TO CONFIRM: legal review
Pomelo privacy policy
Last updated: TO CONFIRM: publication date
What Pomelo reads. To notice the drag gesture, Pomelo reads whether the primary mouse button is down and where the pointer is. When the button goes down, it reads the class name of the window under the pointer (the type name Windows gives every window of a kind, never its title or contents), to tell File Explorer and the desktop from other apps. Only from the moment the button goes down in File Explorer or on the desktop until it comes up does it read the keys mapped to its three tabs (Shift, Ctrl and Alt unless you changed them) and Esc. A press in any other app reads no keys, and Pomelo reads no keys other than the mapped three and Esc. Pomelo never records or stores the keys you press, the pointer position or window class names, and sends none of it anywhere. The diagnostic log notes only when the wheel opens, switches tab or closes, with the tab and the reason it closed (for example Esc).
Your files
Your files are processed on your PC and are never uploaded. While a job runs, a job file listing its file paths is kept in the app's LocalState\jobs folder. Pomelo deletes it when the job ends.
Log and settings
The diagnostic log is kept in LocalState\logs, in at most three files of 2 MB. It holds operations, file extensions, error codes and timings, and each time the wheel opens, switches tab or closes, with the tab and the reason it closed. It never holds file names or paths, and it is never sent.
Your settings (key mapping, fallback folder, free file counter and cached unlock state) stay in the app's local storage. Uninstalling Pomelo removes the job files, the log and the settings. The files Pomelo made next to your originals stay where they are.
Network
Pomelo itself connects only to the Microsoft Store, to check the licence, show the price and buy the unlock. Links you choose (Help, and the Store pages for codec extensions) open in your browser or in the Store.
Purchases are handled by Microsoft under the Microsoft Privacy Statement. Pomelo learns only whether the unlock is owned.
Share
Share hands the files you dropped to the Windows share sheet and to the app you pick there.
Crash reports
If Pomelo crashes, Windows may send a crash report to Microsoft according to your Windows diagnostic data settings. Microsoft shows the developer aggregated reports.
Accounts, ads and tracking
Pomelo has no accounts, ads, analytics or tracking.
How the data is protected
Everything Pomelo keeps (job files, the log and the settings) stays on your PC, in the app's own storage under your Windows account, which other standard accounts on the PC cannot read. None of it is sent anywhere, so there is no copy on a server to protect. Job files exist only while a job runs, and the log holds no file names or paths.
Your choices
- Settings turns start at sign-in, the sound and the key hint on or off.
- You can delete the log files at any time; Pomelo starts a new file with its next entry.
- Uninstalling Pomelo removes its job files, log and settings.
- Crash reports follow your Windows diagnostic data settings, in Windows Settings > Privacy & security > Diagnostics & feedback.
Who is responsible
Pomelo is made by Andrea Loroni, an individual developer in Italy, who is responsible for this policy. The developer receives no personal data from Pomelo: the app sends nothing to the developer, and the Store purchase is handled by Microsoft.
Your rights
If you are in the European Union, the General Data Protection Regulation gives you the right to ask what personal data about you is held, and to have it corrected or deleted. Pomelo's developer holds none, but you can write to the contact below with any question. Microsoft handles purchase data under the Microsoft Privacy Statement. You can also complain to a data protection authority; in Italy it is the Garante per la protezione dei dati personali.
Changes to this policy
A new version of this policy is published at this address with a new date.