Privacy Policy

Information Handled by the App

Data stored only on your device

The App stores the following information locally:

• Focus-session settings, active timers, completed sessions, and break history.
• Focus statistics, streaks, and other progress summaries.
• Hotel restoration progress, unlocked rooms, decorations, and in-app rewards.
• Casey customization, sound, notification, and accessibility preferences.
• Deep Focus selections and settings when you enable that feature.

This local data is not transmitted to us, RevenueCat, or our website host. We do not require your name, email address, or an account for the App's core features.

Data processed off your device

• Purchase and entitlement data: an anonymous App User ID, device and operating-system information, product identifiers, App Store or Google Play receipt and transaction information, subscription status, and entitlement status are processed through RevenueCat.
• Support data: if you contact us, we receive your email address, message, attachments, and any troubleshooting information you choose to provide.
• Website data: Vercel processes standard request and security logs, including IP address, browser and device information, requested page, approximate location derived from IP address, and request time.

Device Permissions and Deep Focus

When you enable reminders, Friendly Focus requests notification permission and schedules notifications for session and break events. You can use the App without enabling notifications.

On iOS, when you enable Deep Focus, Friendly Focus uses Apple's Screen Time and Family Controls frameworks to let you select and temporarily restrict distracting apps. Apple represents those selections with opaque system tokens, which the App stores on your device. We do not receive the names of your selected apps or use this access to read messages, emails, browsing content, documents, or activity inside other apps.

On Android, optional app blocking uses Accessibility access to detect which app you open and display a blocking screen over non-essential apps automatically during a focus session, including while Friendly Focus is in the background. You see a separate in-app disclosure and must agree before enabling access in Android Settings.

Android app names, package identifiers, and app-opening events are processed only on your device. App-opening events are not saved or shared. The service does not read screen contents or typed text. Your Always available exceptions, consent, and session deadline stay on your device and are excluded from Android cloud backup and device transfer. Essential tools such as calls, messages, maps, banking and authentication stay available. You can keep additional apps accessible using Always available. Earlier test versions allowed you to select individual distracting apps.

You can stop blocking in Friendly Focus or revoke access at any time in Android Settings → Accessibility → Friendly Focus app blocking. All apps unlock when the focus session ends or is cancelled; the native deadline also ends blocking without reopening Friendly Focus.

You control these permissions in the App and in your device Settings. If you revoke a permission, the related reminder or Deep Focus feature stops working until you grant it again.

Purchases and RevenueCat

Apple and Google process payments through their respective app stores. We do not receive or store your full payment-card details. Friendly Focus uses the RevenueCat SDK to validate purchases, restore access, and manage subscription and lifetime entitlements.

Because the App has no account, RevenueCat assigns a random anonymous App User ID to the installation. We do not send your name, email address, focus history, hotel progress, Deep Focus selections, or advertising identifier to RevenueCat. Purchase processing is required only when you buy or restore paid access; without it, we cannot activate or restore paid features.

Purposes and Legal Bases

• Purchase validation and paid access: necessary to perform our contract with you by activating, maintaining, and restoring the product you purchased.
• Support communications: our legitimate interests in answering requests, resolving problems, and keeping a record of support, or steps taken at your request before entering a contract.
• Website delivery, reliability, and security: our legitimate interests in making these policies available, detecting abuse, and keeping the website secure.
• Legal and regulatory requests: compliance with a legal obligation when applicable law requires processing or disclosure.

Local App data and optional device permissions are controlled by you on your device and are not collected by us. We do not make decisions based on personal data that produce legal or similarly significant effects. RevenueCat automatically updates access to paid features based on the purchase status reported by Apple or Google Play.

Service Providers and Disclosure

We disclose personal data only to the following recipients and for these purposes:

• Apple: App Store payment processing, purchase records, refunds, subscription management, and operating-system services.
• Google Play: payment processing, purchase records, refunds, subscription management, and Android operating-system services.
• RevenueCat: purchase validation, entitlement management, subscription status, and purchase restoration. Read RevenueCat's Privacy Policy.
• Vercel: hosting, delivery, reliability, and security of these legal pages. Read Vercel's Privacy Notice.
• Google Workspace: delivery and storage of emails you send to our support address.

We also disclose information when required by law or when necessary to establish, exercise, or defend legal claims. We do not sell or share personal data with advertisers or data brokers.

International Data Transfers

RevenueCat, Vercel, Google, and Apple operate globally, so purchase, support, and website data is processed in the United States and other countries outside Norway and the European Economic Area. Where GDPR transfer rules apply, these transfers rely on a valid transfer mechanism, including an adequacy decision, the EU-US Data Privacy Framework for certified recipients, or the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required.

Retention and Security

• Local App data stays on your device until you erase it through an available in-App control, reset the App, or uninstall it, subject to your device backup settings. After deletion, we cannot recover it.
• RevenueCat purchase and entitlement records are kept while needed to activate and restore paid access, resolve purchase disputes, and meet legal obligations. We delete or anonymize records that are no longer needed, subject to records retained independently by Apple or Google.
• Support emails are normally deleted within 24 months after the request is closed. We keep them longer only when required for an active dispute, security investigation, or legal obligation.
• We do not maintain a separate copy of Vercel's website logs. Vercel retains those logs according to its service configuration and legal obligations.

We use safeguards appropriate to the information we handle, including limiting App data to the device, using encrypted network connections, and restricting access to provider dashboards and support messages. No device, transmission, or storage system is completely secure.

Your Privacy Rights

Depending on where you live, you have the right to request access to, correction of, deletion of, or a copy of your personal data. You can also request restriction of processing, object to processing based on legitimate interests, and request data portability where applicable. If processing relies on consent, you can withdraw that consent at any time without affecting earlier lawful processing.

To exercise a right, email sebastian@rework.no. Include enough information for us to understand the request. For a RevenueCat purchase-data request, contact us first and we will explain how to locate the anonymous App User ID for your installation. We can ask for reasonable verification before fulfilling a request.

You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no, or to the data-protection authority where you live or work.

Your Controls

• Erase local focus, progress, hotel, and customization data using available in-App controls or by uninstalling the App.
• Grant or revoke notification and Screen Time permissions in iOS Settings.
• Revoke app-blocking access in Android Settings → Accessibility → Friendly Focus app blocking.
• Manage or cancel subscriptions in your Apple ID subscription settings.
• Manage Google Play subscriptions in Google Play → Payments & subscriptions.
• Contact us to request deletion of support or RevenueCat data associated with you.

Changes to This Policy

We update this Privacy Policy when Friendly Focus or its data practices change. The revised policy will be posted here with a new effective date. We provide additional notice when a material change requires it.

Contact

Data controller: Sebastian Thorp, Norway.
Privacy and support email: sebastian@rework.no.