Privacy Policy

Who we are

Fwocus is operated by Galanthos Limited, a Hong Kong registered company. This policy explains how we handle personal information when you visit fwocus.com, use app.fwocus.com, or contact us.

For questions or privacy requests, email hello@galanthos.com or write to:

Information we collect

• Account information. Your email address, account identifier, profile name, time zone, and sign-in information. If you sign in through a supported provider, such as Discord, we receive the account details that provider shares to authenticate you. Email sign-in uses a login link.
• Your workspace. Settings, theme and background selections, custom image or video URLs, audio preferences, saved playlists, tasks, notepad content, and focus statistics. Signed-in accounts sync supported workspace data to our database. Focus statistics continue to be recorded when advanced analytics are locked.
• Account and feature activity. Records of account activity, the announcements you have seen, and responses you submitted to earlier in-app surveys. These help us operate the app and avoid repeating announcements.
• Billing information. Stripe customer and transaction identifiers, selected plan, payment and subscription status, renewal or access-end dates, and refund or dispute information. Checkout collects payment and billing details directly through Stripe and Link. Fwocus does not receive or store your full card number or security code.
• Support and feedback. Your email address, messages, and any information you choose to send by email or through our external feedback form.
• Technical and usage information. Hosting and service providers process connection information such as IP addresses, browser and device details, and request logs. Where app analytics are enabled, PostHog receives page views and selected events, including app visits, timer actions, mode changes, and opening Settings or sign-in. Signed-in analytics can be associated with your account ID, email address, first name, and account tier. Automatic interaction capture and session recordings are disabled in our analytics configuration. We do not intentionally include your tasks or notepad content in these analytics events.

You can use the features available to guests without creating an account. Account details are needed for sign-in and cloud sync; billing details are needed for purchases. You choose whether to add notes, tasks, custom media, or feedback.

What stays in your browser

Fwocus uses browser storage, including local storage and IndexedDB, to remember your workspace, preferences, timer state, and changes awaiting sync. Authentication and analytics services may also use cookies or similar identifiers.

Uploaded background images stay in the browser where you added them. They are not uploaded to our cloud-sync storage and are not available automatically on another device. Saved background URLs and other supported settings can sync to your account.

Clearing browser data, using private browsing, or changing browsers can remove local images and unsynced data. Browser settings let you clear or block storage, but doing so may affect sign-in, saved preferences, analytics, and other features. Signing out is not a substitute for clearing a shared device’s browser data.

The marketing website uses PostHog to measure page views and clicks on links that open the app. It uses the same analytics project and shared domain cookies to connect website visits with app activity in the same browser. Automatic interaction capture, session recordings, and browser error reporting are disabled. Our hosting providers also process requests needed to deliver the website.

How we use information

We use information to provide sign-in, save and sync your workspace, calculate focus statistics, deliver purchases, manage plan access, prevent duplicate billing, troubleshoot problems, respond to support requests, understand feature usage, and improve Fwocus. We also use necessary records to prevent misuse, handle payment disputes, and meet legal obligations.

Where applicable data-protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and improving a secure service, legal obligations, or consent where required. You may contact us about these grounds or to withdraw consent where processing relies on it.

We do not sell your personal information or use your notes and tasks to target advertising.

Services that help run Fwocus

We share information as needed with the providers that deliver Fwocus:

• Supabase provides authentication and database storage for account, synced workspace, billing-access, feedback, and announcement records.
• Vercel and Cloudflare help host the app, website, and media assets and deliver network requests.
• Stripe and Link provide hosted checkout, Managed Payments, subscription management, payment support, tax handling, and fraud and dispute services. Stripe acts as merchant of record for Managed Payments purchases and also processes information for its own payment and legal responsibilities. See Stripe’s Privacy Policy and Link’s Privacy Policy.
• PostHog processes the website and app analytics described above where enabled.
• Sign-in, feedback, and email providers process information when you authenticate, submit the Google Forms feedback form, or email us.

If you use embedded music or video (such as Spotify, YouTube, Apple Music, SoundCloud, or Amazon Music), or a background URL, your browser connects to the relevant media provider or URL host. That provider can receive your IP address and browser information and may use its own cookies or account settings. Its privacy policy applies to that interaction; Fwocus does not control third-party media services.

We may also disclose information when legally required, to protect users and the service, or as part of a business transfer subject to applicable privacy protections.

Storage, retention, and security

We are based in Hong Kong and use providers with international infrastructure. Information may be processed outside your country, including in the United States, where data-protection laws may differ. Where required, transfers must use the safeguards provided by applicable law.

Account and synced workspace data are kept to support your use of Fwocus. A downgrade does not automatically delete saved Pro selections, additional backgrounds, or focus history. Support, security, and billing records may need to be retained longer to resolve issues, comply with legal obligations, or handle disputes. Local browser data remains until it is removed by you, the app, or your browser.

Contact us to request account or data deletion. We assess what can be deleted and what must be retained, including any copies in backups that require time to expire. There is no promise of immediate deletion of every record.

We use access controls and other technical measures to protect information. No service or storage system can guarantee absolute security. Keep access to your email and sign-in provider secure, and avoid placing sensitive information in tasks or notes that you do not want stored with your account.

Your choices and rights

You can change supported profile and workspace information within Fwocus and manage your recurring plan through Account Settings. For access to or correction of your personal data, or a request to delete your account, email hello@galanthos.com. We may need to verify your identity before acting on a request.

Depending on the law that applies to you, you may also have rights to data portability, restriction of processing, objection to certain processing, or withdrawal of consent. Some requests are subject to legal exceptions. You can raise a concern with your local data-protection authority, including Hong Kong’s Office of the Privacy Commissioner for Personal Data.

Deleting an account and cancelling a subscription are separate actions. Please cancel any active renewal through Manage plan or ask us for help before requesting account deletion.

Children and policy updates

Fwocus is a general-purpose focus tool and is not directed at children below the age at which they can lawfully use the service and provide their information without parental authorization. If you believe a child has supplied information without required authorization, contact hello@galanthos.com so we can review it.

We may update this policy as Fwocus changes. The date at the top identifies the latest revision. We will provide additional notice of material changes where required.