Last updated: 24 July 2026
FocusLatch uses an account to activate your Key, manage your profile, and provide optional Social Hub features. We store your email address, user ID, username, account metadata such as marketing opt-in status, and only the focus progress needed for features you enable. We do not sell personal data and we do not use third-party advertising tracking.
Payments are processed by Stripe. When you buy a FocusLatch Key, Stripe receives the payment, billing, and checkout information needed to complete the transaction. FocusLatch receives the order details needed to provision, pack, ship, refund, and support the Key. FocusLatch does not store full card numbers.
Your selected Screen Time items, focus modes, lock state, raw session history, emergency-unlock state, and the registered Focus Key are stored locally on your iPhone and nowhere else. Social sync never uploads app identities, individual session timestamps, or the content of your Screen Time selections.
Social features are private and switched off by default. If you enable them, you choose separately whether people may find your username, see your profile, see your daily totals and streak, send friend requests, or invite you to private challenges. Before the first sync, the app previews exactly which fields will leave your device.
Depending on your choices and activity, FocusLatch may process your username, display name, biography, private profile-photo object, friendship and block state, aggregate daily focus minutes, streak and goal status, positive reactions, comments, private challenge membership and progress, in-app activity notifications, hidden-content choices, and reports. Profile-photo access uses short-lived signed links and the same profile and block rules as the Social Hub.
Only bounded daily aggregates are accepted by the server. Feed entries are immutable snapshots of an opted-in aggregate at the time it was shared. Blocking immediately restricts mutual profile, feed, comment, reaction, challenge, and activity visibility and removes incompatible pending relationships.
We process account and security data to provide the service, prevent abuse, enforce privacy choices, and meet legal obligations. Optional profile sharing, social discovery, notifications, and focus-total sync are controlled by your explicit choices, which you can withdraw at any time. Reports are reviewed only for safety, integrity, and enforcement purposes. Supabase provides the hosted authentication, database, storage, and server-function infrastructure used for account features.
You can hide content locally, block another account, and report a profile, profile photo, comment, feed post, or private challenge. Reports contain the selected reason, optional details, the referenced content, timestamps, and the reporting account. They are visible only to authorized moderators, and the reported member is not shown who submitted the report. A reported profile photo may be temporarily replaced with initials while the private original is held for review. Moderator actions and moderator-role changes are recorded in restricted audit logs. Reports, quarantined evidence, and audit records may be retained for a limited period after other social data is deleted where necessary to prevent abuse, document decisions, handle an appeal, or comply with law; the retention schedule is reviewed and documented internally.
See the Community Guidelines for the Social Hub rules and available safety actions.
Apple's Family Controls framework provides app selections as privacy-preserving opaque tokens. FocusLatch never learns the names or identities of the apps you block.
FocusLatch stores only a salted one-way hash (SHA-256) of your key's hardware identifier — never the identifier itself. The app never writes to your key; its signature is placed on the key once, before it reaches you.
You can disable any Social Hub permission in the app. Disabling focus sharing stops future sync, and the separate delete-shared-data action removes released daily aggregates and their feed snapshots. You may edit or remove your profile photo, comments, reactions, friendships, challenge participation, and local hides through the relevant controls.
You can permanently delete your account in You → Account → Delete account. This removes your authentication account and server-side profile, friendships, and shared daily focus totals, together with associated social content, subject to the limited safety and legal retention described above. Deleting the app only removes locally stored data; it does not by itself delete the account. Screen Time authorization can be revoked at any time in iOS Settings.
Depending on where you live, you may request access, correction, deletion, restriction, portability, or object to certain processing, and you may complain to your data-protection authority. Contact the controller below to make a request. We may need to verify that the request concerns your account.
Stefan Sammer
Hohenrainstraße 96, 8042 Graz, Austria
[email protected]