Privacy Policy

1. Our Privacy Promise

At FocusNow, we believe your productivity data is deeply personal. Before anything else, here is our commitment to you:

• We never sell, rent, or trade your personal data
• We never share your activity data with advertisers or data brokers
• We never take screenshots of your screen
• We never record keystrokes, mouse clicks, or form inputs
• We never use your data for advertising or marketing profiling
• You can delete your activity history and sessions from within the app at any time — and delete your account entirely, whenever you want, from Settings → Account

2. Data Controller

FocusNow is developed and operated by Barbaros Zongur, based in Turkey. As the data controller, we decide how and why your personal data is processed. For all privacy-related inquiries, you can reach us at info@focusnow.ai.

3. Information We Collect

We collect only the data needed to provide you with productivity insights. Here is exactly what we collect and why:

• Account information — your email address, display name, and which sign-in provider you used (Google or Microsoft). We never receive or store passwords
• Optional profile details — your job title and sector, if you choose to provide them, and your working hours, if you set them. These make your AI daily report more relevant (see section 6)
• Activity data — the names and file paths of the applications you use, window titles, the web addresses (URLs) you visit, whether you are active, idle, or away, timestamps and durations, and your focus session details. This powers your productivity analytics
• Diagnostics and usage analytics — operating system and app version, device architecture, language and theme settings, usage events, approximate location, and error reports. Collected only if you opt in, apart from two anonymous events that contain no identifier (see section 7)
• Website data — what the focusnow.ai website collects is described in the cookies section below
• Website form data — if you use the contact form we receive the name, email address, topic and message you submit; if you join the Pro waitlist we store your email address. Both are used solely to reply to you or to notify you about Pro, are never sold or shared, and are deleted on request

4. How Activity Tracking Works

While it is running, the desktop app checks which window is in the foreground roughly every two seconds — including outside focus sessions. On macOS this requires the Accessibility permission, which you can revoke in System Settings at any time. You stay in control:

• Your data is recorded on your device first, in a local database, and synced to the cloud while you are signed in
• You can exclude specific applications and websites from tracking in Settings
• You can delete individual activity logs and sessions from within the app — deletion removes them from both the cloud and your device
• Quitting the app stops all tracking immediately

5. How We Use Your Data

We use your data exclusively to provide and improve the FocusNow experience:

• Categorize your activity automatically and build your analytics dashboards
• Sync your data so your productivity history follows your account
• Generate personalized focus insights and daily reports
• Send service-related communications (updates, security alerts)
• Diagnose technical issues and improve app performance (opt-in analytics only)

We do not use your activity data for advertising, marketing profiling, or any purpose unrelated to the FocusNow service.

6. AI-Generated Insights

When you request a daily report, that day's activity records — application names, window titles, URLs, timestamps, and categories — are processed by Azure OpenAI Service running inside our own Microsoft Azure subscription in the European Union. If you have provided them, your job title, sector and working hours are included as well, so the report can interpret your day in the context of your actual work rather than in the abstract. Your name and email address are never sent. Your data is not used to train AI models. The generated report is stored in your account so it does not have to be regenerated.

AI-generated insights are informational only and can be inaccurate. They are not professional, medical, or employment advice.

7. Analytics and Diagnostics

The desktop app asks for your consent on first launch before sending any analytics or diagnostics that can be linked to you. Whichever way you answer, the app sends two anonymous events — that it was launched, and what you answered — carrying only the app version, operating system and system language. These let us count how many people install FocusNow and which versions and systems to support. They contain no identifier of any kind, no location, and no link to your account or to each other, nothing is stored on your device to enable them, and they cannot be traced back to you. We send them on the basis of our legitimate interest in maintaining the app. Everything below is sent only if you consent:

• Error and diagnostic reports are sent to Azure Application Insights so we can find and fix bugs
• Product usage events (for example, which features are used) are sent to PostHog, hosted in the European Union. Before you sign in they are recorded under a random identifier stored only on your device; afterwards, under the random account identifier our servers generate for you — never your name or email
• Your approximate location (country and region), derived from the IP address your device connects from, so we know which countries to support
• Session replay captures how the FocusNow app's own interface is used, with all text inputs masked. It never records your screen, other applications, or their content
• Your job title and sector are never included in analytics data — they are used only to shape your AI daily report (see section 6)

You can change your choice at any time in Settings → Privacy. Turning analytics off immediately stops everything listed above, including location; only the two anonymous events described at the top continue.

