Privacy policy

Last updated 22 October 2026

This policy applies to the website fokuno.com, the waitlist, the Fokuno apps (Windows app, web app at app.fokuno.com, browser extension) and the Fokuno account. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

The essentials

• Fokuno reads your Google Calendar to find free time and adds its own focus blocks. For that and nothing else.
• Your data is stored on your device and on servers in Zurich (Switzerland).
• Nothing is sold, used for advertising or used to train AI models.
• The website sets no cookies and embeds no third-party analytics or advertising services. It counts visits itself, without storing your IP address.
• A copy and the deletion of your data work directly in the app (Settings, “Meine Daten”). Otherwise an email to hallo@fokuno.com is enough.

1. Controller

Nils Lüönd
[Street and number, postcode and town, Switzerland – will be added before launch]
Email: hallo@fokuno.com

Fokuno is a project run by a private individual. There is currently no data protection officer and no representative in the EU; requests go directly to the address above.

2. When you visit this website

The website is hosted by Cloudflare. Like any web server, Cloudflare processes technical details when a page is requested: IP address, time, requested address, browser and operating system. This is necessary to deliver the site and protect it from attacks. Fokuno itself does not analyse this information and builds no profiles.

The website sets no cookies and loads no third-party analytics, advertising or social media services. Fonts and images come from fokuno.com itself. If you dismiss the hint about another language, your browser remembers that in local storage. This information does not leave your device.

Visit statistics

To improve the website, we count visits ourselves. Your browser reports which page you open (path and language), which site you came from (only its domain), any campaign details in the link (utm values), how far you scroll (25, 50, 75 or 100%), whether you click “Beta access”, select or submit the form, and whether the sign-up worked. The server adds the device type (phone, tablet or computer) and the country, both derived from the connection.

So that we can count visitors without knowing who you are, the server combines IP address and browser identifier with a secret value and the date into a tag (hash). Only this tag is stored, never the IP address or the browser identifier. Because it changes every day, visits on different days cannot be linked. If you join the waitlist, we store that day's tag with your entry so we can see which source sign-ups come from.

No cookies are set for the statistics and nothing is stored on your device. Only for the form does your browser remember, until you close the tab, which page and link you came from (session storage), so an entry knows its source. If your browser has “Do Not Track” or “Global Privacy Control” switched on, the site sends no statistics. Automated access (bots) is not counted.

The events are stored with Supabase, storage location Zurich, and deleted after 13 months. Legal basis under the GDPR: our legitimate interest in making the website clearer and more useful (Art. 6(1)(f)). You can object at any time, most easily with Do Not Track or Global Privacy Control in your browser.

3. Beta waitlist

When you sign up for the beta, we store:

• your email address,
• optionally, what you want to use Fokuno for (school, university, work, other),
• the language of the page, the page you came from and any campaign details in the link (utm values),
• the time of sign-up and the status of your invitation,
• optionally, which device and calendar you plan with (Windows, Mac, Linux, phone; Google Calendar, another one, none),
• your personal referral code and, if you came through another person’s link, which person that was,
• the daily tag of your visit from the visit statistics (see section 2).

Purpose: to invite you to the beta and write to you about it. The optional details show us who Fokuno is interesting for right now. After signing up you get an email to confirm your address (double opt-in). After that we send you a short confirmation and later the invitation. On top of that come at most three single emails: a one-time reminder if you haven’t confirmed, a tip for getting started while you wait, and after the invitation a check-in on whether the start worked. Nothing else. Every email contains a link to unsubscribe; after that we send you nothing more.

For each entry we record which of these emails was sent when, with the sending service’s message ID and any errors. This log is deleted together with the entry.

Referrals: If you come through another person’s link, your browser keeps the code in session storage until you close the tab. The person who shared the link does not see your sign-up and gets no advantage for it. We only record whose link you came through. After the invitation we evaluate, in aggregate, whether the invitation was redeemed or a Fokuno account was created with the same address and whether a first task and a focus block arrived in it, to improve the start. We don’t read the contents of your tasks for this.

Legal basis under the GDPR: your consent (Art. 6(1)(a)). You can withdraw it at any time by replying to one of our emails or writing to hallo@fokuno.com.

Retention: until the invitation and then at most twelve months, or until you unsubscribe. If you don’t confirm your address, we delete the entry 30 days after the confirmation email.

The entries are stored with Supabase, storage location Zurich. The emails are sent by Resend (see section 8). A hidden field in the form and a limit on attempts per minute keep automated sign-ups out; for this your IP address is held briefly in memory and not stored.

4. Fokuno account

You sign in to the account with Google. Google then gives us your email address, your name, the address of your profile picture and an identifier for your Google account. The account lets Fokuno recognise which data belongs to you and show it on all your devices.

The account stores the content you create in Fokuno or that results from using it:

• tasks (title, duration, deadline, importance, first step, notes), habits, parked thoughts,
• planned blocks and focus sessions (start, end, duration, how it went, your answers in the ritual and at the end of a block),
• the end-of-day review,
• breathing pauses: which distraction was detected (for example “YouTube”) and what you chose,
• settings such as working hours and sound preferences,
• a copy of your calendar appointments from yesterday to three weeks ahead (see section 5).

Purpose: to provide the app, that is to plan, remind, show statistics and keep everything in sync between your devices. Legal basis under the GDPR: performance of the contract with you (Art. 6(1)(b)).

