Privacy Policy
Datenschutzerklärung · Last updated: [Datum]
Overview
Focus Hourglass is a minimalist focus application. We process only the data required to provide the core service. No advertising, no data sales, no third-party marketing trackers.
Controller
[Full Name]
[Mailing Address]
E-Mail: [Contact E-Mail]
Data Collection
Account data: email address and, for password login, a securely hashed password.
Productivity data: focus sessions, projects, goals, rhythms, streaks and statistics you create. Every record is bound to your user ID.
Local data: settings, cached sessions and your session token are stored in your browser's localStorage. Guest usage stays on your device until you sign in.
Google OAuth Authentication
If you sign in with Google, we receive only your basic profile information (name, email address and profile picture) from Google to create and identify your account. We never receive your Google password, and we do not access Gmail, Drive, Calendar or any other Google service data.
You can revoke access at any time in your Google Account security settings. Google's own processing is governed by their privacy policy.
Analytics
The analytics you see inside the app (focus totals, streaks, charts) are computed from your own sessions and are visible only to you.
For the product itself we use only privacy-friendly, aggregated usage and error diagnostics. We do not build advertising profiles and do not set tracking cookies.
Storage & Processors
Data is processed and stored with our managed cloud backend on EU-based infrastructure. Row Level Security enforces at the database level that each record is only readable or modifiable by its owner.
Legal Basis
Processing is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in a functioning, secure service).
User Rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection at any time. Your productivity data can be viewed and deleted directly in the app. For full account deletion, an informal message to [Contact E-Mail] is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority.