FeaturesHow It WorksPricingSupportAboutGet the App →
Legal

Privacy Policy

Last updated: March 2025

Effective date: March 2025  |  Developer: David Hildebrand, Orivent Studios  |  Contact: privacy@oriventstudios.com

1. Overview

This Privacy Policy explains how SteadyFocus ("the App", "we", "us") collects, uses, stores, and protects your information. SteadyFocus is developed and operated by David Hildebrand, trading as Orivent Studios, based in Cape Town, South Africa.

We are committed to protecting your privacy. The core philosophy of SteadyFocus is that your personal habit data belongs to you. By default, your data never leaves your device. Cloud features are opt-in and require explicit sign-in.

By installing and using SteadyFocus, you agree to the practices described in this policy.

2. What Data We Collect

We categorise data into two types: data stored locally on your device only, and data that is transmitted to our cloud infrastructure when you use optional features.

3. Locally Stored Data (On-Device Only)

The following data is stored exclusively on your device using a local database (Isar). It is never transmitted to any server unless you explicitly use a cloud feature:

  • Habit names, categories, schedules, goal types, and settings you create
  • Habit completion history and status records (complete, missed, pending)
  • Focus session duration records
  • Task items you create, including titles and scheduled times
  • Numerical habit progress values
  • Streak counts and history
  • App settings and preferences (theme, notification preferences)
  • Onboarding completion status

This data remains on your device. It is removed when you uninstall the app. We recommend using the backup feature (Plus/Pro) to preserve this data before uninstalling.

4. Cloud Data (Optional, Sign-In Required)

When you sign in with Google and use cloud-connected features, the following data is stored in Firebase Firestore, Google's cloud database service:

4.1 User Profile

  • Your Google account UID (a unique identifier, not your name or email)
  • Your subscription tier (Free, Plus, or Pro)
  • Your Pattern Scout credit balance
  • AI Coach coaching log records (summaries of generated briefings)

4.2 Daily Summary Data (for AI Coach features)

When you use AI Coach features, a daily summary is written to Firestore containing:

  • Date, total habits scheduled, total completed, completion percentage
  • Focus session minutes logged that day
  • Number of tasks completed
  • Aggregated habit category names and completion counts

This summary data is used exclusively to generate your personalised AI coaching reports. It is not used for advertising or shared with third parties for marketing purposes.

4.3 Authentication Data

If you sign in with Google, Firebase Authentication stores your Google UID, email address, and display name. This is managed by Firebase/Google and subject to Google's Privacy Policy.

5. Third-Party Services

SteadyFocus uses the following third-party services. Each has its own privacy policy:

5.1 Firebase (Google LLC)

We use Firebase Authentication, Firebase Firestore, Firebase Cloud Functions, Firebase App Check, and Firebase Cloud Messaging (FCM). These are Google services subject to the Google Privacy Policy.

  • Firebase Authentication: Manages sign-in via Google.
  • Firebase Firestore: Cloud database for user profiles and AI Coach data.
  • Firebase Cloud Functions: Server-side processing for AI features.
  • Firebase App Check: Verifies that requests come from our genuine app (security measure).
  • Firebase Cloud Messaging: Delivers push notifications for AI Coach alerts.

5.2 Google Generative AI (Gemini)

Pattern Scout and AI Coach features are powered by Google's Gemini AI model via Firebase Cloud Functions. Your habit summary data is sent to the Gemini API to generate coaching responses. This data is processed server-side and subject to Google's Privacy Policy. We do not use your data to train AI models.

5.3 RevenueCat

In-app purchases (Plus upgrade, Pro subscription, Scout credit packs) are managed through RevenueCat. RevenueCat processes purchase receipt data and manages entitlements. See RevenueCat's Privacy Policy. No payment card information is processed by us or RevenueCat — payments are handled by Google Play.

5.4 Google Play / Google LLC

The app is distributed via Google Play. Google may collect device information and analytics as part of their platform. See Google's Privacy Policy.

6. AI Features and Data Processing

When you use Pattern Scout or AI Coach:

  • Your search query (Pattern Scout) or aggregated habit summary data (AI Coach) is transmitted to our Firebase Cloud Functions.
  • This data is passed to the Gemini AI API to generate a response.
  • The response is returned to your device and cached in Firestore for offline access.
  • We do not store the content of your Pattern Scout search queries beyond the current session.
  • AI Coach responses and the aggregated daily summaries used to generate them are stored in your Firestore user document.

All AI responses are generated with a system instruction that strictly limits the scope to habit guidance only. The AI is hardcoded to refuse medical, financial, clinical, or any professional advice. These guardrails are enforced server-side and cannot be overridden by user input.

7. Purchases and Payment Data

All payment processing is handled by Google Play and RevenueCat. We never see or store your payment card information. When you make a purchase:

  • Google Play processes the payment and sends a receipt to RevenueCat.
  • RevenueCat validates the receipt and updates your entitlement status in our system.
  • We update your subscription tier in Firestore (a numeric value: 1=Free, 2=Plus, 3=Pro).

8. Children's Privacy

SteadyFocus is not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with data, please contact us at privacy@oriventstudios.com and we will delete it promptly.

9. Your Rights

You have the following rights regarding your data:

  • Access: You can request a copy of the data we hold about you.
  • Deletion: You can request deletion of your account and all associated cloud data. To do this, go to Library → Account → Delete Account in the app, or email privacy@oriventstudios.com. We will complete deletion within 30 days.
  • Correction: If any data we hold is inaccurate, contact us to have it corrected.
  • Portability: You can export your habit history using the Data Backup feature (Plus/Pro) as a CSV file.
  • Opt-out: You can use the app without creating an account. Simply don't sign in with Google and no cloud data is collected.

10. POPIA Compliance (South Africa)

As a South African developer, we comply with the Protection of Personal Information Act (POPIA). Under POPIA:

  • We process personal information only for the specific purposes described in this policy.
  • We retain data only as long as necessary for those purposes.
  • You have the right to access, correct, and request deletion of your personal information.
  • We take reasonable technical and organisational measures to protect your data from unauthorised access.
  • To exercise your POPIA rights, contact our Information Officer at privacy@oriventstudios.com.

11. Security

We implement reasonable technical security measures including:

  • Firebase App Check to verify all API requests originate from our genuine app
  • Firebase Security Rules to ensure users can only access their own data
  • HTTPS/TLS encryption for all data in transit
  • Google's infrastructure security for all Firebase and cloud services

No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly by emailing security@oriventstudios.com.

12. Changes to This Policy

We may update this Privacy Policy as the app evolves. Material changes will be communicated via an in-app notification. The "Last updated" date at the top of this page will always reflect the most recent version. Continued use of the app after changes constitutes acceptance of the updated policy.