Last updated July 19, 2026

PRIVACY NOTICE

This Privacy Notice for Proof of Focus ("we," "us," or "our"), operated by Habip Ertuğrul Dağdemir, explains how we process personal information when you use the Proof of Focus mobile application, website, support pages, and related services (the "Services").

Proof of Focus is a focus and study accountability app. It lets users run focus timers, create and join accountability rooms, use friend and invite features, track focus progress, receive notifications, manage rewards and penalties, upload an avatar, and optionally subscribe to Pro features.

If you do not agree with this Privacy Notice, please do not use the Services. For questions or privacy requests, contact us at habipertugruldagdemir@gmail.com or visit https://focus.ertdev.space/support/

SUMMARY

• We process account, profile, room, focus-session, progress, notification, purchase-status, support, and limited device information needed to operate Proof of Focus.
• We support guest access, email/password authentication, Google Sign-In, and Apple Sign-In through Firebase Authentication and the relevant sign-in providers.
• Purchases and subscriptions are handled by Apple App Store, Google Play, and RevenueCat. We do not collect or store full payment card numbers or card security codes.
• We use Firebase/Google Cloud for backend infrastructure, authentication, database, storage, functions, messaging, App Check, and analytics.
• We use a pseudonymous device-installation identifier and a device-level focus-debt record to enforce focus rules, prevent abuse, and limit attempts to bypass focus debt or free-use limits. This record is kept for up to 90 days after device activity.
• We do not sell personal information, and we do not use personal information for third-party targeted advertising.
• We do not intentionally collect precise location, contacts, microphone recordings, camera recordings, biometric identifiers, or sensitive personal information.
• You can request access, correction, or deletion of your personal information by contacting support. You can delete your account from Profile Settings in the app, or use https://focus.ertdev.space/delete-account/ if you cannot access the app.

Users of social features may be able to search for your display name and view the public profile and room information described in this notice. An uploaded avatar image may be publicly readable from its storage URL.

TABLE OF CONTENTS

1. What information do we collect?
2. How do we use your information?
3. What legal bases do we rely on?
4. When and with whom do we share information?
5. Cookies, analytics, and tracking technologies
6. Social sign-in
7. International transfers
8. How long do we keep information?
9. How do we protect information?
10. Your privacy rights
11. United States privacy rights
12. Children
13. Updates to this notice
14. Contact us

1. WHAT INFORMATION DO WE COLLECT?

Information you provide

Depending on how you use Proof of Focus, we may collect:

• Account identifiers, such as your Firebase user ID, email address, authentication provider, and account status.
• Authentication information needed to create or access your account. Email/password authentication is handled through Firebase Authentication.
• Profile information, such as display name, selected avatar, uploaded avatar image, locale, Pro status, and profile settings.
• Safety and moderation information, such as user reports, the reported user or content, report reason and optional details, moderation decisions, and related account restrictions.
• Social feature information, such as friend requests, friendships, public user profile details, room invites, and notification inbox items.
• Room and focus information, such as invite codes, room names, participant status, timer state, focus sessions, recent rooms, rule settings, violation events, penalty logs, focus debt, XP, coins, levels, streaks, and daily or weekly progress.
• Support information you send to us, including messages, email address, device type, app version, and any details you choose to include in a support or privacy request.

When you use social features, other signed-in users may search for your display name and view a profile containing your display name, selected avatar or uploaded avatar image, Pro status, and focus-progress information such as XP, level, focus minutes, sessions, and streaks. Room participants may also see the room-specific information described below.

Information collected automatically

We may automatically process limited technical and usage information, including:

• Device and app information, such as device type, operating system, app version, language/locale, Firebase installation or app instance identifiers, a pseudonymous device-installation identifier, IP address, and diagnostic information.
• A device-level focus-debt and quota record, identified by a one-way derived identifier, to enforce debt and usage limits across account changes and help prevent abuse.
• App usage information, such as screen views and feature usage events collected through Firebase Analytics.
• Security and integrity signals, including Firebase App Check information used to help protect backend services from abuse.
• Push notification tokens and notification preferences when you enable notifications.
• Local app state stored on your device, such as active room state and notification preferences. If anonymous-account restore is enabled, we also store an anonymous account restore record on your device so that account can be restored.

Device-installation identifiers

To enforce focus-debt and free-use limits fairly and prevent abuse, we use a persistent device-installation identifier. On iOS, this is a random token stored in the device Keychain. On Android, we may use Android's App Set ID. We derive a pseudonymous server-side identifier from it and use that identifier to keep a device-level focus-debt and quota record with limited timestamps. We do not use this record for advertising, precise location, or to display information to other users.

