Privacy Policy

1. Who We Are

SteadyFocus is an independently developed productivity app. If you have any questions about this policy or want to exercise any of your privacy rights, please contact us at: [email protected]

2. What Data We Collect

2.1 Data stored on your device (local only)

The following data is created and stored exclusively on your device using a local on-device database (Isar). It is never uploaded to our servers or any cloud service:

• Your habits — names, categories, colour preferences, and icon choices
• Your tasks — titles, due dates, and completion status
• Focus session history — duration, date, and associated habit or task
• Daily and overall completion statistics
• AI Coach responses — Weekly Briefings, Morning Primers, Momentum Rescues, and Friction Detector results are cached locally after generation
• Your user profile preferences and app settings
• Disclaimer acceptance record — a timestamp confirming you acknowledged the AI content disclaimer
• Pattern Scout query cache — your most recent search queries are stored locally to avoid duplicate API calls within the same day. This data never leaves your device.

2.2 Data stored in the cloud (Firebase / Firestore)

A small amount of data is stored in Firestore, tied to your Firebase UID:

• Firebase UID — a unique identifier generated on sign-in
• Google display name, email address, and profile photo URL
• Subscription tier — whether you are on the Free, Plus, or Pro plan
• Scout credit balance — the number of AI search credits remaining
• Disclaimer acceptance timestamp
• AI usage logs — a timestamp and rate-limit key per intervention type, used to enforce cooldown periods. These logs do not contain the content of your queries.
• Daily search count — a rolling counter reset each day for Pro subscribers

2.3 Data processed transiently (not stored by us)

The following data is sent to our Cloud Functions to generate AI responses. It is processed in memory and is not stored in our database:

• Habit context — a list of your existing habit names sent alongside your query solely to avoid duplicate suggestions
• Habit Coach data — anonymised statistics such as streak lengths, completion rates, habit names, and missed-day counts used to generate personalised coaching messages

2.4 Data we never collect

• Location data
• Contacts, calendar, or other device permissions
• Device advertising identifiers
• Health or biometric data
• Financial account information (purchases are handled entirely by Google Play and RevenueCat — we never see your payment details)

3. How We Use Your Data

We use the data described above for the following specific purposes and no others:

• To authenticate you and maintain your session across app launches
• To enforce rate limits and cooldown periods on AI features, preventing abuse and ensuring fair access
• To track your subscription tier and credit balance so the correct features are available to you
• To generate personalised AI habit suggestions and coaching messages
• To record that you accepted the AI content disclaimer, as required by our terms
• To process subscription purchases and restore them when you reinstall the app

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

4. Third-Party Services

Firebase (Google LLC)

Firebase provides authentication, our Firestore cloud database, and Cloud Functions. Firestore stores only the fields listed in Section 2.2. Cloud Functions process your AI requests server-side so the AI API key is never exposed to your device. Firebase App Check (Play Integrity on Android) verifies that requests come from a legitimate, unmodified version of SteadyFocus — it does not collect personal data.

Firebase Privacy Policy

Google Gemini API (Google LLC)

Gemini powers the Pattern Scout habit suggestion feature and all Habit Coach interventions. Your query text and anonymised habit statistics are sent to Gemini via our Cloud Functions. All prompts include a hard system boundary — the AI is instructed to suggest habit structures only and must never provide medical, financial, dietary, or any professionally licensed advice.

Google Cloud AI Data Use

RevenueCat

RevenueCat manages in-app purchases and subscription status. Your payment information is processed entirely by Google Play and is never visible to us or RevenueCat.

RevenueCat Privacy Policy

5. Data Storage and Retention

Local device data

All habit, task, focus session, and coaching data is stored on your device using the Isar local database. This data remains on your device until you uninstall the app or manually delete it within the app. We have no access to this data.

Firestore cloud data

Your Firestore record (UID, tier, credits, usage logs, and disclaimer timestamp) is retained for as long as your account is active. If you request deletion (see Section 8), we will delete your Firestore record within 30 days.

AI query data

We do not store the text of your AI queries in our own database. Queries are processed in Cloud Functions and discarded. Google may retain API request data subject to its own retention policies for the Gemini API.

6. AI-Generated Content Disclosure

SteadyFocus uses AI to generate habit suggestions and productivity coaching messages. Key points:

• AI-generated content is for informational and motivational purposes only.
• The AI is technically constrained to suggest habit structures and routines. It is explicitly prohibited from providing medical dosages, clinical advice, specific financial instruments, dietary prescriptions, or any advice that requires a professional licence.
• AI suggestions are not a substitute for advice from a qualified doctor, therapist, financial advisor, or other licensed professional.
• The app is rated 18+ on Google Play. AI features are not intended for use by minors.

These constraints are enforced at the system level in our Cloud Functions code — not merely as guidelines — but no AI system is perfect. Always apply your own judgement to AI-generated suggestions.

7. Purchases and Payment Data

All payment processing is handled by Google Play and RevenueCat. We never see or store your payment card information. When you make a purchase, Google Play processes the payment, RevenueCat validates the receipt, and we update your subscription tier in Firestore.

8. Your Rights and Choices

Access

Your local data is accessible directly within the app at any time.

Deletion

You can delete all local data by uninstalling the app. To request deletion of your Firestore cloud record, you can delete your account directly from within the app in Settings, or email us at [email protected] with the subject line "Data Deletion Request". We will process your request within 30 days.

Portability

Your local habit and task data can be exported from within the app as CSV (habit history, focus sessions) or JSON (full backup). Firestore data is minimal (see Section 2.2) and can be provided on request.

Opting out of AI features

AI features are optional within the app. You can use SteadyFocus as a fully offline habit tracker without ever using Pattern Scout or Habit Coach. No AI queries will be sent if you do not use these features.

9. Children's Privacy

SteadyFocus is rated 18+ on Google Play and is not directed at children under the age of 18. We do not knowingly collect any data from minors. If you believe a minor has used the app and you have concerns, please contact us at [email protected].

10. Data Security

We take reasonable steps to protect your data:

• All communication between the app and Firebase is encrypted in transit (TLS).
• Firebase App Check (Play Integrity) is enforced in production to block requests from modified or spoofed versions of the app.
• AI API calls are routed exclusively through server-side Cloud Functions — the AI API key is never included in the app binary or exposed to the client.
• Rate limiting and cooldown enforcement happen server-side, preventing automated abuse.

No system is perfectly secure. We cannot guarantee absolute security, but we are committed to following industry best practices.

11. Changes to This Policy

If we make material changes to this Privacy Policy, we will notify you within the app before the changes take effect. The updated policy will also be posted with a revised effective date. Continued use of SteadyFocus after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us:

• Email: [email protected]
• Developer: David Hildebrand, Orivent Studios
• Location: Cape Town, South Africa

We aim to respond to all privacy-related enquiries within 5 business days.

13. Request Data Deletion

To request deletion of your SteadyFocus data, you can delete your account directly in the app under Settings, or email us at [email protected].

Subject line: "Data Deletion Request – SteadyFocus"

Please include the device you used, the approximate date of first install, and your Firebase UID (optional — found in app Settings if available). We will process your request within 30 days.

What gets deleted:

• Your Firebase user record
• Firestore data (tier, credits, AI usage logs, disclaimer timestamp)
• Cached AI responses linked to your account
• Google account link (Firebase Auth record)
• Name and email stored in Firebase Auth

What may be retained:

• Purchase records held by RevenueCat (governed by their privacy policy)