Privacy Policy

1. Scope and the short version

This Privacy Policy explains how FocusCurve ("we," "us," or "our"), operated by Daniela Šimková, handles information when you use the FocusCurve mobile application (the "App"), visit focuscurve.app (the "Website"), or contact us.

2. Health and personal records kept on your device

The following categories are designed to remain in the App's local database and are not sent to us:

• medication names, formulations, dose amounts, and dose times;
• caffeine records and saved drinks;
• symptoms, side effects, mood, journal entries, notes, and dose ratings;
• sleep-related entries and estimated medication or caffeine timelines;
• body weight, metabolism preferences, onboarding answers, and treatment-related settings;
• medication inventory, regimens, rest days, vital logs, and appointment notes; and
• notification schedules and the contents of local exports or backups you create.

The App marks its health-data database and migration snapshots as excluded from iCloud Backup and Finder/iTunes device backups on Apple platforms. You can create an encrypted export and choose where to save or share it. Once you send or store an export outside FocusCurve, the destination you choose controls it.

FocusCurve has no server copy from which we can recover local records. Deleting the App or using Delete All Data may permanently erase them unless you retained your own export.

3. App Store purchases and RevenueCat

Apple processes purchases. FocusCurve usesRevenueCat to show the current offering, verify purchases, restore access, and determine whether FocusCurve Plus is active.

For those purposes, Apple and RevenueCat may process:

• a randomly generated RevenueCat App User ID;
• App Store receipt and transaction information;
• product identifier, entitlement status, purchase type, renewal state, and expiration information;
• original application version, used to recognize eligible prior purchasers; and
• technical purchase diagnostics such as platform, app version, and SDK information.

FocusCurve does not send medication or other health records to RevenueCat, does not identify users to RevenueCat by email, and does not join the RevenueCat identifier with the App's product-analytics identifier. Purchase data is used to perform the purchase contract, restore access, prevent entitlement errors, and meet applicable accounting or legal obligations. SeeRevenueCat's Privacy Policy.

4. Optional pseudonymous product analytics in the App

The App asks for your explicit choice before enabling product analytics. It is off by default, is not required for free or paid features, and can be changed at any time in Settings. When enabled, FocusCurve sends a deliberately small allow-list of product events to PostHog's EU service.

The allow-list is limited to coarse events such as:

• which approved top-level screen was viewed;
• whether onboarding or a demo step was completed or skipped;
• whether a Plus paywall was shown or dismissed and the generic place from which it opened;
• whether a locked feature was tapped and the coarse entitlement tier at that moment; and
• a fixed-choice reason voluntarily selected in a paywall-exit or canceled-trial question; and
• whether this installation first observed a trial start, a later trial-to-paid conversion, or a direct Plus purchase, together with only a coarse plan tier such as annual, monthly, lifetime, or unknown.

Each event is associated with a random pseudonymous installation identifier and may include a pseudonymous session identifier. In addition to the FocusCurve-defined properties above, the PostHog mobile SDK adds technical metadata such as the App name and namespace, version and build, SDK version, operating system, device manufacturer, model and type, locale and timezone, network connection type, TestFlight, emulator or sideload status, and timestamps. This metadata is not taken from your health records. FocusCurve does not call PostHog's identify function or attach your name or email address. Person profiles, session replay, automatic screen or lifecycle capture, feature-flag events, PostHog surveys, logs, and PostHog error tracking are disabled in the App.

FocusCurve-defined event names and custom properties cannot contain medication, dose, caffeine, symptom, mood, side-effect, sleep, note, inventory, body-weight, concentration, email, purchase receipt, RevenueCat identifier, or free-text values. Survey answers are fixed categories; the canceled-trial answer does not include the product, purchase date, cancellation timestamp, or subscription identifier. Conversion events do not contain the raw product identifier, price, currency, receipt, or transaction identifier.

Like any internet service, PostHog receives the IP address needed to accept the network request. Our PostHog project is configured to discard client IP data from event storage, and its GeoIP enrichment transformation is disabled. FocusCurve does not request device location for analytics or add IP-derived city, postal code, latitude, or longitude to App analytics events.

Turning analytics off stops new FocusCurve events and opts the SDK out. Delete All Data and backup restore rotate the pseudonymous analytics identifier and leave collection disabled. A previously captured event that was queued while you had consent and were offline may still be delivered after reconnection because the pinned iOS SDK does not provide a supported way to purge that queue; no event created after opt-out is added to it.

We process this optional data only with your consent. PostHog is configured for EU data residency and no person profiles. See PostHog's Privacy Policy.

5. Crash reports and performance diagnostics

FocusCurve uses Sentry to detect crashes, diagnose technical failures, and measure sampled performance. Diagnostics may include stack traces, error type, breadcrumbs, app version, operating-system version, device type, timestamps, performance timings, and a pseudonymous installation or event identifier supplied by the SDK.

Default personally identifiable information is disabled. Before transmission, FocusCurve filters events, metrics, breadcrumbs, file paths, and structured fields for medication and health-related terms. Sentry is not intended to receive your health records, notes, email address, or full local file paths. If a safety filter detects a sensitive value, it is removed, redacted, or the metric is dropped.

