OneScreen Focus

1. Who I Am

OneScreen Focus is operated by me, the creator of the app. I am the data controller responsible for the personal information you provide.

If you have questions, please contact me at:
📧 onescreenfocus@gmail.com

2. Information I Collect

2.1 Personal Information

I may collect:

• Email address – for account creation, login, and communication.
• Account credentials – stored securely (passwords are hashed and never stored in plain text).
• Payment information – handled securely by Stripe when you purchase the Pro version.

2.2 Usage Data

Automatically collected information may include:

• Session data – focus session duration, methods used, and statistics.
• Achievement and gamification data – unlocked badges, streak counts, and progress metrics.
• Device information – operating system, browser type, screen resolution, and monitor configuration (for multi-monitor features).
• Desktop app data – application version, installation ID, and license validation status.
• Log data – IP address, access times, pages viewed, and error reports.
• Performance metrics – feature usage and app behavior.
• User preferences – selected patterns, audio settings, pomodoro presets, and theme choices.

2.3 Analytics and User Behavior

I use Microsoft Clarity to understand how users interact with the app:

• Session recordings – visual recordings of how you use the app (web version only, not in desktop app).
• Heatmaps – aggregated data showing where users click and scroll.
• User journey tracking – navigation patterns and feature adoption.
• Event tracking – actions like session starts, pattern changes, and feature usage.

Clarity data is anonymized and used solely to improve the app experience. Learn more: Microsoft Privacy Statement

3. How I Use Your Information

I use your information for:

• Service provision – delivering and maintaining the app.
• Account management – creating, securing, and managing accounts.
• Personalization – tailoring the app experience.
• Analytics and improvement – understanding usage and improving features.
• Security and fraud prevention – detecting misuse or unauthorized access.
• Communication – sending updates and responding to inquiries.
• Legal compliance – meeting obligations under laws and regulations.

4. Information Sharing and Disclosure

I do not sell or rent your personal data. I only share it in limited cases:

4.1 Service Providers

I work with trusted partners who must protect your data:

• Supabase – authentication and data storage.
• Stripe – secure payment processing.
• Microsoft Clarity – user behavior analytics and session recordings (web version only).
• Vercel – hosting and content delivery.

4.2 Legal Obligations

I may disclose data when required by law, subpoena, or valid government request.

5. Data Security

I use industry-standard measures to protect your information:

• Encryption of data in transit and at rest.
• Secure authentication and hashed passwords.
• Regular security updates and monitoring.
• Restricted access and confidentiality obligations.

6. Data Retention

I keep information only as long as necessary:

• Account data – stored while your account is active, then deleted within 30 days after account closure.
• Session data – stored for up to 12 months for analytics, then anonymized or deleted.
• Payment data – retained as required by tax and accounting laws (typically 7 years).
• Analytics data – Clarity recordings retained for 90 days, then automatically deleted.
• Desktop app license data – retained while your subscription is active plus 1 year for support purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access & Portability – request a copy of your data.
• Correction – update inaccurate information.
• Deletion – request account and data deletion (subject to legal requirements).
• Restriction & Objection – limit or stop certain processing.
• Opt-out – unsubscribe from non-essential communications.
• Regulatory Complaint – if in the EU/UK, you may complain to your local data protection authority.

To exercise rights, email me at onescreenfocus@gmail.com.

8. Cookies and Tracking

I use cookies and similar technologies for the app to function properly:

8.1 Essential Cookies (Cannot be Disabled)

• Authentication cookies – To keep you logged in and secure your account.
• Session cookies – To maintain your session and preferences during use.
• Payment cookies – To process secure payments through Stripe.

8.2 Analytics Cookies (Optional)

• Microsoft Clarity – Session recordings, heatmaps, and user behavior analysis.
• Vercel Analytics – Page views and performance metrics.

When you first visit the app, you'll see a cookie consent banner. You can accept or decline optional analytics cookies. Essential cookies are always active as they're necessary for the app to work.

You can manage cookies in your browser settings, though disabling essential cookies may affect app functionality.

8.3 Desktop App Local Storage

The desktop app stores data locally on your device (not cookies) including preferences, session history, and cached content. This data is stored securely and is not shared with third parties except for cloud sync via Supabase.

9. Third-Party Services

My app may link to third-party sites or services. I am not responsible for their practices and recommend reviewing their privacy policies.

10. Music and Content Licensing

The app includes music obtained under a license that permits free commercial use. The music is used in accordance with the applicable license terms, and no copyright infringement is intended.

11. Desktop Application

The Windows desktop app collects additional information for functionality and security:

• License validation – Periodic checks to verify your subscription status (runs hourly when app is open).
• Installation data – Installation ID, app version, and update status.
• System information – Operating system version, monitor count and resolution for multi-monitor features.
• Local preferences – Settings, theme choices, and audio preferences stored locally on your device.
• Error reports – Crash logs and error information to help improve app stability.

The desktop app does NOT include session recordings or analytics tracking (Clarity is disabled in the desktop version). All data transmission is encrypted and only sent to my secure servers for cloud sync and license validation.

12. Children's Privacy

My Service is not directed to children under 13 years old (or under 16 in the EU). I do not knowingly collect their data. If discovered, such data will be deleted immediately.

12. International Data Transfers

Your data may be transferred outside your country (for example, to the United States). When this happens, I use Standard Contractual Clauses (SCCs) and other safeguards to protect your information.

13. Changes to This Policy

I may update this Privacy Policy from time to time. If changes are significant, I will notify you by email or in-app notification. Please review this page periodically.

14. Contact Me

If you have questions, requests, or concerns about this Privacy Policy:

📧 onescreenfocus@gmail.com