Your study life stays yours
FocusFlow holds a lot: your notes, your flashcards, how you feel on a given day, when you actually focus. Here's how it's protected, and the honest version of what I can and can't see as the person who runs it. Short answer: not much.
Locked to your account
Everything below is row-level secured: the database only ever returns it to your signed-in account. It doesn't appear in an admin view, a support view, or anywhere else.
Journal, notes & photos
Entries, images, and audio are returned only to your signed-in account.
Flashcards & decks
Your cards, review history, and scheduling stay yours alone.
Mood, energy & habits
Mood check-ins, energy logs, habit streaks, and wellness notes are private.
Tasks, focus & time bank
Tasks, Pomodoro sessions, streaks, and time-bank balances are visible only to you.
Uploaded files
Lecture recordings, screenshots, and images are stored privately and opened through short-lived links your session creates.
Preferences
Theme, timer lengths, goals, and consent choices live locally in your browser.
The short list of what I can see
What I never see
Your password
Passwords are handled by our authentication provider and stored as a one-way hash. I can't read it, app code can't read it, and it appears in no admin screen. Resets go through a link or code sent to your email, so I can never set a password I'd know.
Your study content
Journals, notes, flashcards, tasks, moods, energy logs, and focus history are row-level secured to your account. I have no screen that shows them, and I can't browse them.
Your typing and your screen
Session recordings are off by default. If you switch them on, they capture clicks and navigation only — never passwords, never typed text.
Your location
Location is off unless you allow it, and it's used only for weather and place context on your own mood and journal entries.
How the AI features work
When you use an AI feature — a study plan, a podcast from your notes, an AI tutor reply — the text you give it is sent to our AI provider to generate that result. That's the only way it can work. It isn't used for advertising and isn't shown to anyone else. If you'd rather not send something, keep it out of the AI features and it stays in your account.
There are no third-party advertising trackers in FocusFlow. I don't sell data, and there's no ad business behind this app — it's built and run by one student.
You're in control
- Consent toggles live in Settings → Data & privacy: session recordings, cookies, and location are all opt-in.
- Export your settings as a file, or reset every preference back to default, from the same section.
- Delete your account and its data anytime from Profile.
- Everything you create stays yours — you can take it out or wipe it without asking me.
Questions about any of this? I read everything students send me.
Last updated October 26, 2026.
