Pomelo Widgets Privacy Policy

We consider personal data to be any information that can identify you directly or indirectly. In the context of Pomelo Widgets this includes:

• The widgets you design — their layers, text, colours and the photos you place in them, stored on the device and mirrored to your private iCloud database.
• Your reminders — when you add a Reminders layer, the titles and due dates it draws are read from the Reminders app and saved as part of the widget, which means they travel to your private iCloud database along with the rest of the design. The App can also mark a reminder complete when you tap it on the Home Screen; it never creates, edits or deletes one.
• Precise location — requested when a widget shows the weather where you are. Because a widget refreshes on its own schedule rather than when you open the App, the permission asked for is Always, so that a reading can be fetched in the background. The coordinates are handed to Apple's WeatherKit and discarded; see How We Use Personal Data below.
• Purchase records — the App Store transactions that unlock how many widgets you may keep edits on. These are held by Apple; the App only reads them.
• Crash reports & diagnostics — if you have opted in to Apple's analytics, anonymised crash logs may be transmitted to Apple and shared with us.

We do not ask for names, e-mail addresses, contacts, financial or health data, and we do not combine any of the above with third-party datasets. Do bear in mind that a reminder is free text you wrote yourself: if you put something sensitive in one and then draw it on a widget, that text is saved with the widget like any other layer.

Regardless of where you live, you may:

• Access a copy of the data stored in your iCloud private database.
• Request correction or deletion of any widget you have saved.
• Object to, or restrict, processing of your data.
• Export your data in a portable format.
• Withdraw location access at any time in Settings, without losing any widget that does not need it.
• Withdraw Reminders access the same way. The rest of the App carries on working; only the Reminders layer stops drawing, and any reminder text already saved into a widget can be removed by deleting that layer.

You can exercise these rights by contacting us at info@gustavoamaro.com. We aim to respond within 3 calendar days.

Photos are read through Apple's photo picker, which hands the App only the pictures you chose — the App never receives access to your library as a whole. Reminders are read through Apple's EventKit once you grant access, and only the lists and items a layer is set to show are ever looked at.

The App registers for no push notifications and holds no device token. The only data that ever leaves your device for somewhere other than your own iCloud storage is the location handed to Apple's WeatherKit, and that is discarded as soon as the reading comes back.

Pomelo Widgets does not obtain additional information from Sign in with Apple, marketing SDKs, analytics platforms or advertising networks. Weather readings come from Apple's WeatherKit and describe a place, not a person.

Reminders are not a third-party source either: they come from the Reminders app already on your device, through the system framework, and only after you have granted access.

*For users in the EEA/UK, processing is justified under Articles 6(1)(a), 6(1)(b) and 6(1)(f) GDPR.

Data retention — widgets persist until you delete them in the App, and so does any reminder text a layer saved into one. Deletions are propagated to iCloud immediately and become irrevocable after Apple's server-side grace period (up to 30 days). Location is not retained at all: the coordinates are used for one WeatherKit request and dropped, and only the weather reading they produced is kept, for as long as it is worth drawing.

We do not sell or share any personal data with third parties. Your widgets, and any reminder text inside them, go only to your own iCloud private database, which we cannot read.

The single exception is Apple itself, acting as our processor: the location behind a weather layer is sent to WeatherKit to get a reading back. Your reminders are never sent anywhere. Data may otherwise only be disclosed to law enforcement upon a valid, binding legal request.

• In transit — all traffic uses TLS 1.2+ enforced by App Transport Security.
• At rest — the iCloud private database encrypts records; the local store and the shared container the widget reads from are protected by Apple's Data Protection class.
• Least privilege — the App holds no push token and runs no server of its own, so there is no account, no credential and no back end of ours that could be breached. Location and Reminders are read through the system frameworks under permissions you can revoke at any moment.
• Keys & access — only the developer (Gustavo Amaro) can reach the CloudKit dashboard, and no personal data is visible there: private databases are not readable by the developer.
• Incident response — in the event of a breach we will investigate its scope, ship a fix through the App Store, and notify affected users and regulators within 72 hours where required.

Pomelo Widgets is rated 4+ and is suitable for all ages. It shows no advertising, contains no third-party tracking, and collects nothing that would identify a child: there is no account to make and no profile to fill in.

Two things are worth a parent's attention all the same. The Reminders layer draws whatever the reminders on that device say, and the weather layer needs location. Both are optional, both are refused or revoked in Settings, and the App works without either.

The App embeds no WebViews and sets no cookies. It uses no third-party analytics libraries; only Apple's optional crash-reporting framework may store technical device identifiers. This website sets no cookies either, and runs no analytics of any kind.

Your widgets reside in your iCloud Private Database, which Apple may replicate across its global data centres. Apple relies on Standard Contractual Clauses for transfers from the EEA/UK/Switzerland.

The one other transfer is the location sent to Apple's WeatherKit, which may be served from a data centre outside your country. It is encrypted in transit, is not tied to an account of ours, and is not stored once the reading has been returned.

The privacy practices behind Pomelo Widgets are reviewed on every App Store submission or sooner if required by law. The developer continuously monitors platform-security updates and applies patches promptly.

If you have any questions about this Policy or your data, please e-mail info@gustavoamaro.com. We commit to reply within three (3) days.