Privacy Policy

1. Overview

Focuz is a focus timer and app-blocking application operated by Coderiftz ("Coderiftz," "we," "us," or "our"), based in India. Coderiftz is the data controller responsible for the personal information described in this policy. This Privacy Policy explains what information we collect when you use the Focuz mobile application (the "App"), how we use it, who we share it with, and the choices available to you.

Our design principle is simple: collect only what's needed to run the features you actually use. There is no advertising in Focuz and we never sell your personal information.

By creating an account or using the App, you agree to the collection and use of information in accordance with this policy. If you don't agree, please don't use the App, or use it only in guest/local mode where account features are unavailable.

2. Information we collect

2.1 Account information

When you create a Focuz account, we collect:

Name — the display name you provide, or the name associated with your Google account if you sign in with Google.
Email address — used for authentication, account recovery, and important service communications.
Password — if you sign up with email/password, your password is hashed and salted by our authentication provider (Supabase Auth). We never see or store your password in plain text.
Profile photo — if you choose to set one, either selected from your device gallery or captured with your camera, or imported from your Google account. Setting a profile photo is entirely optional.
Account timestamps — when your account was created and last updated.

If you sign in with Google, we receive your name, email address, and profile photo from Google in accordance with the permissions you grant during that sign-in flow. We do not receive your Google password.

2.2 Focus & activity data

To power streaks, the Focuz Coin balance, performance scores, and leaderboards, we sync a limited set of session-level statistics to our servers:

Focus session start/end times and durations (Pomodoro and standard sessions).
Total focus minutes, current and longest streaks, and Focuz Coin balance.
A performance score derived from your session consistency.
Focus goal preferences you set (e.g. target session length).

We do not upload a list of the individual apps you opened, blocked, or attempted to open during a session. That detection happens entirely on your device using Android's Usage Access API, and is used only to enforce blocking locally — it is never transmitted to our servers.

2.3 Social & leaderboard data

If you use friends or leaderboard features, the following becomes visible to other users you're connected to, or to all users on the global leaderboard:

Your display name and profile photo.
Your total Focuz Coin balance, current streak, and global/friend rank.
Friend requests you send or receive, and the resulting friend connections.

Your email address and password are never shown to other users.

2.4 Device & diagnostic information

To keep the App reliable, we may automatically receive limited technical data: device model, operating system version, app version, and crash/error diagnostics. This is used solely to fix bugs and is not linked to advertising profiles.

2.5 Push notification tokens

If you enable notifications, your device is issued a push token (via Firebase Cloud Messaging) so we can deliver session reminders and social notifications (e.g. a friend request) that you've opted into. Focuz does not send marketing or re-engagement notifications designed purely to bring you back into the App — see our stance on attention.

3. Device permissions, explained

Focuz requests the following Android permissions. Each exists to power a specific, visible feature — never for data harvesting.

Permission	What it's for
Usage Access PACKAGE_USAGE_STATS	Detects which app is in the foreground so Focuz can block distracting apps during a session. Processed entirely on-device; never uploaded.
Display over other apps SYSTEM_ALERT_WINDOW	Lets the blocking screen appear immediately when you open a blocked app during a session.
Query all packages QUERY_ALL_PACKAGES	Lists your installed apps so you can choose which ones to block or whitelist. This list stays on your device.
Foreground service	Keeps an active focus session and its blocking logic running reliably while the App is backgrounded.
Notifications POST_NOTIFICATIONS	Shows the active-session countdown notification and any reminders/social alerts you've opted into.
Exact alarms SCHEDULE_EXACT_ALARM	Ensures session timers and scheduled reminders fire at the precise time.
Battery optimization exemption	Prevents the operating system from killing an active session's background service. You can decline this and start sessions anyway.
Camera & Photos/Gallery	Only used if you choose to set a profile photo. Never accessed otherwise.
Boot completed	Lets scheduled reminders survive a device restart.

You can review or revoke any of these permissions at any time from your device's system settings. Revoking a permission may disable the corresponding feature (for example, revoking Usage Access disables app blocking during sessions).

4. How we use information

To create and maintain your account and authenticate your sign-ins.
To operate core features: focus sessions, streaks, Focuz Coin, performance scoring, Pomodoro cycles, leaderboards, and friends.
To send session reminders and social notifications you've opted into.
To diagnose crashes, fix bugs, and improve app performance and reliability.
To respond to support requests you send us.
To detect, investigate, and prevent abuse, fraud, or violations of our Terms of Service.

We do not use your data to build advertising profiles, and we do not run third-party ad networks inside the App.

We do not sell your personal information. We share limited data only with the service providers that make the App work:

Supabase — our authentication and database provider, used to store account information and focus/leaderboard data described above.
Google Sign-In — used only if you choose to sign in with your Google account.
Firebase Cloud Messaging — used to deliver push notifications you've opted into.

These providers process data on our behalf under their own security and confidentiality obligations, and are not permitted to use your information for their own marketing purposes. We may also disclose information if required by law, to protect the rights and safety of Focuz or our users, or in connection with a merger, acquisition, or sale of assets — in which case you'll be notified via the App or email before your information becomes subject to a different privacy policy.

6. Storage & security

Account and session data described in Section 2 is stored on Supabase's cloud infrastructure and transmitted using industry-standard TLS encryption in transit. Passwords are hashed using industry-standard algorithms and are never stored or transmitted in plain text. Usage-access data used for blocking is processed and stored locally on your device and is not part of any server-side database.

No method of electronic storage or transmission is 100% secure. While we work to protect your information, we cannot guarantee absolute security.

7. Data retention

We retain account and focus data for as long as your account remains active. If you delete your account, we delete your name, email, profile photo, and associated focus/leaderboard data from our active systems within 30 days, except where we are required to retain limited records for legal, security, or fraud-prevention purposes. Locally-stored usage-access data is removed automatically when you uninstall the App.

8. Your rights & choices

Access & correction — you can view and edit your name and profile photo directly from the App's settings.
Deletion — you can delete your account and its data yourself, at any time, directly in the App: open Settings, scroll to the danger zone section, and tap Delete account. This permanently removes your account and the associated data described in Section 7 — it cannot be undone. If you have already uninstalled the App, or you would rather we do it for you, you can request deletion at mrinalx3@gmail.com or via our account deletion page, and we will verify and action your request as described in Section 7.
Notification controls — you can disable push notifications at any time from your device's system settings or in-app settings.
Permission controls — you can revoke any Android permission listed in Section 3 at any time.
Portability — you can request a copy of your account and session data by contacting us.

Depending on where you live, you may have additional rights under applicable law (for example, the GDPR in the EU/UK, or state privacy laws in the US such as the CCPA). We honor these rights for all users regardless of location where feasible. To exercise any of these rights, contact us using the details in Section 12.

9. Children's privacy

Focuz is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we will promptly delete it.

10. International data transfers

Our service providers may process and store data in countries other than your own. Where this occurs, we rely on our providers' standard contractual safeguards and industry-standard security practices to protect your information consistently with this policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in-app before the changes take effect. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

12. Contact us

Questions, requests, or concerns about this Privacy Policy or your data can be sent to the data controller:

Coderiftz
Email: mrinalx3@gmail.com
Account deletion: coderiftz-focuz.netlify.app/delete-account