Privacy policy

Short version

WannaFocus stores what you type in (tasks, schedule, check-ins, groups) and how long your focus sessions ran. It never reads your screen, your keystrokes, or your browsing history. Nothing is sold, and nothing is shared with advertisers.

What we store

• Account: your email address and sign-in identity, handled by Supabase Auth. If you sign in with Google we receive your email and display name only.
• What you write: tasks, planned times, check-ins, reflections, group names and descriptions, your character choices and your one-line introduction.
• Focus sessions: start time, end time, pauses, and — if you connect the desktop app — measured focus minutes and a coarse app category (for example, browser or editor). Never window titles, never file names.
• Groups: which groups you joined, and the sessions you chose to share with them.
• Devices: a pairing record for the desktop app (device name, last seen time) and, if you enable notifications, a push subscription for that browser.
• The browser pause feature: the domains you typed in yourself, plus the browser family (for example, Chrome or Safari) and the time that browser last reported the extension. Browser reports older than 30 days are omitted from the connected-browser list and removed when another report is received.
• Technical diagnostics: production error type, stack trace, release version, a sanitized route, and a random request ID. These diagnostics go to Sentry so we can find failures. Request bodies, query strings, cookies, authorization headers, account identity, user-entered error text, session replay, and browsing history are excluded.

What we never collect

Keystrokes, screen contents, screenshots, window titles, file names, browsing history, location, or contacts. The desktop app reports only the foreground application name and only while a session is running. The browser pause feature is different: while you keep it enabled, it checks only the sites you chose and may pause them whether or not a focus session is running. A paused page's return URL stays in the browser fragment and is never included in an HTTP request, server log, or API payload; the browser removes it from the pause page's address after reading it. We never store that URL or build a browsing history.

Who can see what

• Your tasks, times, reflections and measured minutes are yours. Group members do not see them.
• Group members see: your display name, your character, your introduction, the goal text of a session you chose to share, and your check-in times.
• Session sharing is a choice you make when you start a session. If you keep a session private, it never reaches a group.

Where it lives

Data is stored in Supabase (Postgres) and served through Vercel. Sanitized production error diagnostics are processed by Sentry. Row-level security is on: a row is readable only by its owner, or by members of a group it was explicitly shared with. Traffic runs over HTTPS.

How long we keep it

Product data remains until you delete it. Deleting a task, a group, or your account removes the underlying rows. Ask us to delete your account and everything attached to it goes with it. Sanitized Sentry error events use the current 30-day Developer-plan retention window and are not used as product history.

Your controls

• Turn off session tracking in Settings — the timer keeps working, nothing is measured.
• Unpair the desktop app at any time; measurement stops immediately.
• Leave a group and your shared sessions stop appearing to it.
• Turn off notifications in Settings, which also removes the push subscription for that browser.
• Turn off the browser pause feature or withdraw extension consent to stop applying its rules. Removing the extension also stops browser reports.
• Email us for an export or a full deletion.

Children

WannaFocus is not directed at children under 14. If you believe a child has an account here, email us and we will remove it.

Changes

If this policy changes in a way that affects what we store or who can see it, the date below changes and we say so in the product.

Contact

Privacy questions, exports, and deletion requests: chae990616@gmail.com. We answer from the same address.