Privacy Policy

1. Who we are

Focusr is a focus and productivity application that helps you manage tasks, plan work, and run focused work sessions. The data controller for the personal information described in this policy is the operator of Focusr. You can contact us at support@focusr.co.

2. Information we collect

Account information

When you create an account we collect your email address and a password (if you sign up with email and password). If you sign in with Google we receive your email address, basic profile information (including your name and profile picture URL), and a unique account identifier from Google. We do not ask you to enter a name when you sign up; a name is stored on your account only if it was supplied by Google when you signed in. We also record which sign-up method you used and whether your account was created from the web or iOS app.

Content you create

We store the content you create in the Service, including tasks, projects, life areas, contexts ("types of work"), routines, availability blocks, schedules, focus session history, and any answers you provide during onboarding. If you use the in-app AI assistant or link your Telegram account, we store the messages exchanged with the assistant so that conversations can be continued.

Subscription and payment information

We offer paid subscriptions. Payments on the web are processed by Stripe. Payments in the iOS app are processed by Apple via the App Store. We do not receive or store your full card number or other payment credentials. We do receive and store subscription metadata such as your subscription status, plan, renewal date, and a customer or transaction identifier issued by the payment processor. Stripe receives your email address and (where provided) name in order to process the transaction.

Device and usage information

When you use the Service we and our service providers automatically collect:

• Log and diagnostic data, including IP address, browser or device type, operating system, referring pages, and timestamps.
• On the web only — error and crash reports, performance traces, product analytics events describing how you interact with the site (features used and pages viewed), and session recordings of your interactions (mouse movements, clicks, page navigation) where you have consented to non-essential cookies. We do not record keystrokes in form fields and known sensitive fields are masked.
• On iOS — a Firebase Cloud Messaging push notification token if you enable notifications, and a Firebase installation identifier. The iOS app does not include a crash-reporting or performance-monitoring SDK, and does not record your screen or session.
• On both platforms — our feature-flag provider receives your account identifier together with a randomly generated identifier that persists for as long as the app is installed (or the browser storage is retained), plus your device model, manufacturer, operating system and version, locale, and application version. This is used to determine which features are enabled for your account and to record which feature variations were shown to you.

Communications

If you contact us by email we keep a copy of the messages and our responses so we can support you and improve the Service.

iOS app — App Store privacy disclosure

Apple requires us to declare the categories of data the iOS app collects. The categories we declare are: name, email address, other user content, user ID, device ID, purchases, product interaction, other diagnostic data, and other data (your onboarding answers). All of these are linked to your identity, and none of them are used to track you across apps or websites owned by other companies.

The iOS app does not collect or access any of the following: your location, contacts, calendar or reminders, photos or videos, microphone or audio recordings, health or fitness data, browsing history, in-app search history, or payment card details. It contains no advertising SDK and does not collect advertising identifiers.

Purchases made in the iOS app are handled by Apple. We receive a transaction identifier, the product purchased, and your subscription status; we never receive your payment card details.

3. How we use your information

We use the information we collect to:

• Provide, maintain, and operate the Service and your account.
• Generate suggested tasks, schedules, and assistant responses where you use AI features.
• Send transactional emails such as sign-in links and email verification.
• Send push notifications relating to your tasks and focus sessions, where you have enabled them.
• Process payments and manage your subscription.
• Diagnose problems, monitor performance, and improve the Service.
• Measure the effectiveness of our marketing on our website, where you have consented. We do not show advertising in the Service.
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with legal obligations.

4. Legal bases (UK / EEA users)

If you are in the UK, EEA, or Switzerland, we rely on the following legal bases under the UK GDPR and EU GDPR:

• Performance of a contract — to provide the Service and your account.
• Legitimate interests — to keep the Service secure, prevent fraud, debug issues, and improve the product.
• Consent — for non-essential cookies, analytics, advertising, session replay, and push notifications. You can withdraw consent at any time.
• Legal obligation — to comply with applicable law and respond to lawful requests.

