Privacy Policy
At Focus Better, operated by Brillarix, your privacy is fundamental to our product. We build deep-work timers and atomic habit tracking designed to keep you productive without intrusive tracking or noise.
1. Introduction & Who We Are
This Privacy Policy (“Policy”) explains how Brillarix LLC (“Brillarix,” “we,” “us,” or “our”), operating the productivity platform Focus Better (available at focusbetter.io), collects, stores, uses, and discloses your personal data when you access or use our web applications, desktop applications, APIs, and associated services (collectively, the “Platform”).
By using Focus Better, you acknowledge that you have read and understood this Policy. If you do not agree with our data practices, please discontinue use of the Platform immediately.
2. Information We Collect
We collect information in three ways: information you provide directly, information collected automatically, and information received from third-party integrations.
A. Information You Provide Directly
- Account Information: Your name, display name, email address, timezone, avatar, and password hash (stored using cryptographic Argon2id one-way hashing; we never store plain-text passwords).
- Focus Sessions & Timers: Durations, start/end timestamps, paused intervals, completion statuses, rhythm settings (e.g., 25/5 Pomodoro, 50/10, or Flow Mode), and linked tasks or project associations.
- Atomic Habits: Habit titles, descriptions, target cadences, completion check-ins, streaks, and freeze token transactions.
- Projects & Tasks: Project names, roadmaps, milestones, task names, descriptions, priorities, due dates, and board columns.
- Mount Olympus Gamification: Earned Momentum points, Summit Coins, level ascension status, and expedition basecamp badges.
B. Information Collected Automatically
- Log & System Diagnostics: Anonymized IP addresses for security rate-limiting, browser user agent, device operating system, and API response metrics stored in temporary CloudWatch logs (retained for 7 days then automatically purged).
- Device Tokens for Notifications: Firebase Cloud Messaging (FCM) registration tokens if you opt in to receive push notifications on your browser or device.
3. Google API Data & Limited Use Disclosure
Focus Better provides optional integrations with Google Workspace services (including Google Calendar and Google Mail) to help you visualize focus blocks and manage actionable items:
Official Limited Use Requirement Statement
“Focus Better's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.”
In accordance with the Google API Services User Data Policy, we explicitly guarantee:
- No AI Model Training: Google user data is NEVER used to train, develop, or improve generalized or non-personalized artificial intelligence (AI) or machine learning (ML) models.
- No Advertising or Data Brokers: We do NOT sell, rent, or transfer Google user data to data brokers, ad networks, or third-party marketing services.
- Strict Human Access Restrictions: Human employees or contractors do NOT read your Google user data unless you have given explicit affirmative permission to inspect an issue (e.g., technical support), it is necessary for security investigations, or as required by law.
- Revocation at Any Time: You can disconnect your Google account and revoke all permissions at any time via Settings → Integrations or through your Google Account Security Permissions page.
4. How We Use Information
We use collected information solely for the following legitimate business and service purposes:
- Providing, maintaining, and synchronizing your focus sessions, habit streaks, and milestone boards across your devices.
- Calculating gamification progression, Momentum execution scores, and Summit Coins in accordance with platform rules.
- Executing offline-first synchronization using your browser's local IndexedDB action queue.
- Sending essential transactional messages (e.g., password reset links, security notices, and optional habit check-in reminders).
- Detecting, investigating, and preventing fraudulent activities, unauthorized access, and malicious automated attacks.
5. Data Storage, Security & Offline Capabilities
Security is deeply engineered into Focus Better:
- Encryption in Transit: All communications between your browser, Vercel edge networks, and backend AWS services are secured with TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS).
- Encryption at Rest: All database records (RDS PostgreSQL 16) and private user media (AWS S3) are encrypted at rest using industry-standard AES-256 encryption.
- Local Offline Engine: Focus Better features an offline-first architecture. When you lack internet connectivity, your actions are queued locally inside your device's browser IndexedDB storage and synced idempotently once connection is restored.
- Data Center Location: Our primary production databases and servers are hosted within AWS US-East-1 (Northern Virginia, USA).
6. Information Sharing & Subprocessors
We do not sell, rent, or trade your personal information. We only share information with trusted infrastructure subprocessors bound by strict data processing agreements:
| Subprocessor | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | EC2 compute, RDS PostgreSQL database, S3 encrypted media storage | United States |
| Vercel Inc. | Edge web application hosting and global CDN delivery | Global / United States |
| Postmark (ActiveCampaign) | Transactional email delivery (account verifications & password resets) | United States |
| Google Cloud Platform | Optional OAuth sign-in, Calendar sync, and Gmail task integration | United States |
7. Data Retention & Account Deletion
We retain your account data for as long as your account remains active. You maintain total control over your data:
- Exporting Data: You can export your focus sessions, tasks, and habit histories at any time from your account settings.
- Account Deletion: You may permanently delete your account directly inside the app under Account Settings or by emailing team@brillarix.com.
- Purge Timeline: Upon deletion, your personal records, focus logs, and habits are immediately removed from production databases. Encrypted disaster recovery backups are permanently overwritten within 30 days.
8. Your Legal Privacy Rights
Depending on your location, you hold statutory rights under regulations such as the European General Data Protection Regulation (GDPR), the UK Data Protection Act, and the California Consumer Privacy Act (CCPA/CPRA):
- Right of Access & Portability: You may request a copy of the personal information we maintain about you.
- Right of Rectification: You may correct inaccurate or incomplete account data directly through the platform.
- Right of Erasure (“Right to be Forgotten”): You may request complete erasure of your personal data.
- Right to Restrict or Object to Processing: You may object to or request restrictions on how we process certain categories of information.
- California Privacy Rights: Under the CCPA/CPRA, we confirm that we do not sell or share personal information for cross-context behavioral advertising. You will never face discrimination for exercising your statutory privacy rights.
To exercise any of these rights, please email us at team@brillarix.com. We respond to verified requests within 30 days.
10. Children's Privacy
Focus Better is not designed for or directed to individuals under the age of 13 (or under 16 within the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information without parental consent, please contact us immediately at team@brillarix.com, and we will promptly delete the data.
11. Contact & Legal Entity
For inquiries, privacy questions, data requests, or compliance notices, please contact our Data Protection Officer:
Brillarix LLC (Operating Focus Better)
Website: https://focusbetter.io
Privacy & Legal Contact: team@brillarix.com