Privacy Policy

Effective date: INSERT EFFECTIVE DATE · Last updated: 5 July 2026

UnlockFocus (“the app”, “we”, “us”, “our”) is provided by CloudPilar Limited, a company registered in INSERT COUNTRY OF REGISTRATION, e.g. England and Wales (company number INSERT REGISTRATION NUMBER), registered address INSERT REGISTERED ADDRESS.

This Privacy Policy explains what information UnlockFocus handles, what stays on your device, what is backed up to the cloud when you sign in, and the choices and rights you have. We have written it in plain English.

If you have any questions, email us at cloudpilarapps@gmail.com.

The short version

1. Who this policy applies to

This policy applies to everyone who uses the UnlockFocus iOS app. It covers both people who use the app locally without an account and people who create an account to sync their data.

2. What data we handle

We only handle the data needed to run the features you use.

a) Account data (only if you create an account)

• Email address
• A user ID assigned to your account
• The login method you chose (email and password, Sign in with Google, or Sign in with Apple)

If you use Sign in with Apple and choose to hide your email, we receive Apple’s private relay address rather than your real one.

b) Learning data

• Learning goals
• Notes you write or scan
• Lessons, study decks and quiz questions
• Your progress, streaks, awards and activity history

c) Focus data

• The apps and categories you choose to block (managed by Apple’s Screen Time / Family Controls — see section 4)
• Focus sessions, unlock windows and related settings
• Usage counters (for example, how many focus sessions, AI quizzes or scans you have used)

d) Subscription data

• Whether you are on the Free or Premium plan
• Purchase and restore status, provided by Apple’s App Store

We do not receive or store your full card number or payment details. Payments are handled by Apple.

e) AI and OCR data

• If you choose to generate an AI quiz, the text of the single note you select is sent for processing (see section 6 and the separate AI and OCR Processing Notice).
• OCR (scanning text from a photo) is performed on your device from a photo you pick.

f) Device and diagnostic data

• We may receive basic, aggregated crash and performance diagnostics if you have enabled sharing with developers in your iOS settings. This is provided by Apple and is not linked to your identity by us.
• Standard technical information (such as your device making secure network requests) is processed when you sign in or sync.

3. What stays on your device

The following are stored locally on your iPhone (in the app’s secure app-group storage) and are not uploaded unless you choose to sync by signing in:

• Your notes, decks, questions, learning goal, streaks, awards and history
• Your focus sessions, unlock windows and usage counters
• Your blocked-app selection and Screen Time settings (these always stay on device — even when signed in)

4. Screen Time and Family Controls

UnlockFocus uses Apple’s Screen Time / Family Controls framework to block apps. The list of apps and categories you select is handled by Apple on your device using privacy-preserving tokens. We cannot see which specific apps you have chosen, and that selection is never sent to our servers.

5. What syncs to the cloud (only when signed in)

If you create an account, we use Supabase (our backend provider) to store a private copy of your:

• Notes
• Learning goal
• Decks
• Progress and related study data

Every record is protected by row-level security tied to your user ID, so only your account can read your data. If you never sign in, none of this is uploaded.

Supabase acts as our data processor and stores data on infrastructure located in INSERT SUPABASE DATA REGION, e.g. the EU / London region.

6. When data is sent to AI

Your notes are private and are never sent anywhere automatically.

AI quiz generation runs only when you tap Generate quiz (AI) and confirm the consent prompt. When you do:

• Only the single note you selected is sent, over an encrypted (HTTPS) connection, to our Supabase Edge Function.
• The Edge Function forwards that text to our third-party AI provider, OpenAI, which generates quiz questions and returns them. The AI key is held server-side and is never stored in the app.
• If AI is unavailable or you prefer, UnlockFocus can generate a quiz on your device instead, which keeps everything on your phone.

We ask you not to put sensitive personal information into notes you send to AI. See the AI and OCR Processing Notice for full detail.

7. Photo scanning (OCR)

When you scan a note from a photo, the text is extracted on your device using Apple’s Vision framework. The photo itself is not uploaded. You choose the photo from your library using the standard iOS picker; UnlockFocus does not access your whole photo library.

8. How we use data

We use the data above only to:

• Provide the app’s features (blocking, notes, decks, quizzes, progress)
• Back up and sync your data across your devices (if you sign in)
• Provide and restore your subscription
• Keep the app secure and working, and fix problems

We do not use your data for advertising, and we do not sell or rent it.

9. Sharing

We share data only with the service providers needed to run the app:

• Apple — sign in, subscriptions, and (if you enable it) diagnostics
• Supabase — account, authentication and cloud sync (our data processor)
• OpenAI — only the note text you choose to send for AI quiz generation
• Google / Apple — if you choose that sign-in method, to authenticate you

We may disclose data if required by law, or to protect our rights, users or the public.

10. Data retention

• Local data stays on your device until you delete it (Settings → Privacy → Delete local data) or delete the app.
• Cloud data is kept for as long as your account exists. When you request account deletion, we remove your cloud data as described in the Account Deletion Policy. Residual copies may persist briefly in encrypted backups or logs before being overwritten on our providers’ normal cycles.
• AI processing: we do not retain a separate copy of notes sent for AI generation beyond what is needed to return your questions. OpenAI’s handling is governed by its own terms; we use API access that is not used to train their models where that option is available.

11. Your rights (UK GDPR / EU GDPR)

If you are in the UK or EU, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict or object to certain processing
• Data portability — receive your data in a portable form
• Withdraw consent at any time (for example, stop using AI features)
• Complain to a supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these, email cloudpilarapps@gmail.com. We aim to respond within 30 days.

The legal bases we rely on are: consent (for AI processing and creating an account), contract (to provide the app and your subscription), and legitimate interests (to keep the app secure and working).

12. Children

UnlockFocus is designed to help students focus and may be used by younger people, but it is not directed at children under 13 (or the minimum digital-consent age in your country). See our Child / Student Safety Statement. If you believe a child has provided us personal data without appropriate consent, contact us and we will delete it.

13. International users

The app may be used worldwide. If you use it outside the UK/EU, your data may be processed in the UK/EU or in regions where our providers operate. We rely on appropriate safeguards (such as standard contractual clauses) where required.

14. Changes to this policy

We may update this policy. We will change the “Last updated” date and, for significant changes, notify you in the app or by email where appropriate.

15. Contact

CloudPilar Limited
Email: cloudpilarapps@gmail.com
Web: getunlockfocus.com
Postal address: INSERT REGISTERED ADDRESS