Privacy Policy & Terms of Service

FocusNotes AI — Effective Date: June 2026 — Last Revised: July 24, 2026

Developer: Luke Mueller · itzlukeme@gmail.com · Tempe, Arizona, USA

PART I — PRIVACY POLICY

1. Scope and Applicability

This Privacy Policy applies to all versions of the FocusNotes AI mobile application for iOS, the companion web application accessible at focusnotes-psi.vercel.app, and any related services, features, or content (collectively, the "Services"). This policy applies to all users globally, including residents of the United States, the European Economic Area (EEA), the United Kingdom, Canada, Australia, and all other jurisdictions.

2. Information We Collect

2.1 Information You Provide Directly

• Account credentials: When you sign in via Google OAuth or Sign in with Apple, we receive your name, email address, and a unique identifier from the authentication provider. We do not receive or store your password.
• User-generated content: Notes, tasks, text, and any other content you create, input, or store within the App ("User Content"). You retain full ownership of all User Content.
• Voice transcripts: When you use in-app voice capture, speech is processed on your device by Apple's native Speech Recognition framework, and we receive and store only the resulting text transcript. If you instead capture a note using Siri, Apple processes your speech under Apple's own privacy policy and provides us only the resulting text. Raw audio is never transmitted to or stored by our servers in either case.
• Content shared from other apps: When you use the iOS share sheet to send text or a link to FocusNotes, that content is held on your device and then saved as a note in your account.

2.2 Information We Do Not Collect

We do not collect, process, or store: precise geolocation data, device contacts, photos or camera data (beyond what you explicitly provide), health or medical data, financial account information, government-issued identification numbers, biometric identifiers, advertising identifiers (IDFA/GAID), behavioral analytics, crash reports beyond what Apple/Expo provides natively, or any data for advertising or profiling purposes.

2.3 Automatically Collected Technical Data

We may receive basic technical information through our infrastructure providers (Supabase, Vercel) including IP addresses, request timestamps, and error logs. This data is used solely for security and service reliability purposes and is not linked to your identity for any other purpose.

3. Legal Basis for Processing (GDPR)

For users in the EEA and UK, our legal bases for processing personal data are: (a) Contractual necessity — processing required to provide the Services you have requested; (b) Legitimate interests — security, fraud prevention, and service improvement; (c) Consent — for any processing not covered above, which you may withdraw at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

4. How We Use Your Information

• Authenticating your identity and maintaining your account session
• Storing, syncing, and retrieving your notes and User Content across devices
• Processing AI requests: when you invoke AI features, relevant User Content is transmitted to Groq, Inc. for processing solely to generate your requested output
• Preventing fraud, abuse, and unauthorized access to the Services
• Complying with applicable legal obligations
• Responding to your support requests or legal inquiries

We do not use your data for: targeted advertising, behavioral profiling, sale to data brokers, training AI models (neither ours nor our providers'), or any purpose not explicitly stated in this policy.

5. Third-Party Service Providers

We share data only with the following sub-processors strictly necessary to operate the Services. Each is bound by data processing agreements and applicable privacy law:

• Supabase, Inc. (USA) — database storage and authentication infrastructure. Data processed: account information, User Content. Privacy: supabase.com/privacy
• Google LLC (USA) — OAuth 2.0 authentication only. Data processed: name, email, OAuth token. Privacy: policies.google.com/privacy
• Apple Inc. (USA) — Sign in with Apple authentication; on-device speech recognition; Siri dictation when you capture a note through Siri. Data processed: Apple ID token, speech audio (handled by Apple, never transmitted to us). Privacy: apple.com/privacy
• Groq, Inc. (USA) — AI language model inference for note organization features. Data processed: User Content text submitted for AI processing. Per Groq's data policy, inference data is not retained by default and is not used to train AI models; Groq may keep temporary logs for up to 30 days solely for reliability and abuse monitoring. Privacy: groq.com/privacy
• Vercel, Inc. (USA) — web application hosting and serverless function execution. Data processed: web requests, server-side API calls. Privacy: vercel.com/legal/privacy-policy

We are not responsible for the independent data practices of these providers. International transfers of personal data from the EEA to the USA are made pursuant to Standard Contractual Clauses or other lawful transfer mechanisms where applicable.

