Privacy Policy
Last updated 2026-08-01
This page describes what FlipFocus — the website at flipfocus.ca and the FlipFocus iOS and Android apps — actually stores, who else touches it, and how to delete it. It covers what the software does today; when that changes, this page changes with it.
You can use FlipFocus without an account
Every timer, breathing guide, and ambient sound works signed out. Without an account, your settings stay in your browser or on your device and nothing about your sessions is sent to us. An account exists so your streaks, session history, and settings follow you between devices.
What we store when you do have an account
| Account | Your name, email address, and — if you signed up with a password — a bcrypt hash of that password. We never store the password itself. |
|---|---|
| Google sign-in | If you use "Continue with Google", we verify the token Google issues and store your Google account ID, name, email address, and profile picture URL. We never receive your Google password and request no other Google data. |
| Focus sessions | One record per session: the mode (Pomodoro, meditation, or focus), the phase, its length in minutes, whether you completed it, the cycle number, start and end times, and any note you typed yourself. |
| Settings | Your timer lengths, breathing pattern, ambient sound and volume, completion-sound and clock-style preferences, and whether you want the weekly email. |
| Time zone | Your device's IANA time zone (e.g. "Asia/Kolkata"), so streaks and "today" are counted in your local day rather than UTC. Browsers send it in a cookie; the mobile apps send it as a request header. |
| Subscription | Your plan (free or Pro), your Stripe customer and subscription IDs, and a log of Stripe billing events (event type, amount, currency, subscription status). No card numbers — those never reach our servers. |
That is the whole list. FlipFocus asks for no contacts, no location, no microphone or camera access, and no advertising identifier, and it shows no ads. The mobile apps use notifications only to tell you a session ended, generated on your own device — there is no push service and no push token.
Staying signed in
Signing in issues a token that identifies your account for seven days. On the web it is kept in your browser's local storage and in a cookie the site itself reads; in the mobile apps it is kept in the device's encrypted keystore (Keychain on iOS, Keystore on Android). Signing out removes it.
Who else is involved
The database that holds your account, sessions, and settings.
Hosts the website and the API the apps talk to, and therefore processes the requests your device makes.
Handles Pro payments. Card details are entered on Stripe's own checkout and billing portal pages and are never sent to us.
Verifies your identity when you choose "Continue with Google". Only used if you pick that option.
Sends the emails described below — password resets and the optional weekly recap.
Product analytics on the website: page views and a small set of named events (a session started or recorded, sign-up, login, upgrade steps). Signed-in visits are tagged with your account ID. The mobile apps include no analytics at all.
Each of these gets only what it needs to do its job. We do not sell your data, and we do not share it with anyone for advertising.
We email you in two situations: when you ask for a password reset, and — if you leave it switched on — once a week with your Focus Fingerprint, a recap of your own session data. You can turn the weekly recap off any time under Settings → Email; password-reset emails only ever go out when you request one.
Deleting your account
You can delete your account yourself, from inside the app:
- On the web: Settings → Privacy & Data → Delete my account.
- In the iOS or Android app: Settings → Privacy & Data → Delete my account.
Confirming removes your account record and every focus session attached to it, and signs you out everywhere. If you have an active Pro subscription it is cancelled first, so the deletion can never leave a card being charged. Two things intentionally survive: the log of past Stripe billing events, which we keep as a payment record and which holds no card details, and whatever Stripe itself is required to keep about the payments. Deletion is immediate and cannot be undone — export or note down anything you want to keep first.
Getting a copy, or asking a question
Your full session history is visible any time under Focus History. For anything else — a copy of your data, a correction, or a question about this policy — email support@flipfocus.ca.
Children
FlipFocus is a general-audience productivity tool and is not directed at children. We don't knowingly create accounts for children; if you believe one exists, email us at the address above and we'll remove it.
Changes to this policy
When what the app collects changes, this page is updated and the date at the top moves with it.
FlipFocus is a focus and mindfulness tool, not a medical or mental-health service.