Privacy Policy

Focusity ("the app", "we") is a study planner for students. This document explains what data we collect when you use the website or the app, why we collect it, and how you can delete it. We do not sell data to third parties and we do not show advertising.

Who is responsible for your data

The data controller is Meir Vaknin, the developer of Focusity (ID / business no. 315057026, 12 Amos Yarkoni St., Be'er Sheva, Israel). For anything about privacy, email meir.vaknin02@gmail.com.

Do you have to give us this data?

No. No law requires you to give us any data; everything we keep, you chose to give. Without an email address (or a Google or Apple account) you can't open an account, and without a timetable, exams or assignments the app can't build a study plan. Everything else, such as calendar sync, notifications, scans, practice, flashcards and the smart assistant, is up to you.

What we collect

• Account details — your email address, and your first and last name if you registered with an email and password; or your name, email and profile picture if you registered with Google; or your name and email if you registered with Apple (if you chose to hide your email, Apple gives us a relay address instead).
• Your study data — the courses, assignments, exams, grades, schedule, study sessions, practice questions and flashcards, and preferences (calendar display and filters) that you create or import in the app.
• Files you import — timetable files (CSV/Excel) and calendar files (ICS) are processed directly in your browser and are never sent to our server. PDF files — a timetable, an exam schedule or a grade sheet — are sent to our internal PDF processing service purely to extract the data, and are not retained after processing — only the structured data (such as course name, date and time) is saved to your account.
• Information about import attempts — so that we can fix file detection when it fails, we keep information about each import attempt: what kind of file it was, whether detection succeeded, how many rows were recognised, and the column labels in the header row (for example "course name", "day", "time"). We do not keep the contents of the rows themselves, the file name, or your course names and grades. Email addresses, phone numbers and ID numbers are stripped from the column labels automatically before anything is stored.
• A file you chose to share after a failed import (with your consent only) — if an import fails, the screen offers you a checkbox to send us the file itself so we can improve detection. This is entirely optional, the box is never pre-checked, and without checking it the file stays on your device. A file you do send is kept in private storage, used only to fix file detection, shared with nobody, and deleted automatically after 30 days (or immediately if you delete your account). A grade sheet is never sent to us this way — the option does not exist in the grades importer.
• Notifications and reminders — if you allow notifications in the mobile app, we store your device's notification ID (push token) and device type, linked to your account. Our server uses it to send the reminders you have turned on: before classes, events and exams, before deadlines, tomorrow's study plan, a streak about to break, a weekly recap and a daily quote. Reminders pass through Expo's notification service and from there through Apple's or Google's, and they include the name of the event or assignment they remind you about. You can turn off each kind of reminder, or all of them, in Settings → Reminders. The notification ID is deleted when the device stops receiving notifications, or when you delete your account.
• Moodle connection — if you connect your Moodle calendar, we store the export link you copied from Moodle and the name of your institution, and our server uses it to fetch your assignments and events once a day. For institutions that block our server, the link is stored on your phone only, and the phone fetches the calendar itself. Disconnecting deletes the link.
• Usage information — to understand where the app struggles, we store individual events linked to your account: which way of adding your schedule you chose at sign-up and whether it worked, requests for features that do not exist yet, and which steps of the semester-pass screen were opened and tapped (no payment details). We also store the time zone your device reports (for example "Europe/London"), to know which countries our students study in — no precise location, no IP address. If you answer "Where do you study?", we store the country, and your school if you add it, to fit grades and the calendar to how your school works. On the website — in a browser only, not in the app — we use Vercel Web Analytics for anonymous visit counts, without cookies. If you reached the website from a link in an article or a campaign, your browser keeps (in localStorage, not a cookie) where you came from: the source, the campaign name and the first page you saw. If you sign up in that browser, this is saved once to your account, so we know which articles bring people in. It contains nothing that identifies you.
• Feedback you send — if you answer a question in the app (for example "what stopped you?" or a satisfaction survey), we store your answer and anything you wrote, linked to your account.

Why we use your data

• To run the app itself — to show your schedule, assignments and progress.
• To remember your preferences (calendar view, filters) across devices.
• To send the reminders you have turned on in the app.
• To understand which parts of the app work and which do not, and to fix them.
• For technical support, if you contact us.

We do not use your data to train artificial-intelligence models, and we do not run advertising tracking of any kind.

Where your data is stored

Account and study data are stored on Supabase (secure cloud infrastructure, with row-level access control so that only you can reach your own data), on servers in Singapore. The website is hosted on Vercel.

This means your data is transferred outside Israel, to the providers that run the service, listed under "Sharing with third parties". Each of them has committed in its data processing terms to protect the data, use it only to provide its service to us, and not pass it on. By signing up you agree to this transfer.

Google Calendar connection and data protection

If you choose to connect your Google Calendar (Settings → two-way Google Calendar sync), Focusity requests one permission only: https://www.googleapis.com/auth/calendar.events. The connection is entirely optional, happens only after your explicit consent, and can be disconnected at any time.

What we read and write

• We access your primary calendar only, and only events in a rolling window from now to 90 days ahead.
• From each event we read only the title, start time and end time — so we know when you are busy, and the scheduling engine does not place a study block on top of an existing event.
• In the other direction we create, update and delete only events that Focusity itself created, and there too we send only a title and times.
• We do not read and do not store attendees, guest lists, event descriptions, attachments, past events, or any calendar other than the primary one.