The Windows app also keeps the same data locally on your computer so it works without internet.

Beta access: For the beta we store which accounts are unlocked and how (through an invitation, with the same address as the invitation, or because the account already existed). The app asks this after sign-in; if the account is not unlocked, it signs you out again.

My data and deleting the account: In the app settings you will find “Meine Daten” (My data). There you export all your data as a JSON file and delete your account yourself. When you delete, we revoke the Google access, remove your address from the waitlist and delete the account together with all content, feedback and the stored Google access key. What is stored locally on your device stays there until you uninstall Fokuno.

Feedback: With “Fehler melden” (report a problem) or a wish in the settings and the tray menu you send us a message. We store your text and the type of message. Version and system and the last lines of the log are only sent if you tick the box for it. Each account can send at most 20 messages in 24 hours. We read them to fix errors and improve Fokuno. Legal basis: our legitimate interest in running and improving the app (Art. 6(1)(f) GDPR), for support requests performance of the contract. They are deleted with the account.

5. Access to Google Calendar

Fokuno plans in your Google Calendar. For that, the app asks Google for these permissions:

Which data: from your events the title, description, location, start and end, whether all-day, calendar, colour, whether the event is marked busy or free, your response to invitations and whether it is part of a series.

Where it is stored: Events are cached on the device where you connected Google. So that phone and web app show the same day, a copy of your events from yesterday to three weeks ahead (title, location, times, calendar, colour) is kept in your account with Supabase, storage location Zurich. The access key to Google (refresh token) is stored encrypted (AES-256-GCM) in your account with Supabase, storage location Zurich, and no longer on your device. No device or app can read it. Only two Fokuno server functions use it, when needed, to fetch a short-lived access to your calendar (valid for about an hour) and pass it on to your signed-in device. The key to decrypt it is kept apart from the data, in the secret settings of those functions. This is not end-to-end encryption: as the operator, Fokuno can technically access it, so that phone, web and server can work with your calendar on your behalf. With “Disconnect” in the settings the key is deleted and revoked at Google.

What we don't do: Your Google data is not sold, not used for advertising, not passed on to data brokers and not used to train AI or machine learning models. People only read it if you explicitly ask (for example in a support request), if it is necessary for security (for example in case of abuse) or if the law requires it.

Limited Use. Fokuno’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Revoking access: In Fokuno's settings you can disconnect Google. You can also remove access at any time in your Google account at myaccount.google.com/permissions. Blocks already in your calendar stay there until you delete them.

6. Breathing pause and browser extension

During a focus block or a break from distractions, the Windows app checks which program is in front and reads its name and window title. With the browser extension it sees the address of the page in the active tab instead. That's how Fokuno recognises distractions such as YouTube. This happens only on your device and only while a block or break is running. Something is stored only when the breathing pause steps in: the name of the distraction and your choice.

7. Spotify and AI assistants (optional)

Spotify: If you connect Spotify, Fokuno starts a playlist for every block. The access key to Spotify stays on your device; which playlists you chose is stored in your account. Spotify's privacy policy applies to Spotify.

AI assistants (MCP): If you connect Fokuno to an assistant such as Claude, ChatGPT or Cursor using your personal MCP address, the assistant can read and change your tasks, habits and appointments through Fokuno when you ask it to. What the assistant retrieves goes to its provider (for example Anthropic, OpenAI or Anysphere) and is subject to your agreement with that provider. Fokuno doesn't send anything to these providers on its own. Fokuno only stores a checksum of your personal address, not the address itself. You can revoke it in Fokuno at any time.

8. Who else receives data

We use these service providers. They process data only on our behalf and according to our instructions:

Where data may go to the USA, we rely on the provider's certification under the Swiss-U.S. or EU-U.S. Data Privacy Framework where available, otherwise on the European Commission's standard contractual clauses as recognised by the Swiss Federal Data Protection and Information Commissioner.

Beyond that, we pass on no data unless the law requires it.

9. How long we keep data

• Waitlist: until the invitation and then at most twelve months, or until you unsubscribe. Unconfirmed entries 30 days after the confirmation email.
• Account and content: as long as you have the account. If you have it deleted in the app (“Meine Daten”) or by email, the data is deleted, from backups within 30 days.
• Visit statistics: raw events at most 13 months.
• Copy of calendar events: ongoing, always only from yesterday to three weeks ahead. Older events are removed.
• Technical logs at Cloudflare and Supabase: according to these providers' short retention periods, usually a few days.

10. Your rights

You can ask us at any time what data we hold about you and get a copy of it in a common format. You can have incorrect data corrected and data deleted, withdraw consent and, under the GDPR, object to processing or have it restricted. Write to hallo@fokuno.com. We reply within 30 days.

You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country of residence.

In the app both also work without email: Settings, “Meine Daten” (My data). There you export your data as a JSON file and delete your account.

11. Security

All connections are encrypted (HTTPS). In the database, each account sees only its own data; the database enforces this itself. Personal MCP addresses are stored only as a checksum. An error can never be ruled out completely; if something happens that affects your data, we will inform you and, where necessary, the authorities.

12. Children and teenagers

Fokuno is intended for people aged 13 and over. If you are under 16 and live in the EU, you need your parents' consent for the account.

13. Changes

If the way Fokuno handles data changes, we update this policy before the change takes effect. For significant changes we will write to you in advance.