We process diagnostics under our legitimate interest in keeping FocusCurve safe and reliable. SeeSentry's Privacy Policy.

6. Website delivery and analytics

The Website currently does not load non-essential product-analytics SDKs. Cloudflare may process limited request and device information, such as IP address, requested page, browser type, and security signals, to deliver and protect the Website. It does not receive records from the App or medication and health information you enter there.

Website PostHog analytics is disabled. It will not be enabled unless the Website first provides an explicit consent choice that prevents PostHog from loading before opt-in and allows later withdrawal.

7. Feedback, surveys, and support communications

After an eligible paywall dismissal or a voluntarily canceled active trial, FocusCurve may show one optional question with fixed answers. An answer is sent to PostHog only when App analytics consent is enabled. Dismissing the question does not change your subscription, and the response is not joined to RevenueCat purchase data.

If you choose Feedback for Daniela, FocusCurve opens your external email application with a generic writing prompt and the App version. You can review, edit, or remove everything before sending. We receive your email address, message, and anything you choose to include only after you send it. Please do not include medication, dose, symptom, sleep, or note details in support email.

We use support communications to respond, diagnose the issue you report, and improve FocusCurve. We do not add support addresses to marketing lists or join them to PostHog or RevenueCat identities.

Website contact form

Opening the Website contact page loads resources from Web3Forms and hCaptcha, which may receive limited network and device information such as your IP address, browser data, and interaction signals to deliver the form and distinguish people from automated abuse. If you submit the form, it also sends your name, email address, selected subject, and message to Web3Forms so the message can be forwarded to us. Please do not include medication, dose, symptom, sleep, or other health details in the form.

We process the form data to answer the communication you request and use anti-abuse signals for our legitimate interest in protecting the Website. Web3Forms and hCaptcha may process information in the United States under their published safeguards. Web3Forms states that submissions are forwarded rather than stored as a form inbox, although server logs containing personal information may be retained for up to two months. SeeWeb3Forms' Privacy Policyand hCaptcha's Privacy Policy.

8. Information provided by Apple

Apple may provide aggregated App Store analytics such as downloads, proceeds, device categories, and regions. If you enable Share With App Developers in iOS settings, Apple may also provide diagnostics under Apple's privacy terms. We do not control Apple's collection. See Apple's Privacy Policy.

9. Sharing, processors, and international transfers

We do not sell personal information, share it for cross-context behavioral advertising, or use advertising networks.

Information is disclosed only as needed to:

• Apple and RevenueCat for purchases and entitlements;
• PostHog for optional App analytics;
• Sentry for diagnostics and performance monitoring;
• Cloudflare for Website delivery and security;
• Web3Forms for forwarding Website contact-form submissions;
• hCaptcha for protecting the Website contact form from automated abuse;
• email providers when you choose to contact us; or
• authorities or advisers when required by law, safety, or the defense of legal claims.

Providers may process data in the European Economic Area, United States, or other locations under their published safeguards and data-processing terms. PostHog App analytics uses its EU ingestion host. Website contact-form providers may process information in the United States. We select processors whose published commitments provide the same or equivalent protection for personal information described in this Policy and require them to process it only for the stated purposes.

10. Retention and deletion

• Local health records: retained on your device until you delete them, use Delete All Data, or uninstall.
• App product analytics: retained in the current PostHog project for up to one year under the provider plan, unless deleted or aggregated earlier. We may shorten this period as our product questions are resolved.
• Sentry diagnostics: retained while needed to investigate and resolve reliability or security issues, then deleted under the configured Sentry project retention.
• RevenueCat purchase records: retained as needed to provide and restore entitlements, prevent fraud, and meet legal or accounting obligations.
• Support email and contact-form messages: retained while resolving the request and any necessary follow-up, then deleted unless law or the defense of legal claims requires longer retention. Web3Forms states that server logs containing personal information may remain for up to two months.

Aggregated statistics that no longer identify a device or interaction may be retained to understand long-term product performance.

11. Your choices and privacy rights

You can:

• leave App analytics off or withdraw consent at any time in Settings;
• delete individual local records or use Delete All Data;
• export your local data before deletion;
• manage or cancel purchases through Apple;
• use browser controls to limit Website cookies or local storage; and
• ask us to access, correct, or delete personal information we control, such as support email or a known analytics identifier.

Because we do not have an account linking you to local health records, we cannot access or delete those records remotely. We may need reasonable information to locate a support message or provider record and verify a request.

Depending on where you live, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent, or complain to your local data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

12. Security and children's privacy

FocusCurve uses the operating system's app sandbox and device encryption for local storage, TLS for network transmissions, compile-time analytics allow-lists, identity separation between providers, and health-value scrubbing for diagnostics. No system is completely secure; keep your device protected and review any export or email before sharing it.

FocusCurve is intended for people aged 17 and over and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us so we can delete it.

13. Changes and contact

We may update this Privacy Policy when FocusCurve, its providers, or legal requirements change. We will update the date above and provide additional notice where required.

Data controller and operator: Daniela Šimková
Address: Ostrovec 163, 398 33 Ostrovec, Czech Republic
Privacy questions and rights requests: privacy@focuscurve.app
Product support: support@focuscurve.app
Website: https://focuscurve.app/privacy