Device permissions and signals

Proof of Focus uses some device capabilities to provide app features:

• Motion sensors. The app reads accelerometer and gyroscope signals during focus flows to check whether the phone appears stable or has been moved. These signals are used for focus-session rules and are not used to identify your physical location.
• Volume state. The app may check device volume during strict focus modes to detect low-volume rule violations.
• Photo library. If you choose to upload an avatar, the app requests photo library access so you can select and crop an image. We upload the selected avatar image to Firebase Storage.
• Push notifications. If you enable notifications, we use Firebase Cloud Messaging and Apple/Google notification services to send room, friend, invite, and account-related notifications.
• Wake/foreground behavior. The app may keep the screen awake or use platform features needed to keep focus sessions reliable.

We do not intentionally collect precise GPS location, contacts, microphone audio, camera video, biometric identifiers, or health data.

Purchase information

If you buy or restore a subscription, Apple App Store, Google Play, and RevenueCat process the transaction. We receive purchase-status and entitlement information, such as product identifiers, active entitlement status, expiration or renewal information, and RevenueCat customer information associated with your app user ID. To manage subscriptions, we provide RevenueCat with your app user ID and, when available, your profile display name. We do not receive or store full payment card details or card security codes.

2. HOW DO WE USE YOUR INFORMATION?

We use personal information to:

• Create, authenticate, link, and manage user accounts.
• Provide guest mode, email/password sign-in, Google Sign-In, and Apple Sign-In.
• Operate focus timers, accountability rooms, invite codes, friends, profiles, notifications, rewards, penalties, progress, and Pro features.
• Detect focus rule violations, calculate rewards and penalties, record room events, and keep strict focus sessions fair for participants.
• Show limited profile and room information to other users when you join rooms, send friend requests, or use social features.
• Process, validate, restore, and sync purchase entitlements.
• Synchronize your app user ID and, when available, your profile display name with RevenueCat for subscription management.
• Respond to support, privacy, billing, and account deletion requests.
• Maintain security, prevent abuse, debug failures, monitor service health, and enforce our terms.
• Analyze app usage and screen views so we can improve the Services.
• Comply with legal, tax, accounting, app store, and regulatory obligations.

3. WHAT LEGAL BASES DO WE RELY ON?

If you are in the European Economic Area, United Kingdom, Switzerland, or another region requiring a legal basis, we rely on the following legal bases:

• Performance of a contract: to provide the Services, manage your account, operate rooms and focus sessions, and provide Pro access.
• Legitimate interests: to secure the Services, prevent abuse, debug issues, improve app performance, enforce focus-session integrity, and understand how the app is used.
• Consent: where required, such as for optional push notifications, access to your photo library for avatar upload, and other optional device permissions. Firebase Analytics is enabled automatically in the mobile app and is not presented as an in-app consent choice.
• Legal obligations: to comply with applicable law, tax/accounting duties, app store obligations, legal claims, and lawful requests.
• Vital interests: only where necessary to protect someone's safety.

You may withdraw consent where processing is based on consent. This does not affect processing that happened before withdrawal or processing based on another legal basis.

4. WHEN AND WITH WHOM DO WE SHARE INFORMATION?

We do not sell personal information. We do not share personal information for third-party targeted advertising.

We may share information with service providers that help us operate the Services:

• Google Firebase / Google Cloud Platform: authentication, app backend, realtime database, Firestore, Cloud Functions, Cloud Storage, Cloud Messaging, App Check, analytics, hosting, and security.
• Google Sign-In: Google account authentication when you choose Google Sign-In.
• Apple Sign-In: Apple account authentication when you choose Apple Sign-In.
• Apple App Store and Google Play: in-app purchases, subscriptions, refunds, and store-managed payment processing.
• RevenueCat: your app user ID, profile display name when available, subscription status, purchase validation, entitlement management, and restore-purchase functionality.

We may also share information:

• With other users, when you use rooms, friend features, public profiles, room invites, or social accountability features. Other signed-in users may search for your display name and view the public profile information described above. Room participants may see your display name, avatar, participation status, violation events, penalty minutes, and room activity. An uploaded avatar image may be publicly readable from its storage URL.
• During business transfers, such as a merger, acquisition, financing, reorganization, or sale of assets.
• To comply with law, respond to lawful requests, protect rights and safety, prevent fraud or abuse, or enforce our terms.

5. COOKIES, ANALYTICS, AND TRACKING TECHNOLOGIES

The Proof of Focus website is primarily informational and support-oriented. It may use basic technologies needed to host pages, load assets, route support links, and maintain security.

The mobile app automatically uses Firebase Analytics to collect app usage and screen-view information. We use this information to understand app performance and improve the Services. We do not use Google Analytics advertising features, AdMob, or third-party targeted advertising based on the codebase reviewed for this notice.

Mobile platforms and Firebase may use app instance identifiers, device identifiers, logs, and similar technologies to provide analytics, messaging, abuse prevention, and diagnostics.

You can manage notification permissions in your device settings. Platform-level privacy controls may also be available on your device.

6. SOCIAL SIGN-IN

Proof of Focus supports Google Sign-In and Apple Sign-In. If you choose one of these options, we receive authentication tokens and account information needed to sign you in or link your account, such as email address and, for Apple Sign-In where provided, name information.

