Privacy Policy

Last updated: September 10, 2026

1. Information We Collect

When you sign in to FocusFlow using Google, we receive your name and email address from your Google account. We do not request or receive your Google password.

If you sign up with an email address and password instead, we receive your email address. Passwords are handled by our authentication provider and are never stored by us in a form we can read.

We also collect usage data you create in the app, including tasks, timer sessions, streaks, and focus room activity.

If you purchase FocusFlow Premium, we store your subscription status and expiry date. We never receive or store your payment card details — see section 4a.

If you send feedback from inside the app, we receive your message along with your email address, the app version, your platform (iOS, Android, or web), and the screen you sent it from, so we can reproduce and answer it.

2. How We Use Your Information

Your information is used exclusively to:

  • Authenticate your account and personalize the app experience
  • Save your session history, streaks, and preferences
  • Enable collaborative features (focus rooms, friends, leaderboard)
  • Deliver your Premium entitlement and keep it in sync across your devices
  • Send you occasional product email — including a weekly check-in summarizing your own streak, tasks completed, and focus minutes
  • Respond to feedback and support requests you send us
  • Keep the community safe by reviewing reports of objectionable content or behavior

You can opt out of product and check-in email at any time using the unsubscribe link in any of those emails, or by emailing us at the address in section 9. Opting out does not affect essential account email, such as security or billing notices.

We do not sell, rent, or trade your personal information to third parties.

3. Data Storage & Security

Your data is stored securely on Base44's cloud infrastructure. All communication between your device and our servers is encrypted using TLS/SSL.

4. Third-Party Services

FocusFlow uses the following third-party services:

  • Google Sign-In — for authentication only
  • Base44 — backend infrastructure, authentication, and data storage
  • OneSignal — push notification delivery. OneSignal assigns your installation a push subscription identifier, which we store against your account so we can send the reminders and routine alarms you enable. It is used only to deliver notifications, never for advertising or tracking.
  • RevenueCat — subscription management and purchase validation for Premium (see section 4a)
  • Apple App Store and Google Play — payment processing for Premium (see section 4a)

Each service has its own privacy policy governing data they process.

4a. Purchases & Subscriptions

FocusFlow Premium is sold as an auto-renewing in-app subscription.

Your payment is processed entirely by Apple or Google. We never see, receive, or store your card number, billing address, or any other payment credential.

We use RevenueCat to validate purchase receipts and keep your subscription status current across your devices. RevenueCat receives an anonymous app user identifier associated with your account and the purchase receipt issued by the store. It does not receive your tasks, sessions, messages, or any other content you create in FocusFlow.

What we store on our own servers is limited to whether your subscription is active and when it expires. Managing, changing, or cancelling the subscription is done through your Apple ID or Google Play account settings.

4b. Data We Collect Automatically

When you use FocusFlow, we automatically collect limited technical data necessary to operate the service:

  • Session tokens — authentication tokens stored securely to keep you logged in. These expire automatically and are never shared with third parties.
  • Local storage data — your active timer state, draft task lists, selected audio preferences, and bell tone settings are stored locally on your device only. This data never leaves your device.
  • Focus session records — session duration, tasks completed, and dates are stored server-side to power your streak tracking and leaderboard position.
  • Push subscription identifier — if you enable notifications, a device-level push identifier issued by OneSignal is stored against your account so reminders can reach you. Disabling notifications stops its use; deleting your account removes it.
  • Time zone — stored so that morning and night routine alarms fire at the right local time.

We collect only what is strictly necessary to operate the service. We do not collect location data, contacts, camera or microphone access, advertising identifiers, or any biometric data.

4c. Cookies

FocusFlow uses only essential session cookies required for authentication. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. You can disable cookies in your browser settings but this will prevent you from staying logged in.

4d. AI Coach (Premium Feature)

Premium subscribers can tap Optimize with AI Coach to have a schedule suggested for them. This feature, and only this feature, sends data to a language model provider.

What is sent: the titles and durations of the tasks in the list you are optimizing. Nothing else — no name, no email address, no session history, no focus room or chat content.

When it is sent: only when you personally tap the button. Nothing is sent in the background, and the feature is never invoked on your behalf.

The model is accessed through Base44's AI integration. Your task text is used solely to generate the suggestion returned to you in that moment. It is not used to train models, is not used for advertising, and is not sold or shared with data brokers. Use of the feature is rate-limited per account.

If you would rather no task content leave the app, simply do not use AI Coach — every other feature in FocusFlow works without it.

4e. Community Features & Moderation

FocusFlow includes focus rooms, friends, a leaderboard, and in-room chat. These features are social by design, so some of your information is visible to other people.

What other users can see: your display name and your email address are shown alongside your messages in focus rooms, on friend requests you send or receive, and on the leaderboard. Do not put anything in your display name or messages that you would not want other members to see.

Reporting and blocking: you can report objectionable content or behavior, and you can block another user, from within the app. When you submit a report we record the reporting and reported account, a copy of the reported content, and the reason given, so the report can be reviewed and acted on. Blocked-user lists are stored against your account.

Retention of moderation records: reports and their attached content snapshots are kept after the report is resolved, for as long as reasonably needed to enforce our terms, detect repeat behavior, and comply with legal obligations. This is the one category of data that may outlive the deletion of a reported account, and it is retained for safety purposes only.

We have zero tolerance for objectionable content and abusive users. Accounts found in violation may be suspended or removed.

5. Children's Privacy (COPPA & International)

FocusFlow is not directed at children under the age of 13. In regions where a higher age of digital consent applies (e.g., 16 in parts of the EU under GDPR, 16 in North America/Oceania), those thresholds are respected.

We do not knowingly collect personal information from children below the applicable age of consent. If you believe a child has provided us with personal data, please contact us so we can delete it.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict certain processing
  • Data portability

California residents (CCPA): You have the right to know what personal information is collected and to request its deletion. We do not sell personal information.

UK/EU residents (GDPR): You may exercise your rights under the UK GDPR and EU GDPR by contacting us below.

7. Data Retention & Account Deletion

We retain your data for as long as your account is active.

You can delete your account at any time from Settings inside the app. Deletion is immediate and permanent: your account and the data attached to it — tasks, timer sessions, stats and streaks, focus rooms you host, room messages, friend requests, saved wheels, and your stored push identifier — are removed from our systems as part of that request. It is not a request queued for later review, and it cannot be undone.

The single exception is described in section 4e: moderation records relating to a report may be retained for safety and legal purposes.

Deleting your account does not automatically cancel an active subscription. Cancel that through your Apple ID or Google Play account settings.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated within the app. Continued use after changes constitutes acceptance.

9. Contact Us

FocusFlow is a product of PV Labs, based in Ontario, California.

PV Labs

Ontario, California, United States

Email: hello@pvlabs.us

Website: pvlabs.us