Privacy Policy

FocusDeck (“FocusDeck,” “we,” “us”) provides a structured focus and study tool at focusdeck.io. This policy explains what personal data we collect, why, and the choices you have. For privacy questions, contact us at hello@focusdeck.io.

• Account data — your email address and, optionally, your name.
• Content you create — decks, blocks, sessions, session reviews, notes, goals, and exam plans.
• Usage data — basic, aggregated information about how the product is used, to operate and improve it.
• Payment data — processed by Stripe. We do not store or see your full card number; we receive only your subscription status and limited billing metadata.

We use only essential cookies required to keep you signed in and maintain your session. We do not use advertising cookies or cross-site tracking. If we add product analytics in the future, we will use a privacy-respecting, non-advertising provider and update this policy.

• To provide the service — store your decks and run your sessions.
• To manage your account, subscription, and billing.
• To send transactional and reminder emails you have enabled (e.g. session reminders, weekly recaps). You can turn these off in Settings.
• To maintain security and improve the product.

We do not sell your personal data, and we do not use your content for advertising.

Where the GDPR or UK GDPR applies, we process data on these bases: performance of a contract (providing the service), legitimate interests(securing and improving the product), consent (optional emails, which you can withdraw at any time), and legal obligation where required.

We share data only with providers that help us operate FocusDeck, under contract:

• Supabase — database, authentication, and storage.
• Stripe — payment processing.
• Resend — transactional and reminder email delivery.
• Vercel and Cloudflare — hosting and content delivery.

We keep your data while your account is active. You can deactivate your account at any time from Settings, which takes effect immediately. You can request permanent deletion of your personal data by emailing hello@focusdeck.io; we will delete it within 30 days, except where we must retain limited records to meet legal or accounting obligations.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email hello@focusdeck.io. You also have the right to complain to your local data protection authority.

FocusDeck is not directed to children under 13, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe a child under 13 has provided us data, contact us and we will delete it. For school or tutoring use involving students, we handle student data conservatively and aim to align with FERPA and COPPA expectations.

Your data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

We use industry-standard measures — encryption in transit, row-level access controls, and reputable infrastructure providers — to protect your data. No system is perfectly secure, but we work to keep your information safe.

We may update this policy as the product evolves. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you.

Questions about privacy? Email hello@focusdeck.io.