We do not use Facebook or X/Twitter login, and we do not collect friends lists from social networks.

Information received from Google APIs is used only to provide sign-in and account-linking functionality and is handled consistently with the Google API Services User Data Policy, including the Limited Use requirements.

7. INTERNATIONAL TRANSFERS

We and our service providers may process information in the United States, Turkey, the European Economic Area, the United Kingdom, and other countries where our providers operate. These countries may have data protection laws different from those in your location.

Where required, we use appropriate safeguards for international transfers, such as contractual commitments, service-provider data processing terms, and other lawful transfer mechanisms.

8. HOW LONG DO WE KEEP INFORMATION?

We keep personal information for as long as needed to provide the Services, maintain your account, operate focus and social features, comply with legal obligations, resolve disputes, prevent abuse, and enforce our terms.

In general:

• Account, profile, focus, progress, social, and notification data is kept while your account is active or as needed for the purposes described in this notice.
• Non-pending notification-history records are retained for up to 30 days. Pending friend requests and room invites are kept until they are resolved, withdrawn, expired, or otherwise no longer needed.
• The pseudonymous device-level focus-debt and quota record is retained for up to 90 days after device activity. It may remain for that period after account deletion so we can prevent abuse and attempts to bypass focus debt or free-use limits.
• Anonymous-account restore records expire after 90 days. The restore record on your device remains until it is cleared, you remove the app or its data, or the platform removes it.
• When an account is deleted, we delete the account authentication record, profile data, uploaded avatar image, user-specific progress, friend relationships, friend requests, notifications, room-invite records, and other account-specific records. Shared room-history records needed to preserve another user's history may be retained only after the deleted account is anonymized or de-identified in those records.
• Uploaded avatar images are kept until replaced, deleted, or your account is deleted.
• User reports and moderation records may be retained for as long as reasonably necessary to investigate abuse, enforce our terms, protect users, resolve disputes, and meet legal obligations.
• Purchase and entitlement records may be retained as needed to maintain subscription access, restore purchases, support refunds, and comply with app store, tax, accounting, or legal obligations.
• Aggregated or de-identified analytics may be retained when it no longer reasonably identifies you.
• Backups and logs may retain information temporarily until ordinary backup and log-deletion cycles complete. We retain a hashed account-deletion receipt for seven days to prevent duplicate deletion processing.

You can delete your account from Profile Settings in the app. Deletion begins immediately and may continue in the background if all deletion steps cannot finish during the initial request. If you cannot access the app or the in-app deletion flow does not work, you can request account deletion at https://focus.ertdev.space/delete-account/ or by emailing habipertugruldagdemir@gmail.com. Verified email deletion requests are processed within 30 days, subject to legal, security, backup, store-purchase, and device-level anti-abuse retention limits described above. Deleting your app account does not automatically cancel an active App Store or Google Play subscription; you must cancel active subscriptions through the store account that purchased them.

9. HOW DO WE PROTECT INFORMATION?

We use technical and organizational measures designed to protect personal information, including Firebase security rules, authenticated backend calls, App Check, access controls, and service-provider protections. No electronic transmission or storage system can be guaranteed to be 100% secure, so we cannot promise absolute security.

10. YOUR PRIVACY RIGHTS

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate personal information.
• Delete personal information.
• Receive a copy of personal information you provided.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Appeal certain privacy-rights decisions, where required by law.
• Complain to a data protection authority.

To exercise these rights, email habipertugruldagdemir@gmail.com with the subject line "Proof of Focus Privacy Request" or visit https://focus.ertdev.space/support/. Please state the right you want to exercise and the account email address or user ID you used with the Services. We may need to verify your identity before fulfilling a request. We respond within the timeframe required by applicable law. If we deny a request where an appeal is available, you may appeal by replying to our decision email with the subject line "Privacy Request Appeal."

11. UNITED STATES PRIVACY RIGHTS

Depending on your state, you may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain processing of personal information. We do not sell personal information and do not share it for third-party targeted advertising.

The categories of personal information we may have collected in the past 12 months include:

We disclose the relevant categories above to service providers listed in "When and with whom do we share information" for business purposes such as hosting, authentication, storage, messaging, analytics, security, and purchase entitlement management.

California residents may also request information under California's "Shine the Light" law by contacting habipertugruldagdemir@gmail.com.

12. CHILDREN

Proof of Focus is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact habipertugruldagdemir@gmail.com so we can review and delete it where required.

13. UPDATES TO THIS NOTICE

We may update this Privacy Notice from time to time. The updated version will be indicated by the "Last updated" date at the top. If we make material changes, we may notify you by posting a notice, updating the app or website, or sending a direct notification where appropriate.

14. CONTACT US

If you have questions, comments, or privacy requests, contact us at:

Email: habipertugruldagdemir@gmail.com

Support page: https://focus.ertdev.space/support/

Account deletion: https://focus.ertdev.space/delete-account/