FlowFocus Privacy Policy

2.1 Data stored on your device

FlowFocus is local-first. The app keeps the following on your device:

• Tasks, including titles, priorities, due dates and pomodoro estimates and counts
• Focus and break sessions, statistics and streaks
• Timer presets, theme, sound choices and other settings

2.2 Your anonymous sync identity

So your data can follow you between your own devices without a sign-up, FlowFocus creates an anonymous account on our backend (hosted by Supabase) the first time you use it. It is identified only by a random ID. We do not collect your name, email address, phone number or a password for it.

The credential for this identity is kept in your device's secure storage. On Apple devices it is saved to your Keychain, and when iCloud Keychain is turned on your iPhone and Mac can use the same identity, which is how they sync without a sign-in.

A copy of the following is synced to that anonymous account:

• Tasks, focus sessions, daily statistics and streaks
• Timer presets, settings and the state of a running timer, so another device can pick it up
• If you turn on calendar export: a record of which sessions were already added to your calendar and a per-device identifier, so the same session is never added twice
• On Android, if you use distraction blocking: the list of apps you chose to block and your blocking settings

2.3 Optional sign-in

Signing in is never required. If you choose to sign in with Apple or Google (for example, to keep your history when you change phones), we receive the email address and, if you share it, the name that Apple or Google provides. Apple's "Hide My Email" option works with FlowFocus.

2.4 Analytics, crash reports and performance

We use Google Firebase to understand how the app is used and to fix problems:

• Firebase Analytics: anonymous usage events such as "session started" or "preset created", plus the app version, device model, operating system, language and approximate country
• Firebase Crashlytics: crash and error reports, including the device state and the code that failed
• Firebase Performance Monitoring: timings such as app start-up time and network request duration

These are linked to a random app instance ID or your anonymous FlowFocus ID, never to your name or email. We do not use them for advertising, we do not share them with ad networks, and FlowFocus does not track you across other companies' apps or websites.

2.5 Apple Watch and Wear OS

The watch apps exchange timer state, tasks, presets and completed sessions directly with your paired phone using Apple's WatchConnectivity or Google's Wear OS Data Layer. This data stays between your own devices; we do not receive a separate copy from the watch.

2.6 Calendar (optional)

FlowFocus asks for calendar access only if you turn on calendar export (Settings → Calendar Sync). It then reads the list of your calendars so you can choose one, and adds an event for each completed focus session. Your existing calendar events are not uploaded to us. You can turn export off in the app or revoke access in your device settings at any time.

2.7 Distraction blocking on Android (optional)

If you turn on distraction blocking, the Android app uses Usage Access to notice when a blocked app opens during a focus session. That usage information is processed on your phone and is not sent to us.

2.8 Feedback you send

If you send feedback from the app or email us, we receive your message, the app version, your device and platform, and your email address only if you give it to us or are signed in.

2.9 FlowFocus Pro purchases

FlowFocus Pro is an optional subscription or one-time purchase. You buy it through the App Store or Google Play, and Apple or Google take the payment. We use RevenueCat to check which purchases you have and to unlock FlowFocus Pro on your devices. For that, RevenueCat receives:

• Your app user ID, which is the same random, anonymous ID as your FlowFocus sync identity
• Your purchase history for FlowFocus: which product you bought, when, whether it is a free trial, its renewal or expiry date, the store and country, and the price and currency
• Your FlowFocus Pro status (entitlement), and basic device and app details such as app version, operating system and language

We never see your card number, bank details or billing address; Apple and Google keep those. RevenueCat does not receive your tasks or focus history, and purchase data is used only to give you what you paid for and to restore it, never for advertising.

2.10 Notifications and focus sounds

Timer alerts are local notifications scheduled on your device. Ambient focus sounds are bundled with the app and play on your device; nothing about what you listen to is sent to us.

6.1 Access and export

Export a copy of your data from the app at Settings → Profile → Export My Data, or email us for a copy of what is stored on our backend.

6.2 Deletion

• In the app: Settings → Profile → Delete All Data (or Delete Account if you signed in)
• Online or by email: follow the steps on our FlowFocus data deletion page or write to support@tappect.com
• Deletion is permanent and your history cannot be recovered
• Deleting your data does not cancel a FlowFocus Pro subscription. Cancel it in your App Store or Google Play subscription settings

6.3 Permission controls

• Notifications: turn off in the app or your device settings
• Calendar: turn off export in the app or revoke access in device settings
• Usage Access (Android): revoke in Android settings to stop distraction blocking