Privacy policy for PillowPause

Last updated: 21 October 2026

This policy applies to the PillowPause Android app (app.pillowpause.android) and this website.

1. Controller

The controller is Martin Nahrwold. The postal address and contact details are in the legal notice.

2. Data in the app

PillowPause needs no app account and contains no advertising or operator-run usage analytics. Timers, settings and media information are not sent to us. The app uses Google Play Billing for the optional Pro purchase and its restoration. The timer also works without an internet connection.

Timers, selected clock times, settings, permission status and the latest execution result are processed on your device. Settings, timer state and execution results are stored in private app storage. Android alarms and boot receivers support scheduled timers and their recovery after a restart.

Depending on the features you choose, PillowPause uses exact alarms and optional notifications. Optional notification access authorizes control of active media sessions. PillowPause reads their playback state to pause media; its notification listener does not read, store or transmit message contents. It does not request camera, microphone, contacts or location access.

After an upgrade, the app cancels old weekly schedules and removes its own previous Do Not Disturb rule. Stored rule identifiers are used only for this cleanup. Existing system settings and rules belonging to other apps are not changed.

The separate reviewer access stores an encrypted local entitlement. It does not create or change a Google Play purchase. The review code itself is not stored.

Android cloud backup and device transfer of app data are disabled. Local data remains until replaced or cleared through Android app settings. Uninstalling removes private app storage. Technical errors may appear in the local Android system log; PillowPause has no service that uploads error reports.

3. Google Play

When you open the app or restore a purchase, PillowPause checks Google Play for Pro ownership. Google processes account, purchase and technical data for its store and payments. The billing library starts when the app is opened, so its technical diagnostic and connection data may be sent to Google even without a purchase action. PillowPause verifies the signed purchase receipt and acknowledges completed purchases to Google Play. Receipts and purchase tokens are processed temporarily in memory for this purpose; they are not logged or sent to a server of our own. The app stores only whether Pro is unlocked. Payment and card details are not stored in the app.

A lost connection does not remove the last confirmed entitlement. A later successful Play query updates it, for example after revocation. After reinstalling, a purchase can be restored with the same Google Play account. Processing to provide purchased features is based on performance of the contract under Article 6(1)(b) GDPR. Google’s store and payment services are covered by the Google Privacy Policy.

4. Website and hosting

This website uses Google's Firebase Hosting. When a page is requested, the service processes connection data, particularly IP addresses, to deliver the website, detect abuse and analyse service usage. Google states that IP data is retained for a few months.

The website itself uses no cookies or browser storage and contains no analytics or advertising scripts, external fonts or embedded social-media content. Connections use HTTPS. Firebase Hosting for this website does not receive local app data.

The legal basis is our legitimate interest in a secure, accessible website under Article 6(1)(f) GDPR. See Firebase privacy information and the data processing terms.

5. Contact enquiries

When you email us, we process your sender address, message and any attachments through our email provider to handle the enquiry. The basis is Article 6(1)(b) GDPR for contractual matters, or our legitimate interest in responding under Article 6(1)(f) for other enquiries.

Correspondence is retained for as long as needed to handle and document resolution of the enquiry. Statutory retention duties remain applicable under Article 6(1)(c) GDPR.

6. Service providers and international processing

Recipients are the Google services described above and our email provider. Google can use affiliated companies and other service providers. The linked data processing terms apply to Firebase.

Google may process data outside the European Economic Area, particularly in the United States. Google describes safeguards including the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses. Details are available in Google's data transfer information and the Firebase terms.

7. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability.

Right to object: You can object to processing based on legitimate interests on grounds relating to your particular situation.

You can complain to a data protection supervisory authority, for example where you live or work. For privacy enquiries, use the contact details in the legal notice.