We may disclose your information without notice if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of the Developer, our users, or the public.

6. Children's Privacy (COPPA & GDPR-K)

The Services are not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or under 16 in EEA jurisdictions where applicable). The App requires authentication via Google or Apple, both of which independently prohibit account creation by users under 13. If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold, we will take immediate steps to delete such information from our systems. If you are a parent or guardian and believe your child has provided us with personal information, contact us immediately at itzlukeme@gmail.com.

7. Data Security

We implement reasonable and appropriate technical and organizational security measures including: TLS encryption for all data in transit; row-level security (RLS) policies in our database ensuring strict per-user data isolation; authenticated API access; and server-side management of provider credentials.

Security disclaimer: No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach materially affecting your personal information, we will notify affected users as required by applicable law, including GDPR Article 33/34 notification obligations where applicable.

User responsibility: Do not store highly sensitive information such as financial account numbers, government identification numbers, passwords, or medical records in your notes. You are responsible for maintaining the security of your authentication credentials.

Widgets: If you add a FocusNotes widget to your Home Screen or Lock Screen, note titles may be visible to anyone who can see your screen, including while your device is locked. Widget data is stored only on your device and can be removed at any time by deleting the widget.

8. Data Retention

We retain your personal data and User Content for as long as your account is active or as necessary to provide the Services. Upon account deletion (initiated by you through the in-app Delete Account feature or by written request to itzlukeme@gmail.com), we will permanently delete your personal data and User Content within 30 days, except where retention is required by applicable law, for fraud prevention, or to resolve disputes. Anonymized or aggregated data that cannot identify you may be retained indefinitely.

9. Your Privacy Rights

All users:

• Access and view your data within the App at any time
• Delete individual notes within the App at any time
• Delete your entire account and all associated data via the in-app Delete Account feature
• Request a portable copy of your data by contacting us

California residents (CCPA/CPRA): You have the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information. We will not discriminate against you for exercising your privacy rights.

EEA/UK residents (GDPR/UK GDPR): In addition to the above, you have the right to rectification, restriction of processing, objection to processing, and the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact us at itzlukeme@gmail.com. We will respond within 30 days (or 45 days where permitted).

Do Not Track: We do not engage in cross-site tracking and do not respond to Do Not Track signals because we do not track users across third-party sites or apps.

PART II — TERMS OF SERVICE

10. Eligibility and Account

You must be at least 13 years of age (or 16 in applicable EEA jurisdictions) to use the Services. By using the Services, you represent and warrant that you meet this age requirement and that all information you provide is accurate and complete. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to notify us immediately of any unauthorized use of your account.

11. License Grant

Subject to your compliance with this Agreement, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to download, install, and use the App on an Apple-branded device that you own or control, solely for your personal, non-commercial purposes. This license does not include any right to: resell or commercially exploit the Services; distribute, publicly perform, or publicly display the App; modify or create derivative works; reverse engineer, decompile, or disassemble the App; or use the App for any unlawful purpose.

12. Acceptable Use Policy

You agree not to use the Services to:

• Violate any applicable local, state, national, or international law or regulation
• Store, transmit, or organize content that is illegal, defamatory, obscene, threatening, harassing, or that infringes the intellectual property rights of any party
• Plan, facilitate, or carry out any illegal activity including but not limited to fraud, violence, drug trafficking, or terrorism
• Attempt to gain unauthorized access to our systems, servers, databases, or other users' accounts
• Probe, scan, or test the vulnerability of any system or network without authorization
• Introduce malware, viruses, trojans, worms, or other malicious code
• Use automated scripts, bots, or crawlers to access the Services
• Circumvent, disable, or interfere with security-related features of the Services
• Impersonate any person or entity or misrepresent your affiliation with any person or entity
• Store passwords, payment card numbers, social security numbers, or similarly sensitive credentials in your notes
• Use the Services in any manner that could damage, disable, overburden, or impair our infrastructure
• Sublicense, sell, resell, transfer, assign, or otherwise commercially exploit or make available to any third party the Services

We reserve the right to suspend or terminate your account immediately and without notice for any violation of this Acceptable Use Policy or any other provision of this Agreement.

