Privacy Policy
Effective 4 November 2026
ourfocus is an app for focused work sessions with a partner over video, or with an AI focus partner. It is made by SelfApp Labs ("we", "us"). This policy explains what data we collect, why, who we share it with, and the choices you have. Questions: support@ourfocus.app.
Summary
- We collect only what the app needs to run: your account, your bookings and sessions, and what you say to the AI partner (kept only while your session is live, then deleted).
- Video calls go directly between you and your partner. They are encrypted and never recorded.
- No ads, no advertising ID, no analytics or tracking SDKs. We never sell your data.
- You can delete your account at any time, in the app or at ourfocus.app/delete-account.
Data we collect
| Data | Why |
|---|---|
| Account: email address, display name, password (stored only as a secure hash), time zone. If you sign in with Google: your Google account ID, email and name. | To create your account, sign you in, and show your name to session partners. |
| Sessions: bookings, session times, who you were matched with, join/leave times, focus minutes, check-in results and notes you write. | To match you with partners, run sessions and show your progress and stats. |
| AI partner messages: the text of what you say to Foki, our AI focus partner, and its replies. Kept only during the session and deleted automatically a few minutes after it ends. | So Foki remembers the conversation during your session. |
| Safety: users you block, and reports you make (reason and optional note). | To stop you being matched with someone again and to deal with abuse. |
| Purchases: whether you have Premium and when it expires. We never see your card details; Google Play handles payment. | To unlock Premium. |
| Technical: IP address, device and app version in short-lived server logs, and sign-in sessions per device. | Security, preventing abuse, keeping the service running. |
Camera, microphone and voice
- Video sessions: camera and microphone are used only while you are in a session. Audio and video stream directly to your partner over an encrypted connection (WebRTC). If a direct connection isn't possible, the encrypted stream passes through our relay server, which cannot see or hear it. We never record or store calls.
- AI partner: when you talk to Foki, your voice is turned into text by your phone's speech recognition. Where your phone supports it this happens on the device; otherwise your phone's speech service (provided by Google on most Android phones) may process the audio. Only the resulting text is sent to us. Foki's replies are spoken by your phone's text-to-speech.
Who we share data with
We share data only with service providers that run parts of ourfocus for us, and only what each one needs:
- Your session partner sees your display name and, during the call, your video and audio.
- Our AI model provider receives the text of your AI-partner messages to generate replies, and may process it outside the EU. We don't send your name or email with these messages.
- RevenueCat and Google Play handle subscriptions and purchases, using an anonymous user ID.
- Google handles Google sign-in if you choose it.
- Hetzner (Germany) hosts our servers and database. Cloudflare protects and delivers our website and API traffic.
We may also disclose data if the law requires it, or to protect the safety of our users. We do not sell or rent personal data, and we don't use it for advertising.
Where data is stored
Our servers and database are in Germany (EU). Some providers above may process data in other countries outside the EU; where the law requires it we rely on appropriate safeguards such as standard contractual clauses.
How long we keep data
- Account data: while your account exists.
- AI partner messages: deleted a few minutes after each session ends.
- When you delete your account, you're signed out straight away and can restore it by signing in within 15 days. After that, your email, name and logins are deleted. If you tell us why you're leaving, that answer is kept without any link to you. Past session records (times, focus minutes, check-in results and notes) are kept only linked to an anonymous ID that can't be connected back to you.
- Sign-in sessions expire after 60 days of inactivity. Server logs are kept for up to 30 days. Backups are overwritten within 14 days.
Security
All traffic is encrypted (HTTPS/TLS, and DTLS-SRTP for calls). Passwords are stored as one-way hashes. Access to servers is restricted and protected by keys.
Your rights and choices
- Change your name and preferences in the app.
- Delete your account in the app or by email.
- Block or report any partner from the session screen.
- Depending on where you live (for example under the GDPR), you can ask for a copy of your data, its correction or deletion, or object to processing. Email support@ourfocus.app; we reply within 30 days. You can also complain to your local data protection authority.
Our legal bases under the GDPR are: performing our contract with you (running the service), our legitimate interests (security and abuse prevention), and your consent (camera and microphone, which you can withdraw in your phone's settings).
Age
ourfocus is for people aged 18 and over, because sessions involve live video with other adults. We don't knowingly collect data from anyone younger. If you believe a minor has an account, contact us and we'll delete it.
Changes
If we change this policy we'll update the date above, and tell you in the app if the changes are significant.
Contact
SelfApp Labs, support@ourfocus.app