Skip to main content
← Back to sign up

Privacy Policy

Last updated: April 2026

1. Who we are

Focus is operated by Jaap de Bruijne (data controller). Contact: jaapdebruijne@gmail.com. We are in Open Alpha and currently not subject to a formal DPA agreement, but we handle your data responsibly.

2. What data we collect

  • Account data: your email address and username, required to create and identify your account.
  • Task data: task names, descriptions, field values, and scheduling information you enter while using Focus.
  • Audit logs: a record of significant actions in your workspace (e.g. tasks created, completed, rolled forward) for admin review.
  • Consent record: the timestamp at which you accepted this Privacy Policy, stored on your user record.

3. Why we collect it

All data collected is used solely to provide the Focus service. We do not sell your data, share it with third parties for marketing, or use it to train AI models.

4. Data retention

  • Tasks: automatically deleted after 12 months of inactivity.
  • Departed users: email address is wiped after a 7-day grace period following account removal.
  • Audit logs: retained for 90 days, then purged.

5. Hosting and storage

Focus is hosted on Vercel (with EU routing where applicable) and uses a Neon/AWS managed Postgres database. We apply field-level encryption to fields marked as containing personally identifiable information (PII). The full database is not encrypted at rest.

6. Your rights

Under GDPR you have the right to access, correct, or delete your personal data. To exercise any of these rights, email us at jaapdebruijne@gmail.com. We will respond within 30 days. You may also request a copy of the data we hold about you.

7. Cookies and analytics

Focus uses PostHog for product analytics. PostHog may set cookies to distinguish sessions. No advertising cookies are used. You can opt out by contacting us.

8. Changes to this policy

We will update this page when the policy changes and note the date above. Continued use of Focus after a policy change constitutes acceptance of the updated terms.

9. Detailed classification and retention

For our full data classification, retention windows per database field, and sub-processor list, see docs/security/data-classification.md in our public repository.