legal reasons, when required by law or to protect rights; and (iii) in connection with a merger, acquisition, or sale of assets, with prior notice. We do not sell your personal information.

Data retention

We keep your account data and content while your account is active. When you request account deletion, we remove your data within a reasonable period (typically up to 90 days, including backups). Analytics and diagnostics data are retained according to each provider's defaults (for example, Firebase Analytics for up to 14 months; crash reports for around 90 days).

Security

We use encryption in transit (HTTPS/TLS), Firebase security rules, and access controls to protect your data. No method of transmission or storage is 100% secure, but we work to safeguard your information appropriately.

International transfers

Your data may be processed on servers located outside your country, including in the United States, by Google, Apple, and PostHog. Where applicable, these transfers are protected by safeguards such as Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to access, correct, update, export, or delete your data, restrict or object to processing, and withdraw consent.

  • Brazil (LGPD): confirmation, access, correction, anonymization or deletion, portability, information about sharing, and the right to complain to the ANPD.
  • Europe/UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to complain to a data protection authority.
  • California (CCPA): the right to know, delete, correct, and opt out of the “sale” or “sharing” of data — which we do not do.

To exercise any of these rights, email support@myoro.app. Where available in the app, you can also delete your account directly, which removes the associated data.

Children's privacy

OrO is not directed to children under 13, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we update the date at the top of this page and, for material changes, notify you within the app.

Contact us

If you have questions about this policy or your data, contact:
Emanoel — support@myoro.app
App: OrO