Privacy Policy

1. Who we are

Panko: Pomodoro & Focus ("Panko", "the App") is published by:

• Company: QubitumAI SAS
• SIREN: 942469610 · Registered-office SIRET: 94246961000011
• Address: 60 rue Notre-Dame de Nazareth, 75003 Paris, France
• Privacy contact: contact@qubitumai.com
• General contact: contact@qubitumai.com

This policy explains our processing of personal information and the choices and rights available to you under applicable privacy law.

2. The short version

Panko is local-first. There is no Panko account. Your focus sessions, recipes, crumbs, decorations, settings and optional next-step note are stored in the App. Panko does not transmit that content to us.

Your operating system may include this App data in device backups or transfers, depending on your device settings. Backup copies are managed by your device or backup provider and can outlive deletion within Panko. Avoid putting sensitive information in the optional note.

Settings → Protect your history offers a free JSON backup that you choose to export. It includes your baking history, crumbs, settings and optional next-step note. It does not include purchase entitlements, store or support identifiers, advertising consent, notification permissions or an active timer. Purchases are restored separately through the store.

You choose the destination through your device's file picker, which may offer a cloud location managed by a provider you select. Panko has no automatic cloud backup or automatic upload of these files to QubitumAI. Files you export or share are handled by the destination or sharing provider you choose. JSON exports are readable text; Panko does not encrypt them.

Importing a JSON backup requires your confirmation and replaces the local history, crumbs and settings. Panko keeps a copy of the previous data in the App's own database before replacement. An active timer stops and reminders are turned off; importing does not transfer purchase rights or notification permissions.

Panko connects to third-party services for purchases (so your Pro access can be checked and restored) and, in the free tier only, advertising. Panko requests non-personalized ads. This still involves processing some device, advertising and diagnostic information as described below.

3. What data is processed, and why

RevenueCat documents that its customer profile uses the transaction country when available, otherwise an approximate country derived from the most recently seen IP address. RevenueCat states that it discards the IP address after determining the country and does not persist that address. The country is available for purchase analytics and support. See RevenueCat's customer-profile documentation.

Panko does not request GPS access or send the content of your sessions or next-step note to these providers. It does not send your email address to RevenueCat as a customer attribute. Non-personalized advertising does not mean that no data is collected or shared. Google's documented SDK processing includes sharing for advertising and analytics; availability of identifiers depends on your device, permissions and choices. See Google's Android disclosure, its iOS disclosure, and RevenueCat's privacy information.

4. Advertising

Free users may see a banner on the Shop and Recipe Book screens and may choose to watch a rewarded ad outside an active focus session or break. Ads are never shown during an active focus session or break. Before requesting an ad, Panko checks Google's consent service and displays a consent form when required, including in the European Economic Area, the United Kingdom and Switzerland. When available, Settings → Ad privacy choices lets you revisit those choices. Refusing advertising choices does not prevent you from using the timer.

Advertising consent and iOS permission to track across other companies' apps or websites are separate choices. Requesting non-personalized ads alone does not establish that every provider operation is tracking-free. Device permissions are managed in your operating system settings. Panko Pro prevents advertising requests while your Pro entitlement is active; an expired or refunded purchase no longer grants Pro benefits.

5. Children

Panko is a productivity app intended for adults aged 18 and over, not a children's app. Store content ratings describe content and are separate from this intended audience; the applicable rating is shown by your store. If you believe a child has sent us personal information, contact us so we can investigate and handle any appropriate deletion request.

6. Retention

• Sessions, crumbs, decorations, timers, reminders, the optional next-step note and local copies kept before a JSON import remain in app storage until you erase them or remove the App. Settings → Erase my data resets this local activity and most preferences, erases the local pre-import copies, cancels scheduled notifications and returns to onboarding. Your chosen language and purchase entitlements are retained. You can delete your current next-step note individually; older pre-import copies can still contain it until local erasure.
• Device backups, transferred copies and JSON or CSV files exported outside the App's storage are not erased by local erasure or by uninstalling Panko. Delete or manage those copies yourself with your device, backup, cloud or file provider.
• Purchase records are held to validate and restore entitlements and to meet applicable obligations. Removing local activity does not delete store transactions or RevenueCat records. Contact us for requests concerning data processed on our behalf; separate store records follow the store's retention rules.
• Advertising information is retained under Google's privacy policy. Local erasure does not clear providers' server records or reset Google consent choices.
• Support correspondence is kept for handling your request and necessary follow-up, disputes or legal obligations. You may contact us to request access or deletion.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or port your personal information, object to processing and withdraw consent. Use the local erasure and advertising choices described above, or email contact@qubitumai.com for a privacy request. We handle requests within the deadlines required by applicable law and may need information to identify the relevant records. There is no Panko account to delete. Erasing app data or requesting deletion does not itself cancel a store subscription. EU residents may complain to the CNIL (France) or their local supervisory authority.

An anonymous identifier can still refer to personal data. For records processed through RevenueCat, open Settings → Help & privacy → Support ID to view your current app-user identifier, including when you have made no purchase. You may select or copy it and choose to send it with an access or deletion request. The identifier is read from the configured SDK; Panko does not store another copy or send it to analytics or logs. The contact form includes it only if you explicitly enable Include support ID. It is then visible in the draft you choose to open in email, copy or share. Using the copy button places it in your device clipboard, which you control. If it cannot be displayed, try again or contact us for assistance.

The in-app contact form keeps your draft in memory while it is open and does not automatically upload a support ticket. Technical details are separately optional and disabled by default: app version, build, platform and language only. Sessions, next-step notes, payment details and logs are not automatically attached. You review the draft and send it yourself using your chosen email or sharing app. That app processes what you share under its own terms. Messages sent to panko@qubitumai.com reach the QubitumAI support mailbox and are handled as support correspondence described above. The Pro sample preview does not access your customer identifier.

8. Security

Data in transit is encrypted (TLS). Local data is protected by your device's own security. We keep the amount of data we process to the minimum needed to run the App.

9. International transfers

RevenueCat and Google may process data outside your country, including in the United States. Their contractual safeguards and applicable transfer mechanisms are described in RevenueCat's Data Processing Addendum and Google's transfer information. You can contact us for information about processing on our behalf.

10. Changes to this policy

We will post changes on this page and update the date above. Where applicable law requires additional notice or consent, we will provide it before the relevant change takes effect.

11. Contact

QubitumAI SAS · 60 rue Notre-Dame de Nazareth, 75003 Paris, France · contact@qubitumai.com