Last updated: October 3, 2026
Privacy Policy
LevelUp Focus provides focus timers, progress tracking, tasks, gamification, optional cloud sync, optional social features, notifications, public web pages, and optional analytics. We do not sell personal data.
Controller and contact
LevelUp Focus is responsible for personal data processed through the app and web experience. Contact: levelupfocus.app@gmail.com.
Data we process
| Category | Examples | When collected |
|---|---|---|
| Account and identity | Email address, username, Supabase user ID, session data | When you create an account, sign in, or use cloud features |
| Focus and productivity data | Timer sessions, tasks, goals, tags, habits, statistics, rewards, and settings | When you use timer, task, progress, gamification, or sync features |
| Social and public profile data | Username, leaderboard visibility, room/partner focus status, social notifications | When you use leaderboard or social focus features |
| Notification data | Device or subscription identifier, scheduled timer completion alert metadata | When you enable notifications or timer alerts |
| AI Coach data | Task titles and focus statistics you submit to the AI Coach or task breakdown feature | When you use AI Coach or task breakdown features |
| Safety reports | Reported AI output or username, report reason, optional details, reporter and reported-user IDs | When you submit an in-app content or user report |
| Purchase data | Web (Lemon Squeezy): plan, transaction status, entitlement, renewal, cancellation, and creator referral metadata. Android (Google Play Billing): purchase token, order ID, product, base plan or purchase option, offer, purchase state, purchase region, purchase and expiry dates, auto-renewal and acknowledgement status, the resulting entitlement, and a pseudonymous account identifier (a one-way hash of your user ID) that links the purchase to your account | When you purchase or manage Pro on the web or in the Android app |
| Diagnostics and security | Request logs kept by our hosting and API providers (Vercel and Supabase), such as IP address, user agent, requested URL, time, and response status; server event and error logs, which can include your user ID; AI request counters used for rate limits | When you visit the web pages or use cloud, AI, or purchase features |
| Analytics data | Feature usage, page views, technical environment, product events | Only when analytics consent is accepted |
If you do not use an account or cloud sync, study data remains on your device in IndexedDB/localStorage. When you sign in or enable cloud features, relevant data is stored through Supabase.
How we use data
- Provide timers, tasks, goals, statistics, gamification, and local data export.
- Operate accounts, authentication, cloud sync, backup, leaderboard, and social focus features.
- Send user-requested notifications and exact timer completion alerts.
- Maintain safety, prevent abuse, debug issues, and improve reliability.
- Improve product quality and performance when you consent to optional analytics.
Service providers
- Supabase: authentication, database, cloud sync, account deletion, and request and error logs.
- Google Gemini (via Supabase Edge Function): generates AI Coach advice and task breakdowns from the text and stats you submit to those features.
- Firebase Cloud Messaging: Android push notification delivery and device tokens.
- PostHog: optional consent-based analytics on United States infrastructure. LevelUp Focus sends a pseudonymous account ID after consent, not your email address.
- Lemon Squeezy: web purchases, payment status, and customer portal. It receives your email address and account ID (plus the creator code, if you used one) to link the purchase to your account. It is not used for checkout inside the Google Play Android app.
- Google Play: Android in-app purchases and subscriptions through Google Play Billing, purchase verification, and purchase status notifications.
- Vercel: web hosting, serverless API delivery, security, and operational logs.
- Google OAuth: optional Google sign-in.
- Google Fonts: font loading for the web experience.
These providers process data on our behalf. Google Play and Lemon Squeezy also process payment data under their own privacy policies. We do not sell personal data.
Analytics consent
PostHog analytics is optional. If you reject or do not grant analytics consent, LevelUp Focus does not intentionally send PostHog analytics events or identify your account to PostHog. Accepting analytics consent may associate a pseudonymous account ID with product events; your email address is not sent as an analytics profile property.
Retention and deletion
Personal data is retained while your account is active or while needed to provide the feature. Account deletion removes your account, cloud sync, progress, leaderboard, and social data. You can delete your account in the app or request deletion without installing the app at /account-deletion/. Anonymized analytics records no longer tied to your account and limited legal/security records may be retained.
Security
Data is transmitted over HTTPS. Supabase Row Level Security policies protect cloud data. Passwords are handled by Supabase and are not stored by LevelUp Focus in plain text.
Children
LevelUp Focus is not directed to children under 13 and does not knowingly collect personal data from children under 13. Contact us if you believe a child has provided personal data.
Your choices and rights
You may request access, correction, deletion, restriction, portability, objection, or withdrawal of consent by using in-app controls, visiting the account deletion page, or emailing levelupfocus.app@gmail.com.
Policy changes
We may update this policy from time to time. Significant changes will be communicated by in-app notice or web page update. Continuing to use LevelUp Focus means the updated policy applies.
Turkish summary
LevelUp Focus; e-posta, kullanıcı adı, çalışma verileri, sosyal/leaderboard verileri, bildirim verileri, AI Coach özelliğine gönderdiğiniz metinler (Google Gemini ile işlenir), web (Lemon Squeezy) ve Android (Google Play) satın alma verileri, barındırma ve API sağlayıcılarının tuttuğu tanılama ve güvenlik kayıtları ve yalnızca açık rıza varsa analitik verilerini işler. Hesabınızı uygulama içinden silebilir veya hesap silme sayfasından talep gönderebilirsiniz. Kişisel veriler satılmaz.