Privacy Policy

Focuser ("we," "us," or "our") operates the website at lifefocuser.com and the Focuser mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Focuser has no ads, no ad tracking, and no data monetization. We do not sell, rent, or share your personal information with advertisers or data brokers. Our sole source of revenue is subscriptions.

By using Focuser, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Account Information

When you create an account, we collect:

• Name — your full name
• Email address — used for authentication, account activation, password resets, and service communications
• Password — stored as a one-way cryptographic hash (bcrypt); we never store or have access to your plaintext password
• Time zone — used to display dates and times correctly in the application

Content You Create

Focuser stores the content you create within the application, including checklist items, reminders, notes, stories, focuses, and any images you upload to stories. This content is yours and is stored solely to provide the Service to you.

Device and Session Information

When you access Focuser, we automatically collect:

• Device type — phone, tablet, or desktop
• Browser and operating system — parsed from your user agent string
• IP address — logged with each request for security and audit purposes
• App version — when using the mobile application

Usage Data

We log API requests and page visits, including the controller, action, HTTP method, response status, and request duration. This data is used for performance monitoring, debugging, and security auditing.

Payment Information

Payment processing is handled entirely by Stripe. We store a Stripe customer identifier to associate your account with your subscription. We do not store credit card numbers, bank account details, or other payment credentials on our servers.

Focuser uses the following cookies:

• Session cookie — maintains your authenticated session while using the application
• User ID cookie — an encrypted cookie that enables persistent login ("remember me") functionality, expires after one year
• Remember token — a secure token paired with the user ID cookie for persistent authentication, expires after one year
• Theme preference — stores your selected visual theme, expires after one year

All cookies are set with SameSite=Lax protection. The user ID cookie is encrypted. Focuser does not use advertising cookies, retargeting pixels, fingerprinting, or any form of cross-site tracking. No cookie data is shared with advertisers or third-party ad networks.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Process subscription payments through Stripe
• Send transactional emails (account activation, password resets)
• Monitor application performance and diagnose technical issues
• Protect against unauthorized access and security threats
• Analyze aggregate usage patterns to improve the Service

We do not sell your personal information to third parties. We do not use your data for advertising.

We share data with the following third-party service providers, each of which has its own privacy policy:

Stripe

We use Stripe to process payments and manage subscriptions. When you subscribe or make a payment, Stripe receives your payment details directly. We store only a Stripe customer identifier on our servers.

SendGrid

We use SendGrid (Twilio) to deliver transactional emails such as account activation and password reset messages. SendGrid receives your email address and the content of those emails.

Cloudflare

We use Cloudflare R2 for file storage (such as images you upload to stories). Files are stored on Cloudflare's infrastructure.

Google Analytics

We use Google Analytics 4 to collect anonymous, aggregate data about how visitors use the public pages of our website. This includes page views, session duration, and general geographic region. Google Analytics uses cookies. You can opt out by installing the Google Analytics Opt-out Browser Add-on. Google's privacy policy is available at policies.google.com/privacy.

Anthropic (Claude API)

We use the Anthropic Claude API to generate productivity insights based on your focus metrics data. When you view Focus Metrics Insights, aggregated data about your satisfaction scores, effort distribution, and recurring item streaks for the selected time period is sent to Anthropic's API. This data does not include your name, email, or other identifying account information. Anthropic does not use API inputs to train their models.

Heroku (Salesforce)

The Service is hosted on Heroku, a cloud platform operated by Salesforce. Your data is processed and stored on Heroku's infrastructure.

We retain your account data and content for as long as your account is active. Request audit logs (IP addresses, request metadata) are retained for operational and security purposes.

When you delete your account, all associated data is permanently deleted, including your profile, all content (checklists, reminders, notes, stories, focuses), activity records, session records, uploaded files, and subscription information. This deletion is irreversible. For step-by-step instructions, see Delete Your Focuser Account.

You can delete your Focuser account and all associated data at any time. From inside the app, open the account menu, tap Settings, scroll to the Delete card, enter your password, and tap Delete Account. Deletion is immediate and irreversible.

If you can't access the app, email [email protected] from the address associated with your account. We respond to data-rights requests within 30 days.

Subscriptions billed through Stripe are cancelled automatically when your account is deleted. Subscriptions billed through Google Play must be cancelled separately through the Play Store — we cannot cancel Play Billing subscriptions on your behalf.

For the full list of what is deleted versus what is kept (such as Stripe's own transaction history), see Delete Your Focuser Account.

We implement the following measures to protect your data:

• All connections to the Service use TLS (HTTPS) encryption in transit
• Passwords are hashed using bcrypt with an appropriate cost factor
• Authentication tokens are generated using cryptographically secure random values
• Session cookies are encrypted and protected against replay attacks
• Payment data is handled entirely by Stripe and never touches our servers

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate personal data via your account settings
• Deletion — request deletion of your account and all associated data
• Portability — request your data in a portable format
• Objection — object to certain processing of your personal data

To exercise any of these rights, please contact us at the email address listed below. We will respond to your request within 30 days.

Focuser is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will promptly delete that information.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: [email protected]