Privacy policy

Who the controller is

AltoFocus (the website www.altofocus.app and the app at app.altofocus.app, including the iOS and macOS apps) is developed and operated by Štichauer s.r.o., company ID (IČO) 23312980, VAT ID CZ23312980, registered office Starobělská 1937/4, 700 30 Ostrava, Czech Republic. The company is the controller of your personal data under Regulation (EU) 2016/679 (GDPR).

Privacy contact: hello@altofocus.app. We answer requests without undue delay and within 30 days at the latest. We have not appointed a data protection officer because the law does not require us to.

In short

• Your tasks, projects and goals are stored in the EU (Ireland) and are visible only to you and the people you share a specific project with.
• We use no analytics or advertising cookies and no third-party tracking scripts.
• We don't sell personal data and don't use it to train AI models.
• AI features are on only with your consent, which you can withdraw at any time. Then we send the model only the data that request needs.
• Voice recordings are transcribed to text and not stored.
• You can delete your account and all data at any time, right in the app.

What data we process

Account and sign-in

• E-mail address and password (stored only as a hash), or your Apple or Google account identifier if you use Sign in with Apple or Google. With Apple you can use a private relay address.
• Your name, if Apple provides it the first time you use Sign in with Apple. App language, time zone and preferences (appearance, notifications, AI settings including your AI consent).
• Technical sign-in data: sign-in times, session refresh tokens.

Content you put into AltoFocus

• Tasks, projects, folders, areas, tags, perspectives, checklists, templates, notes and dates.
• Attachments you upload to tasks (stored in Supabase Storage).
• Identity layer — goals, vision, purpose, legacy, values, ikigai and other entries on the Horizons screen. This data is private and is never shared with other users, even when you share a project with them.
• Sharing data: who you invited to a project (the invitee's e-mail) and who belongs to a shared project.
• History of weekly reviews and planning sessions.
• Reports and blocks: when you report an invite or a shared project, we store the reason, your note and details of the reported project and user. When you block someone, we store who you blocked.

AI features (only if you allowed them)

• Messages you write to the AI partner and its replies (chat history stored on the server so you can continue a conversation), AI proposals awaiting approval, and a record of whether you approved or rejected them.
• Counts of AI requests and tokens used (for limits and abuse prevention).

Voice capture

When you dictate a task, the audio is sent to our server and from there to a speech-to-text model for transcription (via OpenRouter, see below). The resulting text is used to suggest tasks. We do not store the recording — it is discarded once the request is processed. Only the tasks you confirm are saved. In the AltoFocus apps for iPhone and Mac, speech is turned into text by Apple's speech recognition (on the device, or on Apple's servers), and only the text reaches us. Keyboard dictation (iOS/Android) is handled by the device maker. Voice capture with task recognition is an AI feature, so it only works with your consent.

Notifications

If you enable notifications, we store a device token for the Apple Push Notification service (iPhone app) or your browser's Web Push subscription. Notification content (such as a task title) passes through Apple or your browser's push service (Google, Mozilla, Apple, Microsoft).

API and integrations

If you create an API key or a webhook, we store a hash of the key (not the key itself), its name, when it was last used and the webhook URL.

Technical data

For every request, our hosting provider Vercel processes the IP address, browser type, time and requested URL (server logs). We use them only for operations, security and debugging.

What we don't process

We don't collect location, contacts, photos or payment card details. We use no analytics tools, ad networks, tracking pixels or fingerprinting.

Why, and on what legal basis

We don't send you marketing messages. If we ever want to, we'll ask for your consent first.

AI and your data

AI features are part of the Altitude plan (everyone has them during the beta). They are on only with your consent: before you first use AI, the app tells you what is sent and to whom, and asks. Your answer applies on the web, iPhone and Mac, and you can withdraw it in Settings → AI. Without consent we send nothing to AI and the app works without AI features.

• We send AI requests through OpenRouter (OpenRouter, Inc., USA), which routes them to language-model providers (for example Google, Anthropic, OpenAI). The specific model may change based on quality and price.
• We send only the data a request needs: your message and the relevant slice of tasks, projects and areas. That data is marked as untrusted in the prompt so the model cannot execute it as instructions.
• The AI reads your identity layer (values, vision, purpose, legacy) only if you allow it separately in Settings → AI (off by default), or when you use the horizons guide when you first start the app. There you can also switch off proactive features — the morning brief, automatic inbox clean-up and review preparation.
• We prefer providers and modes that don't retain data or train on it (zero data retention) where available. We never use your data to train models ourselves.
• The AI never deletes, cancels or bulk-moves anything without your explicit confirmation.

Who we share data with

Data is processed by these processors, with whom we have data processing agreements (DPAs) or whose standard processing terms apply:

All processors are bound by contract to protect your data at the same or an equivalent level as described in this policy, and to use it only for the purposes listed above.

If you share a project with someone, they see that project's content, your name and your e-mail. Nothing else.

We may disclose data to public authorities where the law requires it.

Transfers outside the EU

Some services (OpenRouter and model providers, Resend, Apple, Google, parts of Vercel's infrastructure) may process data in the USA or other countries outside the EEA. Transfers rely on a European Commission adequacy decision (the EU–US Data Privacy Framework, where the recipient is certified) or the EU standard contractual clauses.

How long we keep data

• Account and content: for as long as the account exists. When you delete your account, data is removed from the production database immediately and from backups within 30 days at the latest.
• AI chat history: for as long as the account exists; you can ask us to delete it sooner.
• Voice recordings: not stored, only for the duration of the request.
• Server logs: short term, usually up to 30 days.
• Contact form and e-mails: as long as needed to handle your question, at most 2 years.
• Content reports: as long as needed to resolve them, at most 2 years. Deleting your account also deletes your reports and blocks.
• Accounting records (once paid plans exist): 10 years, as required by Czech law.

Your rights

You have the right to access your data, rectify it, have it erased, restrict processing, port it, and object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time.

• Delete your account: in the app under Settings → Account → Delete account. The account and data are deleted immediately and permanently, including uploaded attachments. If you signed in with Apple, we also revoke Sign in with Apple access.
• Withdraw AI consent: in the app under Settings → AI, turn off AI features. From then on we send nothing to AI.
• Export your data: via the REST API, or write to us and we'll send it in a machine-readable format.
• Send any other request to hello@altofocus.app.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz) or the supervisory authority where you live.

Cookies

We use only essential sign-in cookies and a language cookie. Details are in the cookie policy.

Children

AltoFocus is not intended for children under 15. If we learn that a child under 15 created an account without a parent's consent, we will delete it.

Security

Data is encrypted in transit (HTTPS/TLS) and at rest in the database. Row Level Security rules in the database ensure each user can read only their own data and the projects shared with them. Access to production systems is limited to a small number of people.

Changes to this policy

We may update this policy, for example when we add a feature or a processor. We will tell you about material changes in advance by e-mail or in the app. The date of the last change is shown at the top.

This policy exists in Czech and English with the same content. For users in the Czech Republic the Czech version is binding; for everyone else, the English version.