Tabata Timer Privacy Policy
Last updated: 2026-09-17
Tabata Timer (the “App”) is developed by PrSeo7 (“we”, “us”). This policy describes what the App does with data on iOS and Android. It is a description, not a request for consent: the App shows no consent dialog and no advertising, and the processing described here rests on the legal bases in section 2. The App has no accounts, and we run no server of our own. If you do not want the data collection described here, uninstalling the App ends all collection.
PrSeo7 is the data controller for the processing described below, except where this policy says that Google, Apple or Google Play acts on its own behalf. Contact details are in section 10.
1. What the App Collects
1.1 Data stored on your device
- Your workouts, interval settings, beep, haptics and language preferences, and whether Premium is owned are stored in the App’s preferences on your device. Your run history (when each workout or timer finished, how long it was set for, and the workout’s name) is stored in a database in the App’s own storage on your device. We cannot access any of it.
- Your operating system may include this data in its backups (Android backup to your Google account, iOS backups to iCloud or a computer). That is governed by Google’s or Apple’s terms, and it means a reinstall on the same account can bring the data back.
1.2 Usage analytics (Firebase Analytics, by Google)
- Runs from the first launch, for every user, Premium included. It records which features you use (tab changes, workout start/pause/reset/finish, timer runs, preset changes, the beep toggle, Premium purchase and restore actions including the price, currency and store transaction number of a completed purchase) together with your device model, operating system version and language, and the country or region that Google derives from a masked IP address. No location services are used.
- Events are tied to an installation identifier that Google assigns to this copy of the App (and, on iOS, to Apple’s identifier for vendors), not to your name or an account. We cannot map that identifier to a person.
- The App does not give Analytics your Advertising ID or IDFA, and it keeps all advertising-related uses of Analytics switched off. Analytics data is used only for product analytics.
1.3 Crash reports (Firebase Crashlytics, by Google)
- When the App crashes, Google receives the stack trace, device model, operating system version, the App’s state at the time, and installation identifiers assigned by Google. No user identifier or custom data is attached.
1.4 Premium purchase
- Premium is a one-time purchase (unlocks landscape orientation). Payment is handled by Apple (App Store) or Google (Google Play). We never see your payment details; the store tells the App only whether the product is owned.
- The App re-checks ownership with the store at each launch using the store’s own client software. No receipt is sent to us. If the store says the product is not owned, or cannot be reached for several days, Premium is switched off until the store confirms it again. Restore purchases in Settings re-reads ownership after a reinstall or on a new device.
1.5 Device permissions
- Notifications: to alert you when a workout or timer finishes while the App is in the background. The alert is scheduled on your device; no push service is involved.
- Audio and keep-awake: to play beeps and keep the screen on during a workout. No recordings are made.
The App does not collect contacts, precise location, health data or payment information.
2. Why We Process Data and the Legal Bases (EEA, UK and Switzerland)
| Purpose |
Data |
Legal basis |
| Run the timer, keep your settings |
On-device data (1.1) |
None needed: we never receive it |
| Understand which features are used and fix crashes |
Analytics and crash data (1.2, 1.3) |
Legitimate interests (Art. 6(1)(f)): improving a free app. Safeguards: no accounts, no advertising identifier, masked IP, automatic deletion after 14 months / 90 days, uninstalling ends collection |
| Sell and honour Premium |
Purchase status (1.4) |
Contract (Art. 6(1)(b)); Apple and Google process the payment as independent controllers |
We make no decisions about you by automated means that have legal or similarly significant effects. Providing this data is not required by law or by a contract with us. The App has no switch for the analytics described in section 1.2; uninstalling ends all collection.
We do not sell or share personal data.
3. Who Receives Data
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for Firebase Analytics and Firebase Crashlytics. Google processes this data under its privacy policy, the Google Ads Data Processing Terms (Firebase Analytics) and the Firebase Data Processing and Security Terms (Crashlytics), which bind it to protection equivalent to this policy.
- Apple (App Store) and Google (Google Play), for distributing the App and processing the Premium purchase, under their own privacy policies.
- Nobody else. Data goes directly from your device to Google; nothing is transferred to us, because we operate no server.
Data sent to Google is processed in the United States and other countries where Google operates. For transfers out of the EEA, the UK and Switzerland, Google relies on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (details). We may also disclose data if required by law.
4. Retention
- On your device: until you delete the App, or, on Android, clear the App’s storage in Settings ▸ Apps. Backups follow Google’s or Apple’s retention. Ownership of Premium is kept by Apple or Google under your store account and can be restored at any time.
- Analytics: Google deletes user-level analytics data no later than 14 months after collection.
- Crash reports: Google deletes crash data after 90 days.
Because analytics and crash data carry no identifier we control, we cannot find a specific person’s records to delete them individually. They are deleted automatically at the end of these periods, and uninstalling the App stops all further collection.
5. Your Choices
- Advertising: the App shows no ads. There is no advertising SDK, no ad is ever requested, and no advertising identifier is read, so there is nothing to consent to or opt out of.
- Analytics: there is no in-app switch. Uninstalling the App ends collection.
- Local data: delete the App to remove it, or on Android clear the App’s storage in Settings ▸ Apps. Premium can be brought back with Restore purchases.
6. Your Rights
If you are in the EEA, the UK or Switzerland, you have the rights of access, rectification, erasure, restriction, objection and data portability. Because the analytics and crash data hold no identifier that lets us recognise you, we cannot fulfil access, erasure or portability requests for that data (GDPR Article 11); the effective control is uninstalling the App, which ends all collection. You also have the right to lodge a complaint with your data protection authority: EEA authorities, the UK ICO, the Swiss FDPIC.
If you are a California resident: we do not sell or share personal data, and we collect no sensitive personal information. You may contact us at the address in section 10 with any request, and we will not discriminate against you for making one.
7. Children
The App is a general fitness tool and is not directed to children under 13 (16 in the EEA). We do not knowingly collect personal data from children. Because we cannot identify individual users, we cannot locate or delete a specific child’s records; if you are concerned, contact us and we will explain the options (uninstalling ends all collection).
8. Security
Data travels to Google over encrypted connections and is protected by Google’s security measures. We hold no data ourselves. No method of transmission or storage is completely secure.
9. About This Policy
This policy describes what the App does; it is not a contract you accept by using the App. The App shows no consent dialog; the processing described here rests on the legal bases in section 2. We update this policy when the App or the law changes and change the date at the top.
Change history
- 2026-09-17: the App now keeps a history of finished workouts and timers in a database on your device and shows it on a History page. Nothing about this leaves your device; opening the page is counted by Analytics like any other feature use.
- 2026-09-13: all advertising removed from the App. The advertising section, the iOS tracking permission, the ad consent dialog and the ad-related choices and retention periods are gone; Analytics, crash reporting and the Premium purchase are unchanged.
- 2026-09-09: the purchase event sent to Firebase Analytics now includes the store’s transaction number, so a single purchase cannot be counted twice. Nothing else changed about what is collected.
- 2026-09-04: full rewrite after a code review. Added legal bases, the recipients and transfer details, exact retention periods, backups, the notification permission, IP-derived location for all users, and removed promises the App cannot keep (individual deletion, in-app notices). Earlier the same day: ad consent timing, analytics scope, Premium section.
- 2025-11-09: previous version.
PrSeo7 (data controller)
Email: hello.prseo7@gmail.com
Please put “Tabata Timer Privacy” in the subject line. We answer as soon as reasonably possible.