Privacy at FocusBean

Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

In short

FocusBean is a task planner. Without signing in, your folders and tasks stay in the browser on your device. When you sign in with Google they are also stored at Supabase so they reach several devices. The AI features send your text to Google Gemini. There is also a feedback form.

The site contains no analytics and no advertising, sets no cookies and loads fonts and images from its own server. There is no profiling and no automated decision with legal effect.

When you open the page

The site is hosted by Netlify. When you open it, Netlify processes the technically necessary data so it can be delivered: IP address, date and time, requested address, referrer and browser identifier. I do not analyse these logs myself.

The legal basis is Art. 6(1)(f) GDPR (delivering the site securely and reliably). How long Netlify keeps its logs is governed by Netlify’s own terms.

Netlify, Inc.

101 2nd Street, San Francisco, CA 94105, USA

Data may be transferred to the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Device storage

FocusBean stores in your browser your folders and tasks, the chosen view, your limits for folders and tasks, the sound setting and a marker that you have seen the introduction. Without these entries the app cannot keep anything; the legal basis is Section 25(2) no. 2 TDDDG. They stay until you clear browser storage, which is also how you delete the local data. I set no cookies.

Sign-in and sync

Signing in is optional and works through Google. Name, email address and profile picture come from there and are shown in the app. At Supabase I store your user ID and the complete list of your folders and tasks (names, texts, due dates, priorities).

The legal basis is Art. 6(1)(b) GDPR, because I cannot offer sync without storing the data. The data stays until you delete your account. There is no button for that: write to me at the address above and I will delete your account and all data belonging to it.

Supabase Pte. Ltd.

65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513, Singapore

Transfers to a country outside the EU are based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Provider’s privacy policy

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Artificial intelligence (Google Gemini)

Four features use Google Gemini: the Brain Dump sorts free text into tasks, the image pick chooses a fitting image for a folder name from my own selection, the date detection reads a date from a text, and the schedule suggests dates for your tasks. What goes to Google is the text you entered, folder names or task texts, and times. The request runs through my server at Netlify. Nothing else, such as photos or your account, goes along.

The legal basis is Art. 6(1)(b) GDPR, because you trigger the feature yourself. Under the Gemini API terms, users in the EEA, Switzerland and the United Kingdom get the rules of the paid tier; Google does not use input there for training. Google keeps requests for a limited time under its own rules. Do not write anything into the Brain Dump that you do not want to entrust to Google.

Google LLC

1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data may be transferred to the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Feedback form

In the settings you can send me feedback. The form sends your message and, if you enter it, your email address to Netlify Forms, where I read it. Without an address I cannot reply. A hidden field only serves spam protection.

The legal basis is Art. 6(1)(b) GDPR if your message aims at a reply, otherwise Art. 6(1)(f) GDPR. I delete the message once your matter is settled.

Netlify, Inc.

101 2nd Street, San Francisco, CA 94105, USA

Data may be transferred to the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

How long

Local data stays until you clear browser storage. Folders and tasks at Supabase stay until you have your account deleted. Logs at a provider follow that provider’s periods.

Links to other sites

The Buy Me a Coffee link in the settings is an ordinary link. Only when you click it does your browser connect to the destination; its privacy policy applies there.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interests (Art. 21). An email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.