How the data is protected

• Encryption in transit: all traffic to Google and to our servers uses HTTPS/TLS exclusively.
• Encryption at rest: the database is encrypted at rest on Supabase infrastructure.
• Credential isolation: the OAuth refresh token is stored in a dedicated table protected by Row Level Security with no client-facing access policy at all — meaning the browser and the app cannot read it. Only authorized server-side functions can access it.
• The OAuth secret never reaches the browser: the authorization-code exchange with Google happens entirely server-side.
• Separation between users: every row is tied to your user ID, and no user has access to another user's calendar data.

Retention and deletion

• Disconnecting the calendar (Settings → tap the sync row) immediately deletes the stored refresh token from our servers and stops all further syncing.
• Deleting your account permanently removes the connection and all associated data.
• We do not sell calendar data, do not use it for advertising, and do not use it to train artificial-intelligence or machine-learning models.

Sharing with third parties

We do not sell or rent your data. Data is shared only with the providers that run the service, and only as far as is needed to operate the app:

• Supabase — data storage.
• Vercel — website hosting, and the anonymous visit counts on the website.
• Our internal PDF processing service — extracting data from PDF files.
• Expo, and through it Apple's and Google's notification services — sending reminders to your phone.
• Resend — sending email: account verification and password resets.
• Anthropic — the smart assistant, the smart scan, past-exam practice and flashcards, and only when you use them (details below).
• RevenueCat — managing purchases of Focusity Premium. The payment itself is made with Apple or Google (details below).

Smart scan with AI

The smart scan only runs when you choose to: it happens when you take a photo of a document or upload one on the scan screen. The file you chose is sent, to be read, to the AI service of Anthropic (the Claude model), which operates outside Israel. We never store the file — not before it is read and not after — and all that is saved to your account is the rows you approved on the review screen.

We ask the model not to return identifying details such as a name or an ID number, even when they appear in the document itself (for example on a grade sheet). For each scan we keep an operational record only: when it ran, what kind of document it was, whether it worked and how many rows came back — never the document's content. The same record is how we know whether you have already used your free timetable scan.

If you would rather a document did not go to an outside service, simply don't use the smart scan: regular file imports (Excel, CSV, PDF) run on our own services only.

The smart assistant

The smart assistant (up to 10 smart actions a month for free, unlimited with Premium) answers questions from your own planner. When you send it a message, the following goes to the AI service of Anthropic (the Claude model), which operates outside Israel: your message, the recent messages in the same conversation, and the details from your planner it needs to answer — your first name, your courses (including the lecturer's name), your classes and exams with their times and locations, your assignments and due dates, the grades you entered, and your preferred study hours.

The conversation itself is kept only in the open window on your device, and is gone when you close it. On our side, each message leaves an operational record only — when it was sent, the length of the question, whether it worked and technical usage figures — never the content of the question or the answer. That record is also how the 10 free smart actions a month and Premium's usage count are kept.

The assistant changes nothing in your planner without your approval: every change it suggests is shown first as a card, and saved only after you tap “Confirm”. If you would rather this information did not go to an outside service, simply don't use the assistant — the rest of the app works without it.

Past-exam practice and flashcards

These two tools also work with Anthropic's AI service (the Claude model), which runs outside Israel, and only when you use them:

• Practice from a past exam — the file you upload (a PDF or a photo) is sent to be read. The questions found in it are saved to your account, together with the hints and solutions created when you open a question. The file itself is not stored: we keep only an identifying number for it, so we don't read it twice.
• Flashcards and quizzes — the file (slides, a PDF or a photo) is sent to be read, and the cards and quiz questions are saved to your course, with the file name as the set's name. The file itself is not stored.

The answers are generated automatically and can contain mistakes. That is why each card shows the page it came from, and each solution is checked twice. "Pokey plans my day" is worked out on your device and is not sent to any outside service.

Buying Focusity Premium

Payment for Focusity Premium is made with Apple (on the App Store) or Google (on Google Play), not with us — your card details never reach us. So that Premium opens on the right account, the purchase goes through RevenueCat, a service for managing in-app purchases, which receives an internal ID for your account (not your name or email).

We keep a record of each purchase: which store, which product, the store's transaction ID, when it was bought, until when it is valid, and whether it was cancelled or refunded — together with the notice we received about the purchase. The record is used to open the pass, handle refunds and answer support requests, and it is deleted when you delete your account.

Your rights

• To see your data — most of it is shown in the app itself. For everything we hold about you, email us and we'll send it within 30 days.
• To correct it — almost everything can be edited in the app. Anything that can't, we'll fix on request by email.
• To delete it — deleting your account deletes all of it (details below).
• To stop reminders — in Settings → Reminders, or by turning off notifications on your phone.

Deleting your account and data

You can delete your account and all data associated with it at any time, via Profile → Delete account in the app. This permanently deletes all your courses, assignments, schedule and progress, and cannot be undone.

Children

Focusity is intended for university students and high-school students preparing for final exams, and is not directed at children under the age of 13. Users under 18 should use the app with a parent's knowledge, and buying a subscription requires a parent's consent.

Changes to this policy

If we make a material change to this policy, we will update the date at the top of this page.

Contact us

For privacy questions, you can reach us by email: meir.vaknin02@gmail.com