Privacy Policy

Focus App ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to our website (focusapp.io), our web app, and our mobile/desktop applications. By using any of these, you agree to the practices described here.

Account Data: When you register, we collect your name, email address, and a hashed password.

Usage Data: We collect information about how you use Focus App — session logs, task interactions, feature usage, and analytics events. This data is pseudonymised and used only to improve the Service.

Device & Technical Data: IP addresses, browser type, OS version, device identifiers, and crash reports. Collected automatically when you access the Service.

Payment Data: Billing information is collected and stored by our payment processor, Stripe. We only store the last four digits of your card and billing address for invoice purposes.

Content You Create: Tasks, session notes, and settings you configure within the app. You own this data.

We use your data to:

• Provide and operate the Service • Personalise your experience (AI scoring, recommendations) • Process payments and send transactional emails (receipts, alerts) • Send product updates and changelog notifications (you can unsubscribe at any time) • Detect and prevent fraud, abuse, and security threats • Comply with legal obligations

We never sell your personal data to third parties. We do not use your data to train AI models without your explicit consent.

If you are located in the European Economic Area (EEA), our legal bases for processing your data are:

• Contract performance: Providing the Service you signed up for • Legitimate interests: Improving the Service, fraud prevention, security • Consent: Marketing emails (you can withdraw consent at any time) • Legal obligation: Complying with applicable laws

We use essential cookies for authentication and session management. We also use analytics cookies (privacy-preserving, no cross-site tracking) to understand usage patterns.

You can manage your cookie preferences at any time from our cookie banner or your browser settings. Disabling essential cookies will affect the functionality of the Service.

We only share your data with:

• Stripe (payment processing) • Supabase (database hosting, located in EU data centres) • Resend / email providers (transactional emails only) • Vercel (web hosting and CDN)

All sub-processors are contractually bound to handle your data in compliance with GDPR. We do not share data with advertising networks.

We retain your account data for as long as your account is active. If you delete your account, your personal data is purged within 30 days. Anonymised usage statistics may be retained for product analytics purposes.

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you • Correct inaccurate data • Request deletion ("right to be forgotten") • Restrict or object to certain processing • Data portability (export your data in JSON/CSV format from Settings → Export) • Withdraw consent at any time

To exercise any of these rights, email privacy@focusapp.io. We respond to all requests within 30 days.

We protect your data using TLS encryption in transit and AES-256 at rest. Access to production databases is restricted to authorised personnel with MFA enabled.

In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by GDPR.

Focus App is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice at least 14 days before they take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy questions or to exercise your rights:

Data Protection Contact: privacy@focusapp.io Focus App, London, United Kingdom

If you are in the EEA and have an unresolved concern, you have the right to lodge a complaint with your local supervisory authority.