Is Tomato safe?

Tomato is a minimalist Pomodoro timer for Android based on Material 3 Expressive. Tomato is fully free and open-source, forever. You can find the source code and report bugs or suggest features at https://github.com/nsh07/Tomato Features: - Simple, minimalist UI based on the latest Material 3 Expressive guidelines - Detailed statistics of work/study times in an easy-to-understand manner - Stats f…

Developer: Nishant Mishra
Category: Time
Earliest archived version: 25 Mar 2026
License: GPL-3.0-only (per IzzyOnDroid metadata)

02 / Release notes

Release notes from IzzyOnDroid

19 Sept 2026

2.0.1

New features: - Topics: create a topic for anything you focus on and give it its own color and shape - Switch between topics right from the timer screen, and add new ones without leaving it - Every topic remembers its own focus and break durations - Add, rename and delete topics from settings…

Full notes →

25 Mar 2026

1.8.5

New features: - New timer widget - Run a flow state timer using the new Infinite Focus mode. Press and hold the timer clock to get started. - You can now start the timer from a quick settings tile - Refreshed widgets that look consistent with the app Improvements: - Stats screen animations are now…

Full notes →

03 / Package identity

Technical fingerprint

Application IDorg.nsh07.pomodoro

Latest APK SHA-25636aa0e28055f6fadc8c634d2b94b024acc6ab52c2944f62f97227ccad5317892

Signing certificate07:BE:F3:05:81:BA:EE:8F:45:EC:93:E4:7E:E6:8E:F2:08:74:E5:0E:F5:70:9C:78:B2:EE:67:AC:86:BE:4C:3D

MIN ANDROID26TARGET36ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

04 / History

Archive history

2 versions in WIKI archive: earliest 1.8.5 (25 Mar 2026), latest 2.0.1 (19 Sept 2026).

Permissions changed between 1.8.5 and 2.0.1: added android.permission.SCHEDULE_EXACT_ALARM, android.permission.USE_EXACT_ALARM.

05 / Version archive

Documented releases

2 TOTAL

VersionReleasedAndroidArchitecture

2.0.119 Sept 202626+arm64-v8a, armeabi-v7a, x86, x86_64→1.8.525 Mar 202626+arm64-v8a, armeabi-v7a, x86, x86_64→

06 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceBinary repo · izzyondroid

Permissions12 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_NOTIFICATION_POLICY android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_SPECIAL_USE android.permission.POST_NOTIFICATIONS android.permission.POST_PROMOTED_NOTIFICATIONS android.permission.RECEIVE_BOOT_COMPLETED android.permission.SCHEDULE_EXACT_ALARM android.permission.USE_EXACT_ALARM android.permission.VIBRATE android.permission.WAKE_LOCK org.nsh07.pomodoro.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

07 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