5. How we share your information

We do not sell your personal information. We share information only as described below:

Service providers (sub-processors)

We rely on the following third parties to operate the Service. They process personal data on our behalf, under contractual data-protection terms:

• Google Firebase (Authentication, Firestore database, Cloud Functions, Cloud Messaging) — hosting, authentication, and storage of your account and content.
• Google Sign-In — if you choose to sign in with Google.
• Stripe — payment processing for web subscriptions.
• Apple — payment processing and subscription management for in-app purchases on iOS, and delivery of push notifications via APNs.
• OpenAI — generating responses when you use the conversational assistant, including via a linked Telegram account. The content of those conversations, and the task and reminder data needed to answer them, is sent to OpenAI to generate a response. The iOS app does not include the assistant, and does not send your task content to OpenAI or any other AI provider.
• Telegram — if you choose to link a Telegram account to chat with the assistant, message content is exchanged with Telegram's bot platform.
• Sentry — error monitoring, performance monitoring, and session replay. Used on the website only; it is not included in the iOS app.
• Hotjar — website product analytics and heatmaps, where consented. Not included in the iOS app.
• Google Ads — measurement of advertising effectiveness on the website, where consented. Not included in the iOS app. We do not use advertising identifiers, and we do not show advertising in the app or on the website.
• LaunchDarkly — feature flag delivery. We send your account identifier, a persistent randomly generated device identifier, and basic device and application details, so that the right features are shown to your account. Used on both the website and the iOS app.
• BetterStack (Logtail) — collection of application logs.
• Silktide — cookie consent management on the web.

Legal and safety

We may disclose information if we believe in good faith that disclosure is required to comply with applicable law, lawful requests from public authorities, to enforce our Terms of Service, or to protect the rights, property, or safety of Focusr, our users, or others.

Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you (for example, by email or a prominent notice on the Service) of any change in ownership or material change in how your information is used.

6. International data transfers

Focusr and several of our service providers operate outside the UK and the EEA, primarily in the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, or on the recipient's certification under an approved data-transfer framework.

7. Cookies and similar technologies

On the web we use cookies and similar technologies for three purposes:

• Necessary — required for authentication, security, and core functionality. These cannot be disabled.
• Analytics — to measure how the Service is used, set only with your consent.
• Advertising — to measure marketing campaigns, set only with your consent.

You can manage your preferences at any time using the cookie preferences control available on the website. The iOS app does not use web cookies and contains no advertising or tracking SDKs. It does include Firebase and LaunchDarkly, which set the device identifiers described above. The app does not request permission to track you across other companies' apps and websites, and does not use the device advertising identifier.

8. Data retention

We retain your account information and content for as long as your account is active. Completed tasks may be removed automatically a short time after they are completed as part of normal housekeeping. Diagnostic logs and analytics events are retained for a limited period (typically up to 14 months). Subscription records and transactional data are retained for as long as required by law (for example, to comply with tax and accounting obligations). When you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it.

9. Your rights

Depending on where you live, you may have the following rights with respect to your personal data:

• Access a copy of the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your personal data.
• Object to or restrict certain types of processing.
• Receive a portable copy of certain data you have provided.
• Withdraw consent where we rely on consent.
• Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk).

To exercise any of these rights, email support@focusr.co from the address associated with your account. We may need to verify your identity before responding.

10. Account deletion

You can request deletion of your account and associated data at any time by emailing support@focusr.co from the email address you signed up with. We will delete your account and personal data within a reasonable period, subject to limited records we are required to keep (for example, billing records). Cancelling a paid subscription does not delete your account; please contact us if you also want your data removed.

11. Security

We take reasonable technical and organisational measures to protect your personal data, including encryption of data in transit, access controls, and the use of reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

Focusr is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material we will also notify you through the Service or by email.

14. Contact

If you have any questions about this Privacy Policy or our handling of your personal data, please contact us at support@focusr.co.