Privacy policy

Last updated: February 27, 2026

1. Who we are

SingleFocus ("we," "us," "our") operates the SingleFocus web application at app.singlefocus.co and the marketing site at singlefocus.co. This policy explains how we collect, use, and protect your personal data when you use our services.

2. Data we collect

We collect the minimum data necessary to provide and improve SingleFocus:

  • Account data — Email address and password (hashed) when you create an account.
  • Task data — Tasks, projects, tags, notes, and other content you create within the app. This is your data and remains yours.
  • Usage data — Anonymous, aggregated analytics (page views, feature usage) to understand how the app is used. We do not use third-party tracking scripts.
  • Behavioral data — Task completion timestamps, defer patterns, and workflow habits. This data powers the optional smart features (focus suggestions, productivity rhythm, energy lens). It is processed per-user and never aggregated across users or shared externally.
  • Device data — Browser type, operating system, and screen size for compatibility and debugging purposes.

3. How we use your data

  • To provide, maintain, and improve the SingleFocus service.
  • To send transactional emails (account verification, password resets, optional digest notifications you control).
  • To respond to support requests.
  • To detect and prevent abuse or fraud.
  • To power optional smart features (focus suggestions, productivity insights, task enrichment) using on-device behavioral models. When you enable AI suggestions in Settings, task titles and project names may be sent to our AI provider (Anthropic) to generate enrichment suggestions and focus reasons. This is off by default and can be disabled at any time in Settings.

We never sell, rent, or share your personal data with third parties for marketing purposes.

4. Data storage and security

Your data is stored on servers provided by Supabase (hosted on AWS infrastructure). All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We follow industry-standard security practices including parameterized queries, row-level security, and regular dependency audits.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, all associated data (tasks, projects, notes, preferences) is permanently deleted within 30 days. Backups containing your data are purged within 90 days.

6. Your rights

Under regulations including the GDPR (EU/EEA/UK) and CCPA (California), you may have the right to:

  • Access — Request a copy of all data we hold about you.
  • Rectification — Correct inaccurate personal data.
  • Erasure — Request deletion of your account and all associated data.
  • Portability — Export your data in standard formats (JSON, CSV, or Markdown).
  • Objection — Object to processing of your data for specific purposes.

To exercise any of these rights, email us at hello@singlefocus.co.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. No cookie consent banner is needed because we don't use non-essential cookies.

8. Third-party services

  • Supabase — Database hosting and authentication.
  • Vercel — Application hosting and deployment.
  • Anthropic — AI features (task enrichment, focus reasons, voice correction). Only activated when you enable AI suggestions in Settings. Task titles and project names are sent; full task notes are not. Subject to Anthropic's privacy policy. Anthropic does not use your data to train models.
  • Browser push services — Push notifications are delivered via your browser's built-in push infrastructure (Google FCM for Chrome, Mozilla autopush for Firefox, Apple APNs for Safari). Only activated when you enable push notifications. We send notification content (task title, due date); your browser vendor routes it to your device.
  • Google Fonts — Font delivery on the marketing site (subject to Google's privacy policy). The app itself uses self-hosted fonts.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking service.

9. Children's privacy

SingleFocus is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via email to registered users. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related questions or requests, email hello@singlefocus.co.