Deep Focus Planner ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services, particularly our integration with Google Calendar.
Google API Disclosure
Our application uses Google APIs to provide core scheduling features. Our use and transfer to any other app of information received from Google APIs will adhere toGoogle API Services User Data Policy, including the Limited Use requirements.
How we use Google Data:
Calendar Discovery: We read your calendar list so you can choose calendars, then read the calendars you select to identify "busy" slots and existing meetings.
Event Management: We create and update "Deep Work" blocks on your behalf, on the one calendar you choose for focus sessions, to help you manage your time.
Minimum Necessary Access: We request read-only access to your calendar metadata and write access limited to calendar events. Deep Focus Planner only changes its own focus sessions automatically. Other events change only when you edit them yourself, and only on calendars you own or can edit. We never sell your calendar data.
Sharing, Transfer, and Disclosure of Google User Data
We do not sell Google user data. We do not share, transfer, or disclose Google user data to any third parties for advertising, marketing, or commercial profiling purposes.
Deep Focus Planner transfers or discloses Google user data only to the specific service providers (subprocessors) listed below, solely as strictly necessary to provide our core scheduling functionality:
Anthropic, PBC (United States) — AI inference subprocessor. Receives only the start times, end times, and titles of calendar events on the specific date being scheduled, alongside your task list, in order to place focus blocks into open gaps. Under its commercial terms, Anthropic does not use these inputs or outputs to train its models and automatically deletes them within 30 days.
Groq, Inc. (United States) — Backup AI inference subprocessor, used only if we switch away from our primary provider. Receives the same limited data described above, operates under zero data retention, and is prohibited from using Google user data to train or fine-tune AI models.
Google Cloud & Firebase (Google LLC) — Cloud storage and authentication. Stores user account records, task items, and generated schedule blocks in Cloud Firestore.
Railway Corp. & Cloudflare, Inc. — Cloud infrastructure and hosting. Routes encrypted HTTPS traffic to host the backend API and frontend application.
Stripe, Inc. — Payment processing. Stripe receives billing and payment data only; Stripe never receives, accesses, or processes any Google user data or calendar data.
PostHog, Inc. (EU Cloud region) — Product analytics and error monitoring. Receives only pseudonymous account identifiers (Firebase user ID), operational usage counts, plan tier, and error stack traces to diagnose reliability issues. PostHog never receives, accesses, or processes any Google user data, calendar event titles or descriptions, task names or notes, or email addresses.
Apart from the service providers listed above, we will not transfer or disclose Google user data to any third party unless required by law (e.g., to comply with a valid subpoena, court order, or governmental regulation) or necessary to protect the vital security of our users. If Deep Focus Planner is involved in a merger, acquisition, or sale of assets, users will be notified before any Google user data is transferred or becomes subject to a different privacy policy.
AI Processing and Limited Use
Deep Focus Planner uses an AI model to categorize your tasks by cognitive load and to place them in your day. To do this, we send your task names, your scheduling constraints, and the titles and times of the calendar events on the day being scheduled to our AI inference provider, Anthropic, PBC, which runs its Claude models on its own infrastructure. If we ever need to fall back to our backup provider, Groq, Inc., the same limited data is sent to Groq instead.
Our commitments:
No training on your data & No model retention: Deep Focus Planner does not retain, store, transfer, or use user data obtained through Google Workspace APIs to develop, improve, or train generalized AI and/or machine learning (ML) models. The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
No training by third-party AI providers: Anthropic does not use our API inputs or outputs to train its models, and automatically deletes them within 30 days. Content its automated safety systems flag as a possible usage policy violation may be kept longer for trust and safety review. Our backup provider, Groq, operates under zero data retention.
No human review by us. Deep Focus Planner staff do not read or annotate Google user data sent for AI processing. Our AI provider may review content only if its automated systems flag it for a safety investigation.
Minimum necessary. We send only what is needed to place the schedule. We do not send event descriptions, attendees, locations, attachments, or events outside the day being scheduled.
Information We Collect & Payment Processing
We collect information you provide directly to us, such as your name and email address when you sign in via Google. We also cache certain task descriptions and schedule preferences to provide a personalized AI-driven experience.
Payment Processing: Payments are processed securely via Stripe, Inc. When you purchase a subscription, Stripe collects payment information (credit card numbers, billing addresses) necessary to process your payment. Deep Focus Planner does not collect, store, or view full credit card numbers.
Product Analytics & Error Monitoring
We use PostHog (hosted in its European Union cloud region) to track aggregate product funnel performance and identify application crashes. We operate under strict data minimization:
What is sent: A pseudonymous account ID (Firebase UID), event counts, subscription plan tier, anonymized campaign attribution tags (e.g. UTM parameters), and error stack traces.
What is NEVER sent: Calendar event details, task names or descriptions, Focus Companion prompts, LLM responses, or email addresses. Request bodies and headers are strictly scrubbed.
Browser Analytics & Consent: Marketing pages operate in a cookieless, in-memory mode that writes no tracking cookies to your device. Inside the authenticated app, product analytics events are emitted solely from our backend servers, while the browser client only reports unhandled application crashes.
Data Retention
We retain your authentication tokens and cached calendar metadata only as long as your account is active. You can revoke access at any time via your Google Account settings, which will immediately stop our ability to access your data.
Security
We implement industry-standard security measures, including encryption of access tokens at rest and in transit, to protect your sensitive calendar data from unauthorized access.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: support@deepfocusplanner.app