Privacy Policy
Quick Summary (TL;DR)
| Task Data | Stored locally on your device. We cannot see or access your tasks. |
| AI Features | Task text is sent to our AI provider (xAI) for processing and immediately discarded. It is not used to train their models. |
| Accounts | No email or social login required. Your "account" is your device. |
| Tracking | We use anonymous analytics (TelemetryDeck) to improve the app. No personal data is tracked. |
| Data Selling | We never sell your data. |
1. Introduction
Welcome to Focus One. We believe that productivity should not come at the cost of privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application (the "App").
By downloading or using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.
We operate as a Privacy-First service. This means:
- Your Tasks are Yours: We designed the App to store your personal task data locally on your device.
- No Accounts Required: You can use the App without creating an account or sharing your email.
- Transparency: We explicitly list every service we use.
3. Information We Collect
We adhere to the principle of Data Minimization. We only collect what is strictly necessary to provide the App's features.
3.1 Information You Create (Stored Locally)
The following data is stored only on your device (via Apple's SwiftData) and is not transmitted to our servers or accessible by us:
- Task Content: Titles, priorities, scheduled dates, and completion status.
- Subtasks: Breakdown items associated with parent tasks.
- Focus History: Session durations and counts.
- Preferences: Theme settings, haptic preferences, and daily goal targets.
3.2 Information Sent to AI Providers (Ephemeral)
To provide features like "Brain Dump" prioritization and "Task Breakdown," we transmit specific text data to our AI provider.
- Data Sent: Task titles and raw "Brain Dump" text.
- Processing: Data is processed in real-time via encrypted HTTPS connection.
- Retention: Zero. Data is not stored by us or our AI provider after the response is generated.
- No Training: Your data is NOT used to train AI models.
3.3 Information Collected Automatically (Analytics & Subscriptions)
We use privacy-centric third-party services to keep the app running.
A. Subscriptions (RevenueCat)
To manage your "Pro" subscription, we process:
- Anonymous App User ID: A random identifier generated by RevenueCat.
- Purchase History: Subscription status, renewal dates, and transaction receipts.
- No Personal Info: RevenueCat does not receive your name or email.
B. Usage Analytics (TelemetryDeck)
We use TelemetryDeck to understand how the App is used without tracking you.
- Data Collected: Feature usage counts (e.g., "Brain Dump used"), screen views, and app performance metrics.
- Privacy Protections:
- No IDFAs or Advertising IDs.
- IP addresses are anonymized and not stored.
- Data is aggregated and cannot be linked back to you personally.
4. How We Use Your Information
We use the limited information we collect for specific purposes:
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Provide Core Features | Local task data (on device) | Contract |
| AI Intelligence | Task text (ephemeral) | Contract |
| Manage Subscriptions | Purchase receipts, Anonymous ID | Contract |
| Improve the App | Anonymous usage stats | Legitimate Interest |
| Legal Compliance | Purchase records (tax/accounting) | Legal Obligation |
We DO NOT use your data to:
- Target advertisements.
- Train AI models.
- Build user profiles.
- Sell to data brokers or third parties.
5. AI-Powered Features (Explicit Disclosure)
Focus One uses artificial intelligence to help you prioritize and break down tasks.
- Provider: We utilize xAI to power AI features.
- Process: When you use "Brain Dump" or "Breakdown," your text is securely transmitted via HTTPS.
- Data Usage: The AI analyzes the text to suggest priorities or sub-tasks.
- No Training: We have configured our integration to ensure your data is NOT used to train xAI's models.
- User Choice: AI features are triggered only by your explicit action (e.g., tapping "Prioritize" or "Breakdown").
- No Persistence: Neither we nor xAI retain your task text after processing.
6. Information Sharing & Disclosure
We do not sell, trade, or rent your personal information.
We share data only with the following service providers, solely to operate the App:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Backend infrastructure | Task text (ephemeral) |
| RevenueCat | In-app purchase verification | Anonymous ID, purchase receipts |
| TelemetryDeck | Privacy-focused analytics | Anonymous usage events |
| xAI | AI processing engine | Task text (ephemeral) |
Legal Requirements: We may disclose information if required by law, court order, subpoena, or to protect our rights, property, or safety.
7. International Data Transfers
The App is operated from the European Economic Area (EEA). Some of our service providers operate in the United States.
If you are located outside these regions, please be aware that information we collect may be transferred to and processed in the United States.
Transfer Safeguards:
- We ensure valid transfer mechanisms (such as Standard Contractual Clauses or EU-US Data Privacy Framework certification) are in place where required by GDPR.
- By using the App, you consent to the transfer of your information to jurisdictions where our service providers operate.
8. Data Retention
We retain data only as long as necessary to provide the service.
| Data Category | Retention Period |
|---|---|
| Task Data | Indefinite (On Device). Controlled by you. Deleted when app is uninstalled. |
| AI Request Data | Ephemeral. Deleted immediately after processing. |
| Analytics | 24 Months. Aggregated data is retained to track long-term app trends. |
| Subscription Info | Lifetime of App. Needed to restore your purchases across devices. |
9. Your Rights & Choices
Regardless of where you live, we grant you these rights:
9.1 Right to Access & Portability
Since your task data is stored locally on your device, you already possess it.
9.2 Right to Deletion ("Right to be Forgotten")
- Local Data: Simply delete the App to remove all task data from your device.
- Cloud Data: Since we do not store user accounts, we generally cannot identify "your" data on our servers (because it's anonymized).
9.3 Right to Limit Processing
- AI Features: You can choose not to use the AI features (Brain Dump/Breakdown) at any time. They are opt-in.
- Analytics: Analytics are anonymous by design and cannot be opted out of, as they do not identify you personally.
9.4 GDPR Specifics (European Union)
If you are in the EU/EEA, you have additional rights including:
- Right to rectification of inaccurate data.
- Right to object to processing based on legitimate interest.
- Right to lodge a complaint with your local data protection authority.
9.5 CCPA Specifics (California)
- We Do Not Sell or Share Personal Information as defined by the CCPA.
- Right to Know: You have the right to request details about the categories of personal information collected (listed in Section 3).
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
10. Data Security
We implement security measures designed to protect your data:
- Encryption at Rest: iOS encrypts your local device storage automatically.
- Encryption in Transit: All communication with our backend and AI providers is encrypted via TLS 1.2+.
- No Logs: We do not log the contents of your tasks on our servers.
- Minimal Data: We collect only what is necessary, reducing attack surface.
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we strive to use commercially acceptable means to protect your information.
11. Do Not Track
Some browsers have a "Do Not Track" (DNT) feature. Because we do not track individual users or collect personal identifiers, we treat all users as if they have DNT enabled. We do not respond to DNT signals differently because our privacy practices already exceed what DNT requests.
12. Children's Privacy
Focus One is not intended for use by children under the age of 13 (or 16 in the EEA).
As described throughout this policy, Focus One is designed as a local-first app that does not collect or store personal information from any user. All task data remains on your device. The AI features transmit only anonymized task text, not personal identifiers.
If you believe a child is using the App inappropriately, please contact us at support@focusone.io.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes:
- Material Changes: We will update the "Last Updated" date at the top of this policy.
- Continued Use: Your continued use of the App after changes constitutes acceptance of the updated policy.
- Review: We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
- Email: support@focusone.io
- Developer: Focus One
Data Controller: Focus One is the data controller for the purposes of GDPR.
Response Time: We aim to respond to all privacy-related requests within 30 days.
This Privacy Policy was last reviewed on January 1, 2026.
Focus One