Privacy Policy - Focuverse

1. Introduction

Welcome to Focuverse ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience while using our productivity application and browser extension (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using Focuverse, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you create an account or use our Service:

Email Address: Used for account creation, authentication, and communication
User ID: A unique identifier assigned to your account
Authentication Data: Secure tokens for maintaining your logged-in session

2.2 Usage Data

We automatically collect information about how you use the Service:

Session Data: Start time, duration, and completion status of focus sessions
Progress Statistics: Total sessions completed, accumulated time, current position in your cosmic journey
Preferences: Custom session lengths, break durations, and notification settings
Premium Status: Information about your subscription tier and features

2.3 Browser Extension Data

When you use our browser extension, we collect:

Tab Information: Limited to detecting whether the Focuverse web app is already open (to prevent duplicate tabs)
Local Preferences: Settings stored locally in your browser for quick access

2.4 Payment Information

Payment processing is handled securely by Stripe, our payment processor. We do not store your full credit card details. We only retain:

Stripe Customer ID: To manage your subscription
Subscription Status: Active, cancelled, or grace period status
Transaction History: Records of subscription changes (handled by Stripe)

3. How We Use Your Information

                Limited Use Principle: We use your data only for the purposes disclosed in this policy and to provide, maintain, and improve the core functionality of Focuverse.
            

Specifically, we use your information to:

Provide Core Service: Track your focus sessions, visualize your progress, and sync data across devices
Account Management: Create and maintain your account, authenticate your identity
Subscription Management: Process payments, manage premium features, handle billing
Service Improvement: Analyze usage patterns (in aggregate) to improve features and user experience
Communication: Send service-related notifications, respond to inquiries, provide customer support
Security: Detect and prevent fraud, abuse, and security incidents
Legal Compliance: Comply with applicable laws, regulations, and legal processes

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We only share your data in the following limited circumstances:

4.1 Service Providers

Service Provider	Purpose	Data Shared
Firebase (Google Cloud)	Authentication, database hosting, app hosting	Email, user ID, session data, preferences
Stripe	Payment processing	Email, customer ID, payment details
Vercel	Web hosting and content delivery	Usage analytics (anonymized)

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal requests (subpoenas, court orders)
Protection of our rights, property, or safety
Investigation of fraud or security issues
Enforcement of our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice and obtain consent if required by applicable law.

4.4 What We DON'T Do

We explicitly DO NOT:

❌ Sell or rent your data to third parties
❌ Share data with advertising platforms or data brokers
❌ Use your data for personalized advertising
❌ Share data for credit assessment or lending decisions
❌ Allow human access to your data except for security, support, or legal compliance

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored in secure, industry-standard facilities:

Primary Database: Firebase Firestore (Google Cloud Platform) - Australia Southeast region
Authentication: Firebase Authentication with encrypted tokens
Local Storage: Preferences and session state stored in your browser (never transmitted to servers)

5.2 Security Measures

We implement industry-standard security measures to protect your data:

🔒 All data transmission uses HTTPS/TLS encryption
🔑 Passwords are never stored; authentication uses secure tokens
🛡️ Database access is restricted with role-based permissions
🔐 Payment processing uses PCI-compliant Stripe infrastructure
📊 Regular security audits and monitoring

5.3 Data Retention

We retain your data as follows:

Active Accounts: Data retained indefinitely while account is active
Inactive Accounts: Data retained for 2 years after last login, then deleted
Deleted Accounts: Data permanently deleted within 30 days of account deletion request
Payment Records: Retained for 7 years for tax and legal compliance

6. Your Privacy Rights

You have the following rights regarding your personal information:

6.1 Access and Portability

Access: Request a copy of all personal data we hold about you
Data Export: Download your session history and statistics in JSON format
Portability: Receive your data in a machine-readable format

6.2 Correction and Deletion

Update: Modify your email address or preferences at any time in settings
Delete: Request complete deletion of your account and all associated data
Right to be Forgotten: Permanently erase your personal information from our systems

6.3 Opt-Out Rights

Email Communications: Unsubscribe from marketing emails (service emails may still be sent)
Browser Notifications: Disable session completion notifications in your browser settings
Data Collection: You can use Focuverse without an account (limited features, no data sync)

6.4 How to Exercise Your Rights

To exercise any of these rights, please contact us:

🌐 Website: www.focuverse.space (contact form available)
⚙️ Account Settings: Delete account option in your profile settings

We will respond to your request within 30 days.

7. Browser Extension Permissions

Our browser extension requests the following permissions. Here's exactly what we do with each:

Permission	Why We Need It	What We DON'T Do
storage	Store your preferences locally (session length, notification settings)	We do NOT access or read data from other extensions or websites
activeTab	Check if the Focuverse web app is already open	We do NOT track your browsing history or access content of other websites
notifications	Alert you when focus sessions or breaks end	We do NOT send promotional or marketing notifications
scripting	Check your premium status from the web app to display the correct extension icon	We do NOT inject scripts into other websites or modify their content
tabs	Enforce single-tab policy (focus existing tab instead of opening duplicates)	We do NOT monitor, track, or record your tab activity across other sites

Important Note: Our extension only interacts with the Focuverse web app (focuverse.space). We do not access, read, or modify content on any other websites.

8. Cookies and Tracking

8.1 What We Use

We use minimal tracking technologies:

Essential Cookies: Authentication tokens to keep you logged in
Local Storage: Session state for crash recovery and preferences
Session Storage: Temporary data cleared when you close the browser

8.2 What We DON'T Use

❌ Third-party advertising cookies
❌ Cross-site tracking pixels
❌ Analytics cookies (we use anonymous, aggregated analytics only)
❌ Social media tracking buttons

8.3 Your Control

You can control cookies through your browser settings, but note that disabling essential cookies will prevent you from staying logged in.

9. Children's Privacy

Focuverse is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete that information.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:

Primary data storage: Australia Southeast (Firebase)
Backup and CDN: Global edge locations (Vercel)
Payment processing: United States and European Union (Stripe)

These service providers comply with international data protection frameworks including GDPR, CCPA, and other applicable regulations.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

Post the updated policy on this page
Update the "Last Updated" date at the top
Notify you via email for material changes
Request consent if required by law

Your continued use of Focuverse after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Website: www.focuverse.space

For Privacy-Related Requests:
• Data access or export requests
• Account deletion requests
• Correction of personal information
• Questions about data usage
• Security concerns

We aim to respond to all privacy inquiries within 30 days.

13. Third-Party Services Disclosure

Required Disclosure:

The use of information received from third-party APIs will adhere to this Privacy Policy, including the Limited Use requirements outlined in Section 3. We do not use API data for purposes beyond providing and improving the core functionality of Focuverse.