Done: Focus Lock

Privacy Policy

Effective date: August 10, 2026

This policy explains what Done collects, why it is used, how account and proof data are handled, and the choices available to you.

1. Scope

This Privacy Policy describes how the developer and operator of Done: Focus Lock ("Done," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information when you use the application, donefocuslock.com, and related account and support services (collectively, the "Service"). It also explains the choices and rights that may be available to you.

2. Information You Provide

We collect information you provide directly, including:

• Account information: your name, email address, account preferences, and information associated with the sign-in method you select.
• Onboarding and preference information: intended use, age range, role or school level, expected task types, referral source, referral code, and other configuration choices.
• Task information: task names, completion criteria, notes, explanations, timestamps, progress history, and verification results.
• Proof submissions: photos, videos, files, screenshots, and other material you choose to submit as evidence of task completion.
• Support information: messages, bug reports, feature requests, and other information provided when you contact us.

3. Account and Authentication Information

When you create or access an account, we process identifiers and security information needed to authenticate you, including your user ID, email address, authentication provider, session data, account creation time, verification status, and security events. Password authentication is handled by our authentication provider. We do not receive your Apple or Google account password.

4. Information Generated Through the Service

We may process device platform, operating-system and application version, feature interactions, authorization status, timestamps, request logs, error information, and limited diagnostics needed to operate, secure, maintain, and improve the Service. Apple and infrastructure providers may also process diagnostic information under their own terms and privacy policies.

5. Onboarding, Preferences, and Referrals

We use onboarding and preference information to configure the experience and understand product usage. Referral submissions and redemptions may be recorded to validate eligibility, attribute referrals, administer benefits, and prevent abuse.

6. Task and Proof Information

When you use a focus lock, we may process the task name, completion criteria, timestamps, uploaded proof, explanations, verification status, confidence information, and progress history. Proof submissions may contain personal information visible in the material you choose to upload.

7. AI-Assisted Processing

Task details and proof submissions may be transmitted to our backend and an AI-processing provider to assess whether submitted material appears consistent with the completion criteria. The result may be returned to the application and stored with the related task record. Automated processing is used to provide the proof-verification feature and is not used to make legal, employment, credit, medical, or similarly significant decisions about you.

8. Screen Time Information

Done requests Apple Screen Time authorization so you can select applications, categories, or websites to restrict during a focus lock. Apple's protected frameworks limit the information available to the application. Screen Time selections and blocking state may be stored on the device or in a shared application container as needed for the application and widget to function. We do not use Screen Time selections for advertising.

9. Notifications and Communications

If you grant permission, Done may schedule notifications relating to active focus locks, reminders after leaving the application, periodic focus prompts, subscription or trial information, and important service messages. You can manage notification settings in the application or iOS Settings.

We send transactional communications required for account verification, password recovery, authentication security, support, and material account or service notices. If marketing communications are offered, they will be sent in accordance with your choices and applicable law. Opting out of marketing does not prevent essential account, security, or transactional communications.

10. Purchases and Subscription Status

Apple processes App Store purchases. We may receive product identifiers, transaction and entitlement status, expiration information, and an account-linked purchase token needed to recognize access and restore purchases. We do not receive or store full payment-card details. Apple's processing of payment information is governed by Apple's privacy terms.

11. How We Use Personal Information

We use personal information to:

• provide and personalize the Service;
• create, authenticate, maintain, and secure accounts;
• apply focus controls and maintain task history;
• process proof submissions and return verification results;
• recognize subscription, promotional, or referral access;
• send account, security, support, and service communications;
• prevent fraud, abuse, and unauthorized access;
• diagnose errors, maintain availability, and improve features;
• comply with legal obligations and enforce our Terms of Use.

12. Legal Bases Where Applicable

Where data-protection law requires a legal basis, we process personal information as necessary to perform our agreement with you, with your consent for optional features, to comply with legal obligations, and for legitimate interests in operating, securing, supporting, and improving the Service. Where processing is based on consent, you may withdraw consent at any time, although the related feature may no longer function.

13. Service Providers and Disclosures

We disclose personal information to service providers only as reasonably necessary for authentication, database hosting, storage, backend functions, AI-assisted verification, email delivery, platform features, and purchases. These providers include:

• Supabase for account, database, storage, and backend services;
• Apple for StoreKit purchases, Sign in with Apple, Screen Time services, notifications, and platform functionality;
• Google when you choose Google authentication;
• AI-processing providers for task-proof verification; and
• email and infrastructure providers that support transactional communications and Service operations.

We may also preserve or disclose personal information where reasonably necessary to comply with applicable law or valid legal process, protect the rights and safety of users or others, investigate fraud or security incidents, enforce agreements, or complete a merger, financing, acquisition, reorganization, or transfer of the Service.

14. No Sale or Cross-Context Behavioral Advertising

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and the Service does not use personal information to track you across applications or websites owned by other companies for third-party advertising.

15. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service and for legitimate operational, security, fraud-prevention, dispute-resolution, financial-record, and legal-compliance purposes. Retention periods vary according to the nature of the information and the purpose for which it is processed. Information is deleted or de-identified when it is no longer reasonably required, subject to lawful retention and backup practices.

16. Account Deletion

The application provides an account-deletion process that requires identity verification and final confirmation. When completed, the authentication account and account-linked application data are removed from active systems, subject to limited retention required for security, fraud prevention, legal compliance, dispute resolution, and backups. Deleting a Done account does not cancel an Apple subscription or trial; Apple billing must be managed separately.

17. Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information, including authenticated backend access, access controls, encrypted network transmission, server-side credential management, and reauthentication for sensitive actions. No method of transmission or storage can be guaranteed to be completely secure.

18. International Processing

We and our service providers may process personal information in countries other than the country in which you reside. Those countries may have different data-protection laws. Where required by applicable law, we use recognized legal mechanisms or contractual safeguards for international transfers.

19. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to the processing of, or receive a copy of certain personal information, and to appeal a decision or submit a complaint to a data-protection authority. The application includes controls for profile information, data export, notifications, sign-out, and account deletion. We may verify your identity before acting on a request.

You can manage Screen Time and notification permissions in iOS Settings. You can manage or cancel an App Store subscription in your Apple subscription settings.

20. Children and Younger Users

The Service is not intended for a child who may not lawfully use an online service without authorization from a parent or legal guardian. We request an age range during onboarding rather than a full date of birth. If you believe a child has provided personal information without any consent required by law, contact us so that we can review the account and take appropriate action.

21. Third-Party Services and Links

The Service may contain links to or interoperate with third-party services. This Privacy Policy does not govern the privacy practices of third parties acting independently. We encourage you to review the privacy notices provided by Apple, Google, and any other service you choose to use.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our providers, or applicable law. The current version will be published through the Service or at donefocuslock.com with a revised effective date. We will provide additional notice or obtain consent where required by law.

23. Contact

Privacy questions and requests may be directed to support@donefocuslock.com.