Privacy Policy — GreenFocus

Last updated: November 12, 2026
App: GreenFocus (digital wellbeing and focus)

1. Who we are (Data Controller)

This policy describes how GreenFocus handles your personal data, in accordance with Brazil's General Data Protection Law (Law No. 13.709/2018 — "LGPD") and applicable data protection laws, including the EU General Data Protection Regulation ("GDPR") for users in the European Economic Area, the United Kingdom and Switzerland (see section 8).

• Controller: Hatila Souza Maximo
• Contact / Data Protection Officer: greenfocus.contact@gmail.com

2. What data we collect

a) Account data

• Your name and email, provided by you at sign-up.
• Your password is securely managed by our authentication provider (Supabase) and stored encrypted — we never have access to your password in plain text.
• If you sign in with Google, Google sends us your name, your email, your Google account identifier and the address of your profile photo (the app doesn't use the photo). In that case there is no GreenFocus password: Google confirms your sign-in. We get no access to any other data in your Google account.
• If you sign in with Apple (on iPhone), Apple sends us an identifier for your Apple account, your email (which may be an address created by Apple if you choose "Hide My Email") and, only the first time, the name you choose to share. In that case there is no GreenFocus password: Apple confirms your sign-in. We get no access to any other data in your Apple account.

b) In-app usage data (linked to your account)

• Your habits and goals (with each day's check-ins), focus history, streak, language and preferences. These are used to show your statistics and keep your progress synced across devices.
• At the start of the app: where you heard about GreenFocus (if you answer) and which steps of the start you completed, with the date and time of each. We use this to improve the start of the app. Your other answers there (how you feel after using your phone and when you lose the most time) stay on your device only and are deleted when you finish.
• App usage counts: we record a few actions — opening the app, starting and ending a focus session (with its length), creating and completing habits, viewing the plans screen, starting the Detox plan and becoming Premium — with the date and time, the app version and the system (Android or iPhone). We never record which apps you use or block, the names of your habits or what you write. We use this only to understand how the app is used and to improve it (legitimate interest, under the GDPR). You can turn it off in Settings → Account → Help improve the app.
• Zen and day plan: your day plan with the status of each block (to do, done, skipped…), the goals with a date you save (name and date), what you type in "apps that distract me" and a log of your focus sessions (when each started, how many minutes and how it ended: completed, ended early or emergency stop). The app and Zen use them to follow your day and your week.

c) Device usage statistics (screen time)

• With the Usage Access permission, the app reads your screen time and per-app usage time to display your reports and enable blocking.
• This raw usage data is processed on your device: the usage time of each app is never uploaded. Only totals about your progress are synced to your account — focus minutes per day and your total screen time for the day, used by "up to X of screen time" habits, the Detox plan average and the context sent to the Zen assistant.
• On iPhone, the app uses Apple's Screen Time (Family Controls) with your permission (Face ID or passcode). Apple does not let any app read your screen time or know which apps you use: the numbers you see in Statistics and Detox are calculated and drawn by Apple itself, inside your iPhone. The apps you choose to block also stay on the device only, as codes that only Apple can read. None of this is sent to our servers, to the usage counts or to Zen. The app only keeps how many apps you chose and, in Detox, the daily screen time average you type in yourself.

d) Conversations with the Zen AI

• When you chat with the Zen assistant, the messages you send are transmitted to our server and to the language-model provider (Groq) to generate the response. Please do not share sensitive data in this chat.
• To personalize the reply, along with your message we send: your first name, your focus time (today and over the last 7 days), your total screen time for the day (never per-app usage), your detox plan progress, how many apps are on your block list, the names and progress of your habits and goals, and the goal and routine answers you gave when building your plan.
• Since version 1.2, the context also includes: your phone system (Android or iPhone), whether you are Premium, a summary of your focus sessions in the last 7 days (how many, how many were completed, how many ended early and the hour you usually start), your day plan with the status of each block, your goals with a date, on how many days of the last week you missed each habit, how many apps have a Detox limit and what you type in "apps that distract me". On iPhone, nothing from Screen Time is sent to Zen — no screen time and no app names: only the screen time average you type in yourself in Detox.
• Zen's ready-made helps (building your starter plan, suggesting habits, planning your day and "I'm procrastinating"): what you type in them — your goal or the day's tasks — and, in the starter plan, your answers about your routine (deadline, free time per day, best time of day and what gets in the way most) are sent to our server and to Groq to generate the suggestion, along with the same context above. Your goal, those answers and your day plan are saved with your account data so the app can use them later; the day plan is replaced when you create a new one. The apps you choose to block in the starter plan and the per-app usage time shown there stay on your phone. App names Zen suggests in the chat are matched against the apps on your device on the phone itself: your list of installed apps is never sent.
• Zen's memory: Zen may keep a short summary of what you told it (for example, goals and routine), saved with your account data. You can view and delete this summary under "What Zen remembers", inside the chat. Zen is instructed not to keep health data, crises, religion, politics, sex life, finances or data about other people.
• The chat history is stored only on your device and can be deleted from the chat at any time.
• If you report a Zen reply, we store the reported reply, your previous question and the reason, linked to your account, to review it and improve the assistant's safety.

