Privacy Policy — Focus5
Last updated: July 3, 2026
RemoteKaro LLC ("we", "us", "the app") respects your privacy. This document explains what data the Focus5 app collects, why, and your rights regarding it.
1. Data we collect
| Category | Source | Why we collect it |
|---|---|---|
| Email address and authentication tokens | Supabase Auth, Google Sign-In | Create your account and keep you signed in |
| Name and profile photo | Google Sign-In | Show your account profile (only if you sign in with Google) |
| Purchase history and an anonymous purchase ID | RevenueCat | Manage your subscription and unlock premium features |
| Voice recordings | Brain Dump voice capture → AssemblyAI or Deepgram | Transcribe what you say into text |
| Transcribed text and extracted tasks | Brain Dump → OpenRouter (and its underlying model providers) | Turn your spoken words into structured tasks |
| App events and interactions | PostHog, Firebase Analytics | Understand how the app is used so we can improve it |
| Device and other identifiers | PostHog, Firebase Analytics | Analytics and basic abuse prevention |
| Approximate location (derived from IP address) | PostHog | Coarse, country-level usage analytics |
| Crash logs and diagnostics (device model, OS, app version) | Firebase Crashlytics | Diagnose and fix crashes |
| Your content — tasks, books (lists), and focus sessions you create | Supabase | Save and sync your data across your devices |
Voice Brain Dump. When you use the voice Brain Dump, your microphone audio is streamed to a speech-to-text provider (AssemblyAI by default, or Deepgram) to transcribe it, and the resulting text is sent to OpenRouter (and its underlying model providers) to extract tasks. This feature is optional — if you never use it, no audio or transcript is captured or shared.
2. How we use your data
- Authenticate you and secure your account.
- Save and sync the tasks, lists, and focus sessions you create.
- Provide the optional voice Brain Dump (transcription and task extraction).
- Process subscription purchases and grant premium access.
- Measure feature usage and app performance to improve Focus5.
- Diagnose crashes and errors.
3. Sharing
We do not sell your personal data. The third-party services below process data on our behalf or receive data to provide a feature you use:
- Supabase (Supabase, Inc.) — supabase.com/privacy
- Google Sign-In and Firebase (Google LLC) — firebase.google.com/support/privacy, policies.google.com/privacy
- RevenueCat (RevenueCat, Inc.) — revenuecat.com/privacy
- PostHog (PostHog, Inc.) — posthog.com/privacy
- AssemblyAI (AssemblyAI, Inc.) — assemblyai.com/legal/privacy-policy — receives your voice recordings for the Brain Dump feature.
- Deepgram (Deepgram, Inc.) — deepgram.com/privacy — alternative speech-to-text provider; receives your voice recordings when selected.
- OpenRouter (OpenRouter, Inc.) and its underlying model providers — openrouter.ai/privacy — receives the transcribed text to extract tasks.
4. Your rights
You can:
- Delete your account and all associated data in-app from Settings → Account → Delete account.
- Opt out of analytics in Settings → Privacy → Analytics.
- Request a copy of your data by emailing remotekarollc@gmail.com.
Data is fully purged within 30 days of deletion.
5. Security
Data is encrypted in transit using HTTPS/TLS. Sensitive values stored on your device (such as authentication tokens) are encrypted at rest using Android Keystore-backed AES-GCM. Our backend is hosted in the ap-northeast-1 (Tokyo) region. No method of transmission or storage is 100% secure, but we apply industry-standard safeguards.
6. Children
Focus5 is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we will delete it.
7. International transfers / GDPR
Focus5 is available worldwide, and your data may be processed in countries other than your own, including our Tokyo (Japan) region and our processors' regions. If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, restrict, or port your personal data, and to object to its processing. Our legal bases are: performance of a contract (providing the app), legitimate interests (improving and securing the app), and consent (analytics and the optional voice feature, where required). We rely on appropriate safeguards such as Standard Contractual Clauses for international transfers. To exercise these rights, email remotekarollc@gmail.com.
8. California residents / CCPA
If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. To exercise these rights, email remotekarollc@gmail.com. We will not discriminate against you for exercising them.
9. Changes to this policy
We will update this page when our practices change. The "Last updated" date at the top reflects the most recent change.
10. Contact
Privacy questions: remotekarollc@gmail.com. RemoteKaro LLC, Pakistan.