Hocus Focus

Legal & Compliance Documentation

Privacy Policy

Effective Date: June 16, 2026

At Hocus Focus, we take your privacy and physical device security mathematically seriously. Our application is designed to operate completely offline by default, and we strictly minimize the data we process when you utilize our cloud synchronization features.

1. Data We Collect

  • Anonymous Device Signatures: We collect hardware IDs if you choose to utilize Biometric (Face ID / Touch ID) fallback locks, completely confined to your local Secure Enclave.
  • Task Metadata: Task titles, estimated sprints, and completion timestamps are encrypted and synced to Supabase if you create an active cloud account.
  • Profile Information: Optional display names and generated avatars.

2. How We Use Your Data

Your task matrix is strictly utilized to provide cross-device synchronization and streak calculations. We fundamentally do not sell, rent, or algorithmically share your focus metrics with any third-party advertising networks.

3. Device Security (Local-First)

Your PIN code and Biometric hashes are strictly sandboxed by iOS and Android operating systems. Our cloud architecture has absolutely zero access to your physical unlock parameters.

Data Deletion Policy

In strict compliance with App Store guidelines, you have the absolute right to permanently purge your account and all associated data from our cloud infrastructure.

Self-Service Account Destruction

You can initiate a complete, irreversible data wipe directly from within the Hocus Focus mobile application. This executes a highly privileged database transaction that cascades through your task history, profile data, and authentication matrix.

1

Open the Hocus Focus app on your device.

2

Tap the menu icon to open the Settings Sidebar.

3

Under Account Security, tap Delete Account.

4

Type DELETE into the red confirmation modal to permanently execute the purge.

Data Retention Limits

Once the purge sequence is executed, your data is mathematically unrecoverable. We do not retain ghost profiles, soft-deleted rows, or offline caches on our backend.