3. Android and iPhone permissions and why we use them

GreenFocus is a focus app. Each permission has a specific, limited purpose:

• Accessibility Service — used solely to identify which app is currently on screen so it can block distracting apps during a focus session, showing the block screen on top of them. We do not read your screen content, passwords, messages, or personal data.
• Usage Access (PACKAGE_USAGE_STATS) — to measure screen time and enable blocking.
• Notifications and foreground service — to keep blocking active during focus mode and to inform you.
• Battery optimization / auto-start — to prevent the system from killing blocking in the background.
• Vibration — a short vibration when you confirm your plan at the start of the app.

On iPhone:

• Screen Time (Family Controls) — used exclusively to block the apps you choose during focus sessions and in the Detox limits, and for Apple to show your screen time inside the app. The data stays on the device (see section 2c).
• Notifications — for focus session, habit and day plan alerts, scheduled on the device itself.

4. How we use the data

• Create and maintain your account and authenticate your access.
• Provide the app's features: focus, blocking, statistics, habits and goals (with reminders, which are notifications scheduled on your own device) and the Zen assistant.
• Keep your progress synced across devices.
• Improve the app's stability and experience.

We do not sell your personal data and do not use it for third-party advertising.

5. Who we share with

We share data only with providers that make the app work:

• Supabase — authentication and storage of your account data.
• Groq — processing the messages you send to the Zen assistant to generate responses.
• RevenueCat — subscription management (purchase data, linked to your account ID).
• Google — sign-in with Google, only when you choose that option.
• Apple — sign-in with Apple on iPhone, only when you choose that option.
• Resend — sending account verification emails (receives your email address).

These providers handle data under their own security and privacy policies.

6. Storage and retention

• Your account data is kept for as long as your account exists.
• When you delete your account, the associated data is removed. To request deletion, email greenfocus.contact@gmail.com.
• Data stored only on your device is deleted when you uninstall the app.
• App usage counts are deleted after 90 days.

7. Security

We use encrypted communication (HTTPS) and providers with recognized security practices. No system is 100% infallible, but we work to protect your data.

8. Your rights

At any time, you may:

• Confirm the existence of processing and access your data;
• Correct incomplete or outdated data;
• Request deletion of your data / account;
• Request portability;
• Withdraw consent.

To exercise these rights, email greenfocus.contact@gmail.com.

Users in the European Union, EEA, United Kingdom and Switzerland (GDPR)

If you live in these regions, the GDPR and equivalent local laws also apply:

• Legal bases: we process your account, focus, habits, blocking and subscription data to provide the service you signed up for (performance of a contract). Screen time (Usage Access), Accessibility, notifications, sign-in with Google or Apple and the Zen assistant are used only after you turn them on or choose to use them (consent), and you can turn them off at any time. Keeping the app secure, preventing abuse, reviewing reported Zen replies and understanding which steps of the start of the app people complete are based on our legitimate interests.
• International transfers: our providers (section 5) may process data outside the European Economic Area, for example in the United States. These transfers rely on the safeguards the providers offer, such as the European Commission's Standard Contractual Clauses.
• Additional rights: besides the rights above, you can ask us to restrict processing and you can object to processing based on legitimate interests. Withdrawing consent does not affect processing carried out before.
• No automated decisions with legal effects: Zen only makes suggestions; nothing is created in your account without your agreement.
• Complaints: you can lodge a complaint with the data protection authority of your country (for example, your state authority in Germany, the CNIL in France or the Garante per la protezione dei dati personali in Italy).
• We reply to requests within one month.

9. Children and teenagers

GreenFocus is not directed at children under 13, and we do not knowingly collect data from that age group. In the European Union, if you are below the age of digital consent in your country (between 13 and 16, depending on the country), use GreenFocus only with the consent of a parent or guardian.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top indicates the current version. Significant changes will be communicated in the app.

11. Contact

Questions about privacy or this policy: greenfocus.contact@gmail.com.