Pomelo privacy policy
Last updated: 21 October 2026
This policy covers the Pomelo app for Windows and its website, pomeloapp.net. Pomelo processes your files on your PC and never uploads them, the app sends nothing to its developer, and the only connection the app makes itself is to the Microsoft Store.
Who is responsible
Pomelo is made by Andrea Loroni, an individual developer who lives in the United Kingdom. He is responsible for this policy and is the controller of the personal data he receives, described below. Contact: [email protected]
What Pomelo reads
To notice the drag gesture, Pomelo reads whether the primary mouse button is down and where the pointer is. When the button goes down, it reads the class name of the window under the pointer (the type name Windows gives every window of a kind, never its title or contents), to tell File Explorer and the desktop from other apps. Only from the moment the button goes down in File Explorer or on the desktop until it comes up does it read the keys mapped to its three tabs (Shift, Ctrl and Alt unless you changed them) and Esc, and whether the window in front is being moved or resized, which keeps the key hint hidden during a move. A press in any other app reads no keys, and Pomelo reads no keys other than the mapped three and Esc. Pomelo never records or stores the keys you press, the pointer position or window class names, and sends none of it anywhere.
Your files
When you drag files over the wheel, Pomelo reads their paths and asks Windows for a thumbnail to show. When you drop them on a wedge, Pomelo does the job you chose. Convert and Tools read the files and save the results as new files next to the originals, or in the fallback folder (Downloads\Pomelo unless you chose another) when Pomelo can't write next to the original or you chose to always use that folder. Your files are processed on your PC and are never uploaded.
While a job runs, Pomelo keeps a job file with the paths of its files, the operation and the fallback folder in the app's LocalState\jobs folder, and writes unfinished results to temporary files in the folder where they will be saved. It deletes both when the job ends, or the next time it starts if it was closed during a job.
Float shows the files on a shelf only while the shelf is open and saves nothing. Copy path puts the paths on the Windows clipboard, where Windows clipboard history keeps them and clipboard sync sends them to your other devices, if you turned those on. Share hands the files to the Windows share sheet and to the app you pick there, which then handles them under its own terms.
Log and settings
Pomelo keeps a diagnostic log in %LOCALAPPDATA%\Packages\andrealo.Pomelo_1treqmb6a3p46\LocalState\logs, in at most three files of 2 MB each; when they are full, the oldest entries are deleted. Each entry has a date and time and records one event: Pomelo starting, closing or being paused from the tray; the wheel opening, switching tab or closing (with the tab and the reason it closed, such as Esc); a window, card or tray menu command, including which button a card offered and your answer if you quit during a job; the operation you chose (such as converting images to PDF) and how many files it had, and how many files the Float shelf held when it opened and closed; how each job ended; error codes and the program steps that led to an error; timings; the Pomelo version; which Windows codecs were found and whether a sound output was found; whether start at sign-in is on; whether the unlock is owned and the result of a purchase. It never holds file names, paths or file contents, and it is never sent anywhere.
Your settings stay in the app's local storage: the key for each tab, the wheel size, the sound and key hint switches, the fallback folder and whether to always use it, how many free files you have used, whether the unlock is owned (kept so that Pomelo works offline) and whether the Welcome window has been shown. Windows keeps whether Pomelo starts at sign-in.
Network
The app itself connects only to the Microsoft Store, to check the licence, show the price and buy the unlock. Links you choose in Pomelo (Help, Privacy policy, Licence terms, libvips source code, the Store pages of codec extensions and Optional features) open in your browser, in the Microsoft Store app or in Windows Settings.
Purchases are handled by Microsoft. Pomelo learns the price, whether a purchase went through and whether the unlock is owned. It never learns who you are or how you paid.
What Microsoft handles
Microsoft runs Windows, the Microsoft Store and your Microsoft account, and handles their data under the Microsoft Privacy Statement at https://privacy.microsoft.com/privacystatement. For Pomelo this means:
- Microsoft records your download of Pomelo and your purchase of the unlock.
- If Pomelo crashes, Windows may send a crash report to Microsoft, according to your Windows diagnostic data settings.
- Pomelo is built on Microsoft's Windows App SDK, which may send usage data to Microsoft.
What the developer receives
The app sends nothing to the developer. He receives personal data only in these cases:
- Crash data. Through Partner Center, Microsoft may show the developer the details of a crash: the date, the Pomelo version, the device type and model, the Windows build and the program steps that led to the crash. For crashes on Windows Insider builds it may also offer a crash dump, which can contain part of what Pomelo had in memory, such as the paths of the files it was working on. The developer uses crash data only to find and fix bugs, shares it with nobody, and deletes any personal data in it within 30 days.
- Store reports. Partner Center also shows the developer totals of downloads, purchases, usage and ratings, which do not identify you, and the reviews you choose to publish in the Store.
- Your emails. If you write to the developer, he receives your email address and what you write, and uses them only to answer you. The emails are kept in his Gmail account, provided by Google, and deleted at the latest two years after the last message.
The developer handles this data on the basis of his legitimate interests in answering you and in keeping Pomelo and its website working and secure. Microsoft, Google and Cloudflare may process it outside the United Kingdom, under the safeguards that UK data protection law requires.
The website
pomeloapp.net is served by Cloudflare, which processes your IP address and browser details to deliver the pages and protect the site from attacks. Cloudflare shows the developer statistics about the visits, mostly as totals such as their number and country, and the details of requests it blocks as attacks; the developer uses them only to keep the site working. The website itself sets no cookies and has no analytics, ads or tracking; Cloudflare may set a strictly necessary security cookie if it has to check that a visitor is not a bot. If you turn the demo sound off or pick the light or dark theme, your browser's local storage remembers the choice, and it never leaves your browser.
How the data is protected
Everything Pomelo keeps (job files, the log and the settings) stays on your PC, in the app's own storage under your Windows account, which other standard accounts on the PC cannot read. The app sends none of it anywhere, so there is no copy on a server to protect. Job files exist only while a job runs, and the log holds no file names or paths. Crash data stays in Partner Center, behind the developer's Microsoft account, or on his own PC while he works on a fix.
Your choices
- In Pomelo's Settings you can turn start at sign-in, the sound and the key hint on or off.
- You can delete the log files at any time; Pomelo starts a new file with its next entry.
- Uninstalling Pomelo removes its job files, log and settings. The files Pomelo made next to your originals or in the fallback folder stay where they are.
- Crash reports and other diagnostic data follow your Windows settings, in Windows Settings > Privacy & security > Diagnostics & feedback.
Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask the developer for a copy of the personal data he holds about you, and ask him to correct it, delete it, restrict its use or stop using it. If you are in the European Union or the European Economic Area, the EU General Data Protection Regulation gives you the same rights. The developer holds little: the emails you sent him, and crash data for up to 30 days. Write to [email protected] to use a right or to complain about how your data is handled. The developer acknowledges complaints within 30 days and answers requests within one month.
You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at https://ico.org.uk/make-a-complaint/. In the European Union or the European Economic Area you can complain to the data protection authority of the country where you live or work.
For data Microsoft holds about your account, your purchases or your diagnostic data, contact Microsoft as the Microsoft Privacy Statement explains.
Changes to this policy
A new version of this policy is published at this address with a new date. If a version of Pomelo starts to read, keep or send anything new, this policy is updated before that version is released.