1. What we collect
| Category | What it includes | When it is created |
|---|---|---|
| Account | Your email address and the display name you choose. Your password is stored hashed by our auth provider (Supabase Auth) and is never readable by us. | When you register or sign in. |
| Your content | Gardens, flowers (tasks) and focus sessions — durations, timestamps and the garden each session belongs to. | While you use the app. |
| Subscription | Whether you hold an active subscription, the plan you bought, and the related purchase and renewal events. | When you buy or restore a subscription through the App Store or Google Play. |
| Device & technical | Device identifier, app version and platform, plus a diagnostic log written on your device if a sync fails. | While the app is running. |
2. How we use it
- Core features — saving and showing your gardens, flowers and focus history.
- Cloud sync (a PRO feature) — once you switch sync on, we copy that content to the cloud so you can carry on from another device.
- Subscription checks — confirming whether your account has unlocked PRO.
- Support and troubleshooting — the diagnostic log stays on your device; it is not uploaded unless you send it to us.
- Account security — preventing fraud, account theft and abuse.
We never use your data for advertising or cross-app tracking, and we never sell or rent it to anyone.
3. Who processes your data
We rely on a small number of processors. Each one only touches your data to the extent needed to provide its service to us:
| Service | Purpose | Data involved |
|---|---|---|
| Supabase | Database and account hosting. | Stores your account, gardens, flowers and focus sessions. |
| PowerSync | Two-way sync between your device and the cloud. | The content you choose to sync, plus your device identifier. |
| RevenueCat | Managing subscription status and entitlements. | Subscription status, purchase events and an app user identifier (no IDFA). |
| Apple | Processing App Store payments and subscriptions. | Apple handles the transaction; we never see your payment card details. |
| Google Play | Processing Google Play payments and subscriptions. | Google handles the transaction; we never see your payment card details. |
Other than where the law requires it — a valid court order, for example — we do not pass your data to anyone else.
4. How long we keep it, and how to delete it
- Your data is kept for as long as your account exists.
- You can delete everything at any time in the app with Profile → Delete Account. This permanently removes your account, all cloud data (gardens, flowers and focus sessions) and the copy on your device. It cannot be undone.
- Signing out on its own deletes nothing — your local and cloud data both stay put.
- Deleting your account does not cancel a subscription: auto-renewing plans are billed by the store, so cancel it in the App Store or Google Play — see the Terms of Use.
- With sync switched off, anything new stays on your device only.
5. Security
- Data is encrypted in transit with HTTPS/TLS.
- The on-device database is encrypted at rest with SQLCipher.
- We take reasonable technical and organisational measures to protect your data, but no system can be guaranteed to be absolutely secure.
6. Children
Beefocus is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete the account and its data.
7. Your rights
You can access, correct (edit a garden, a flower or your display name) or delete your data and your account directly in the app. For anything else — an export, or a question about this policy — email focalhot@foxmail.com and we will deal with it within a reasonable period.
8. Changes and contact
If this policy changes we will publish the new version on this page with a new effective date. Material changes will also be flagged in the app.
Questions or requests about your data? Email focalhot@foxmail.com.