This Privacy Policy explains what personal data FocusTrack (the “Service”) collects, why, and how it is handled. The data controller is Rede Ventures Oy(“we”, “us”). You can reach us at janne@rotko.fi. We do not sell your data, and we do not use it for advertising.
Data we collect
- Account data: your email address, an encrypted password (managed by our authentication provider), and an optional display name and avatar.
- Workspace data: workspace names, logos, currency, language, rounding preferences, members, and invitations (including the email addresses of people you invite).
- Business records you create: customers and their hourly rates, time entries (hours, dates, descriptions, rates), active timers, products and retainers, and monthly goals.
- Billing data: your plan and subscription status, and identifiers from our payment processor (such as a customer or subscription ID). Card and payment details are collected and stored by Stripe, not by us.
- Technical data: information stored locally on your device (such as your session token and interface preferences) and basic data necessary to operate and secure the Service.
Some of the records you enter, for example a customer's name or a colleague's email, may be personal data about other people. For that data you act as the controller, and you are responsible for having a lawful basis to add and use it in the Service.
How and why we use your data
We use your data solely to provide the Service: to authenticate you, store and display your records and statistics, enable workspace collaboration, and process subscriptions. Under the GDPR, our legal bases are the performance of our contract with you (to provide the Service), our legitimate interests (to operate, secure, and improve the Service and prevent abuse), compliance with legal obligations (such as accounting for payments), and, where applicable, your consent. We may use aggregated, anonymised usage information to improve the product.
How your data is stored and protected
Your data is stored in our cloud database, hosted in the European Union (Germany), and is scoped to your account and workspace using row-level security, so only you and the members of your workspace can read or modify your records. Access is protected by authentication and reasonable technical and organisational safeguards. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Third-party processors
We rely on a small number of trusted providers that process data only on our behalf and under our instructions:
- Supabase, which provides database hosting, authentication, and storage of your account and business records.
- Stripe, which handles payment processing and subscription management for paid plans.
These providers may process data on servers located inside or outside the European Economic Area. Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission's standard contractual clauses.
Data retention
We keep your data for as long as your account is active or as needed to provide the Service. If you delete your account or a workspace, the associated records are deleted, though backups or data we must retain for legal reasons (such as records of payments) may persist for a limited period.
Your rights
Subject to applicable law, you have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to withdraw consent where processing is based on it. You can access and export much of your data directly in the app. To make a request, contact us at janne@rotko.fi, and we will respond within the time required by law. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority. In Finland, that is the Office of the Data Protection Ombudsman.
Cookies and local storage
The Service uses local storage on your device to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies.
Children
The Service is not intended for children under 16, and we do not knowingly collect their personal data.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you and update the date above.
Contact
Questions about privacy? Contact us at janne@rotko.fi or through the app's support.