Privacy Policy
Last Updated: September 2026
1. Information We Collect
- Account information: when you sign in with Apple or Google, we receive your email address, a display name and, if your provider supplies one, a profile photo.
- Focus data: your sessions, durations, streaks, coins, plants, tasks and tags, and your app settings. This is what we sync between your devices.
- Notification token: if you allow notifications, we store the push token your device issues, so that reminders and messages from friends can reach you. Nobody but our servers can read it.
We do not collect your contacts, your location, or anything you do outside the app. We do not use advertising identifiers, and the app contains no ads or third-party trackers.
2. Friends
The social features are optional. Until you open the Friends screen or add someone, no profile of yours exists on our servers and nothing about you is visible to anyone.
Once you do, we publish a separate profile that your friends can read. It contains only:
- your display name and profile photo;
- your level, prestige and current streak;
- your focus minutes for the current week;
- whether a focus session is running right now, and when it ends.
Your email address, your session history, your tasks, your settings and your notification token are never part of it. Friends cannot see them.
Invite codes. Your profile carries a six-character invite code, which is also what an invite link contains. Anyone who enters your code becomes your friend immediately, with no approval step, and can then see the profile described above. Treat the code as you would a phone number: share it deliberately. You can generate a new code at any time, which makes the previous one stop working, and you can remove or block a friend whenever you want.
Encouragements. Friends can send you a short, pre-written message that arrives as a notification. The sender never sees your notification token: our server delivers the message. There are limits on how many of these anyone can send per day and how often the same person can send them to you.
Reports. If you report someone, we store your account identifier, theirs, the reason you selected, and the display name and photo that were on their profile at that moment, so that we can review it. Reporting also blocks that person for you. Blocking is mutual: neither of you can see the other, and a blocked person cannot add you back with your code.
3. How We Use Your Information
- To provide the app and keep your garden, statistics and settings in sync across your devices.
- To show your friends the profile described above, and to deliver the notifications you have agreed to receive.
- To review reports of abuse and to enforce our Terms of Use.
- To fix problems and keep the service working.
We do not sell your data, share it with data brokers, or use it to target advertising. We do not use it to train machine-learning models.
4. Who Else Processes Your Data
- Google Firebase (Google Cloud) stores your account, your synced data and your friend profile, and runs the server code behind the social features.
- Expo push service passes notifications on to Apple for delivery to your device.
- Apple handles sign-in and, if you subscribe, the subscription itself. We never see your payment details.
These providers act on our instructions and may store data on servers outside your country, including in the United States.
5. Storage, Retention and Security
Your data is stored with Google Firebase and protected by access rules that let each person read only their own data and the friend profiles of people who have added them. Connections to our servers are encrypted.
We keep your data for as long as your account exists. Reports of abuse are kept after review for as long as we need them to prevent the same behaviour from returning. No system is perfectly secure, and we cannot guarantee absolute security.
6. Your Choices and Your Rights
- Delete your account from the app settings at any time. This removes your data, deletes your friend profile, removes you from every friend list you appear in, clears the block records on both sides and releases your invite code.
- Leave the social features without deleting your account, by removing your friends; your profile stops being visible to them.
- Turn notifications off in the app or in iOS settings.
- Request a copy of your data, or ask us to correct or delete something, by writing to support@focusaura.app.
Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to processing or to complain to your local data protection authority. We answer such requests free of charge.
7. Children
Focus Aura is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, write to us and we will delete it.
8. Changes to This Policy
We may update this policy. When we do, we post the new version on this page and change the date above. Significant changes to how we handle your data will also be announced in the app.
9. Contact Us
Questions about this policy, or about your data: support@focusaura.app.