13. AI Features — Important Disclaimers

AI-generated output may contain errors, inaccuracies, outdated information, or content that is inappropriate for your specific situation ("hallucinations"). We make no representations or warranties regarding the accuracy, completeness, reliability, or suitability of any AI-generated content. You assume sole responsibility for evaluating, verifying, and acting upon any AI-generated output. We expressly disclaim all liability arising from your reliance on AI-generated content.

14. User Content and Intellectual Property

Your content: You retain full ownership of all User Content you create in the App. By using the AI features, you grant us a limited, temporary, non-exclusive, royalty-free license to process your User Content solely to generate your requested output. This license terminates immediately upon completion of the AI request. We do not claim ownership of your User Content and do not use it to train AI models.

Our intellectual property: The App, including all software, design, code, features, branding, trademarks, service marks, logos, and content created by us (excluding User Content), is the exclusive property of Luke Mueller and is protected by copyright, trademark, trade secret, and other intellectual property laws. The FocusNotes AI name and logo may not be used without explicit written permission.

Your representations: You represent and warrant that: (a) you own or have the necessary rights to all User Content you submit; (b) your User Content does not infringe any third-party intellectual property rights; and (c) your User Content does not violate any applicable law.

DMCA: If you believe any content in the App infringes your copyright, contact us at itzlukeme@gmail.com with a description of the copyrighted work, the allegedly infringing material, your contact information, and a statement of good faith belief that the use is unauthorized.

15. Third-Party Services

The Services integrate with third-party services including Google, Apple, Supabase, Groq, and Vercel. Your use of these services is independently governed by their respective terms of service and privacy policies. We are not responsible for the availability, content, accuracy, security, or practices of any third-party service. Any issues with third-party services must be directed to the respective provider. We disclaim all liability arising from your use of third-party services accessed through or in connection with the App.

16. Service Availability and Modifications

We reserve the right to modify, suspend, discontinue, or terminate the Services or any part thereof at any time, with or without notice, for any reason including maintenance, security concerns, legal compliance, or business decisions. We shall not be liable to you or any third party for any modification, suspension, discontinuation, or termination of the Services. We recommend maintaining your own backups of important information and not relying solely on the App for critical data storage.

We reserve the right to modify this Agreement at any time. Material changes will be communicated through the App or by email where practicable. Your continued use of the Services following notification of changes constitutes your acceptance of the revised Agreement. If you do not agree to the revised Agreement, you must stop using the Services.

17. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND. THE DEVELOPER EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING WITHOUT LIMITATION: IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT; WARRANTIES THAT THE SERVICES WILL MEET YOUR REQUIREMENTS OR BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE; WARRANTIES REGARDING THE ACCURACY, RELIABILITY, OR COMPLETENESS OF ANY CONTENT OR INFORMATION; AND WARRANTIES ARISING FROM COURSE OF DEALING, USAGE, OR TRADE PRACTICE. NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED FROM US OR THROUGH THE SERVICES SHALL CREATE ANY WARRANTY NOT EXPRESSLY STATED HEREIN. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES; IN SUCH JURISDICTIONS, OUR LIABILITY SHALL BE LIMITED TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW.

18. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL LUKE MUELLER, HIS AFFILIATES, LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS, OR DIRECTORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION: LOSS OF PROFITS, REVENUE, DATA, BUSINESS, GOODWILL, OR ANTICIPATED SAVINGS; PERSONAL INJURY OR PROPERTY DAMAGE; COST OF SUBSTITUTE SERVICES; OR ANY OTHER INTANGIBLE LOSS, ARISING OUT OF OR RELATED TO YOUR ACCESS TO OR USE OF (OR INABILITY TO ACCESS OR USE) THE SERVICES, ANY USER CONTENT, ANY CONDUCT OR CONTENT OF ANY THIRD PARTY, OR ANY UNAUTHORIZED ACCESS, USE, OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT — REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, STRICT LIABILITY, OR OTHERWISE) AND EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THIS AGREEMENT OR THE SERVICES SHALL NOT EXCEED THE GREATER OF: (A) THE TOTAL AMOUNT YOU PAID US IN THE TWELVE MONTHS PRECEDING THE CLAIM, OR (B) TEN DOLLARS (USD $10.00). THE EXISTENCE OF MORE THAN ONE CLAIM WILL NOT ENLARGE THIS LIMIT.

SOME JURISDICTIONS DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTIES OR THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IF YOU RESIDE IN SUCH A JURISDICTION, SOME OR ALL OF THE ABOVE DISCLAIMERS AND LIMITATIONS MAY NOT APPLY TO YOU, AND YOU MAY HAVE ADDITIONAL RIGHTS.

19. Indemnification

You agree to defend, indemnify, and hold harmless Luke Mueller and his affiliates, licensors, service providers, employees, agents, officers, and directors from and against any and all claims, damages, obligations, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to: (a) your use of or access to the Services; (b) your violation of any provision of this Agreement; (c) your violation of any third-party right, including without limitation any intellectual property right, privacy right, or proprietary right; (d) your User Content; (e) your violation of any applicable law or regulation; or (f) any claim that your User Content caused damage to a third party. This defense and indemnification obligation will survive termination of this Agreement and your use of the Services.

20. Governing Law and Jurisdiction

This Agreement shall be governed by and construed in accordance with the laws of the State of Arizona, United States of America, without regard to its conflict of law provisions or the United Nations Convention on Contracts for the International Sale of Goods. You irrevocably consent to the exclusive jurisdiction and venue of the state and federal courts located in Maricopa County, Arizona for any disputes arising from this Agreement.

21. Apple-Specific Terms (EULA)

The following terms apply to your use of the iOS version of the App distributed through the Apple App Store: (a) This Agreement is between you and the Developer only, not with Apple Inc. ("Apple"). Apple is not responsible for the App or its content. (b) The license granted is limited to use on Apple-branded products that you own or control, as permitted by the App Store Terms of Service. (c) Apple has no obligation to provide maintenance or support for the App. (d) In the event of any product liability, consumer protection, privacy, or intellectual property claim relating to the App, the Developer (not Apple) is responsible. (e) Apple and its subsidiaries are third-party beneficiaries of this Agreement and, upon your acceptance, Apple will have the right to enforce this Agreement against you as a third-party beneficiary.

22. General Provisions

• Severability: If any provision of this Agreement is held invalid or unenforceable, such provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.
• Waiver: Our failure to enforce any right or provision of this Agreement will not be deemed a waiver of such right or provision.
• Entire agreement: This Agreement constitutes the entire agreement between you and the Developer regarding the Services and supersedes all prior agreements, representations, warranties, and understandings.
• Assignment: You may not assign or transfer this Agreement or any rights hereunder without our prior written consent. We may assign this Agreement without restriction.
• Force majeure: We will not be liable for any failure or delay in performance resulting from causes beyond our reasonable control, including acts of God, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, accidents, strikes, or shortages of transportation, fuel, energy, labor, or materials.
• No third-party beneficiaries: Except as expressly provided for Apple in Section 21, this Agreement does not create any third-party beneficiary rights.
• Survival: Sections 14, 17, 18, 19, 20, and 22 shall survive termination of this Agreement.

23. Contact Information

For all privacy requests, legal notices, data deletion requests, copyright claims, or general inquiries regarding this Agreement, contact:

Luke Mueller — Developer, FocusNotes AI

Tempe, Arizona, USA

Email: itzlukeme@gmail.com

Response time: We aim to respond to all inquiries within 5 business days and to all legal/privacy requests within 30 days as required by applicable law.