Privacy policy for ActualFocus and actualfocus.com.

System permissions and local signals

Depending on the features you enable, ActualFocus may request or use camera access, Accessibility access, local notifications, and browser integration.

• Camera access is used to analyze frames locally for person presence, phone visibility, and coarse attention checks during a session.
• Accessibility access is optional and lets the app include active window titles in the local event stream.
• Safari integration and the optional Chrome integration can send the active page URL and page title locally to the app so it can classify the frontmost browser activity.
• Sessions are manual by default. If you later enable launch at login and auto-start, the app can start a session automatically after login using your saved preference.

What the app stores locally

ActualFocus is designed to store the session record on your Mac. Local data can include:

• Session start, pause, resume, and stop events
• Derived timeline segments such as Focused, Phone Visible, digital distraction, Away, and Unknown
• Frontmost app changes, idle or away state, and related local classification data
• Browser name, domain, URL scheme, and page title while browser integration is active during a session
• Focused window titles if you grant macOS Accessibility access
• Derived camera signals such as person present, phone visible, coarse attention checks, confidence values, and camera health
• Rules, settings, onboarding state, and telemetry preferences
• Local export files you explicitly create

What stays local by default

ActualFocus is not intended to turn your Mac into a surveillance device. By default, the following do not leave the device as part of normal app operation:

• Webcam photos, webcam video, and audio recordings
• Raw screen contents, keystrokes, clipboard contents, or copied text
• Raw browser page content and full browsing-history logs
• Raw camera frames, per-sample camera observations, raw app timelines, and raw session logs sent off-device by default
• Focused window titles, full URLs, and detailed per-domain activity logs sent off-device by default

Optional telemetry and third parties

ActualFocus supports optional off-device diagnostics and anonymous product analytics only when telemetry is configured in the build and you explicitly enable it.

• Current public direct-download release builds start diagnostics and usage telemetry off by default.
• If you explicitly enable telemetry later in Settings, ActualFocus may send a small allowlisted set of anonymous usage events, coarse session-summary metrics, crash reports, and error diagnostics.
• Approved telemetry processors are Sentry for crash and error reporting and PostHog for anonymous product analytics.
• Telemetry does not include raw camera frames, raw browser activity, full URLs, focused window titles, raw app timelines, raw session logs, or user-entered goal text.

Any processor that handles ActualFocus user data for these limited purposes is expected to protect that data to the same or better standard described in this policy and only for the disclosed purposes.

What the website collects

The public website and the installed app are separate surfaces. Visiting the site does not grant the website any of the permissions the app may request later on your Mac.

• The website may process technical request data such as IP address, browser type, requested page or file, timestamp, and referrer so pages and downloads can load.
• The website uses anonymous website analytics for page views, page leaves, trust-surface page views, browser-code link clicks, download clicks, FAQ opens, and acquisition measurement.
• Website analytics stay separate from app telemetry and are not used to connect your browsing to your app sessions.
• The website does not receive your camera frames, session timeline, focused-window history, or detailed app activity from the installed app.

Retention, deletion, and consent

Apple requires privacy policies to explain retention and revocation clearly. For ActualFocus, the practical answer is:

• Core session data remains on your Mac until you remove it, replace it through normal app operation, delete it from Settings, or remove the app and its local data from the device.
• In the app, Settings > Technical Details > Delete Local Data resets local session history, events, rules, settings, onboarding state, and local preferences on that Mac. Telemetry settings return to the current build default.
• Export files remain wherever you save or share them.
• If you enable optional telemetry, the limited off-device data sent to Sentry or PostHog is retained according to those providers and your configured release setup.
• You can withdraw telemetry consent in Settings by turning diagnostics and usage telemetry off, and you can reset the anonymous telemetry identity from Settings.
• ActualFocus does not require an account for its core features, so there is no server-side focus-history account to delete. If you need help with deletion of off-device diagnostics or support correspondence we control, contact support.