8. Data Storage and Infrastructure

Your synced data is stored in Microsoft Azure (Cosmos DB) in European Union data centers:

• Encrypted in transit using TLS 1.2+ and encrypted at rest using AES-256
• Azure compliance certifications: SOC 1/2/3, ISO 27001, GDPR-ready infrastructure
• Physical and logical access controls at all data centers
• A local copy of your data is kept on your device for offline access; the local database file name does not contain your email address in readable form

9. International Data Transfers

FocusNow is operated from Turkey, and your data is processed in Microsoft Azure data centers located in the European Union. Where data is transferred outside the European Economic Area (EEA) or Turkey, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards recognized by applicable data protection authorities. Our processors handle data under data processing agreements that include these safeguards.

10. Data Security

We implement industry-standard security measures to protect your data:

• TLS 1.2+ encryption for all data in transit; AES-256 encryption at rest in the cloud
• Sign-in is handled entirely by Google and Microsoft — we never see or store passwords
• Sign-in tokens are stored encrypted on your device
• Every API request is authenticated, and your data is isolated per account

No system is 100% secure. We take reasonable and appropriate measures to protect your information from unauthorized access, alteration, or destruction.

11. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. Data is shared only with the service providers below, and only to operate FocusNow:

• Microsoft Azure — hosts our backend, database, and AI processing in EU data centers under a Data Processing Agreement
• PostHog (EU-hosted) — receives opt-in, pseudonymized product analytics and session replay (see section 7)
• Google and Microsoft — handle sign-in to your account; your login is processed under their own privacy policies. With your consent, Google Analytics also runs on our website
• GitHub — distributes app downloads and automatic updates; when the app checks for updates, GitHub receives standard technical data such as your IP address
• Legal requirements — when required by law, regulation, legal process, or governmental request
• Business transfers — in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, with advance notice to you

12. Cookies and Website Analytics

On the focusnow.ai website:

• Essential cookies — required for basic site functionality
• Google Analytics — runs only if you accept it via the cookie banner (analytics are off by default) and shows us aggregate information such as pages visited, traffic sources, and countries
• No advertising cookies, ad trackers, or social media pixels

You can decline or withdraw cookie consent at any time. Desktop app analytics are separate and controlled in the app's settings (see section 7).

13. Data Retention

We keep your data only as long as necessary:

• Activity logs, focus sessions, and AI daily insight reports are retained in the cloud for up to 12 months on a rolling basis, then automatically deleted; your account and profile information are kept for as long as your account stays active
• On your device, synced activity older than 90 days is automatically cleaned up; your cloud history remains available within the 12-month cloud retention window described above
• When you delete data in the app, it is removed from both the cloud and your device
• Account deletion requests are completed within 30 days; certain data may be retained longer where required by applicable law
• Aggregated, anonymous statistics that cannot identify you may be retained for service improvement

14. Your Rights (GDPR & KVKK)

Under the EU General Data Protection Regulation (GDPR), Turkey's Personal Data Protection Law No. 6698 (KVKK), and similar laws, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your account and all associated data
• Data portability — request an export of your data in a machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — withdraw consent for optional processing (such as analytics) at any time in the app or on the website
• Complaint — lodge a complaint with your data protection authority (in Turkey, the Personal Data Protection Authority; in the EEA, your national authority)

You can export your data and delete your account directly in the app (Settings → Account). For everything else, email info@focusnow.ai — we respond within 30 days.

15. Children's Privacy

FocusNow is not intended for use by children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you through the app or via email before the changes take effect. Your continued use of FocusNow after the changes become effective constitutes your acceptance of the updated policy.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

• Email: info@focusnow.ai
• Response time: within 30 days of receiving your request

Data Controller: FocusNow — Barbaros Zongur, Turkey. This policy is provided in English and Turkish; if the two versions conflict, the English version prevails.