Privacy policy

• DaintyFocus dey work without account. If you no get account, everything go stay for your device.
• No ads and no tracker, for the app or for this website.
• If you sign in, we go store your email address, your preset dem and your session history so your device dem fit share dem.
• The app dey send usage count dem (how many times some things happen, with nothing wey fit show na you) and crash report dem. You fit off any of dem anytime.
• You fit delete your account, and everything wey we store with am, from the app anytime.

Na Daintymindz make DaintyFocus, and Daintymindz na the data controller for the personal data wey we talk about here. We dey follow the Nigeria Data Protection Act 2023 (NDPA). For anything about your data, write to hello@daintymindz.com.

The app dey keep your preset, schedule, session history and settings for database inside your phone. If you sign in, your sign-in token dem dey stay for the phone secure storage. None of these one go comot from the phone unless you sign in. Apart from that, na only usage count and crash report dem the app dey send, and you fit off dem.

The app dey ask permission to show notification, to set alarm wey go ring on time and, if you choose, to make the phone quiet during focus. Na only for the phone we dey use these ones.

If you delete the app, or you use You › Privacy › Delete everything for this phone, e go clear am.

You no must sign in. E dey back up your work and e dey make your other device dem fit use am. We dey store:

• your email address, and, if you sign in with Google, the account number wey Google give us for you (no be your Google name or picture);
• display name, only if you set one. E dey show as the person wey make the preset dem wey you publish, and to the people for your study room dem;
• your age group (under 13, 13 to 17, or 18 and above), if you give am;
• your preset dem, their old version dem, and your session history (when you run which preset, and im pause and skip dem);
• the device dem wey you sign in with, with their type (Android, iOS or web) and the last time you use each one;
• sign-in token dem, wey we store only as hash, and dem go expire after 60 days wey you no use dem;
• if you add passkey, im public key and id, the name wey we give am, whether your password manager dey back am up, and when you add am and the last time you use am. The passkey itself, and the fingerprint or face wey dey open am, no dey ever comot from your device or password manager;
• sign-in link dem wey we email you, wey we store only as hash, with the address wey we send dem to and the IP address wey ask for dem. We dey use the IP address only to limit how many links one place fit ask for. We dey delete these records after one day.
• API token and webhook dem, only if you make dem: we dey store token only as hash, with im name and the last time you use am; webhook na the address wey you give, the events wey e dey hear about and im secret. When we call webhook, we dey send that address wetin the event talk (for example which period of which preset just start) and we dey keep record of each delivery for one week.
• if you connect Google Calendar or Outlook: the key wey e give us (encrypted), the DaintyFocus calendar wey we make there and the events wey we write inside am, and when you dey busy for your own calendar for the next two weeks (when, never wetin). If you disconnect, e go delete dem.
• if you connect Todoist, Google Tasks or Microsoft To Do: the keys wey that app give us (encrypted), which of im list dem go with which preset, which task for there be which task for here, and the last time we sync. If you disconnect, e go delete dem.
• the group dem wey you dey run or wey you join, and whether, and since when, you dey count your session dem for each one total.

When you delete preset or session, we dey keep small marker for am so your other device dem go know say you don delete am. If you delete your account, e go clear these ones too.

If you publish preset, im name, wetin dey inside am and your display name (if you set one) go show for public page wey anybody fit see and copy, and wey search engine dem fit list. Unpublish am, or delete am, to remove the page. Preset wey you share with link different: the preset dey inside the link itself and e no dey ever reach us.

If you make or join study room, we dey store which room dem you dey inside, the last time you open each one and whether you dey focus that time. The other people for the room dey see your display name and whether you dey here and dey focus, nothing else about you. Room no get chat. Na only people wey dey inside room fit see im name and im preset (without im labels). If you report room name or person display name, we go keep the report and the words wey you report until we look am; nobody for the room go know. Rooms na for people wey don reach 13 and above, and room dey only take people wey dey the same age group as the person wey make am, except group room: na only the group members and the person wey dey run the group e dey take, whatever their age group. If nobody open room for two weeks, we go delete am.

If you join group, like class or team, the person wey dey run am go see the display name wey you choose, or nothing, and e no go ever see your email address, your own preset dem, your history or whether you run the group preset dem. The group preset and schedule dem dey reach your device dem through sync, and dem go comot when you leave the group.

If you on Count my session dem for group total, your session and planned time dem from that time go join the other members own wey on am, and the person wey dey run the group go see, week by week, how many people run each preset, the focus time and how many session dem start on time. Dem no go ever see who dey count, or one member figure, and we go hide any figure wey come from less than 5 members. We no dey store anything about the total: we dey work am out when dem look am. If you off am, e go remove you from every week, plus the ones wey don pass.

Our server dey write one line for each request: the method, the address for our server (without any query), the result, how long e take and random request id. We no dey ever log request body, token or email address. If the server get error, report of am dey go Sentry (see below), without personal data.

When the app crash, e go send the error, where inside the code e happen, the app version and basic facts about the device (like im model and system version) to Sentry. E no dey ever send your preset, history, account details, screenshot or wetin dey screen. Off am anytime for You › Privacy › Send crash report dem.

To know which parts of DaintyFocus people dey use, the app and this website dey send us count dem. You fit off dem anytime: for the app for You › Privacy › Send usage count dem, and for this website with the switch below.

When dem dey on, at most once every day, we go receive:

• how many times, for each day, you open the app or the timer page, start session, finish one, make preset, use each template, and use schedule, task, exam plan or recap dem;
• the app or website version, and whether na Android, iOS or the web.

Na only that one. No account, email address, device id, IP address, location, preset, history or anything wey you type. Whether you sign in or not, the count dem dey the same and dem no dey connect to your account. Our server dey add dem to total for each day, so nobody fit know whose count dem be. E dey look the IP address only to stop one place wey dey send too many requests, inside memory and we no dey ever store am. If e fail to send two times, we go throw those count dem away; if you off count dem, we go throw away the ones wey never send.

The website dey set one cookie, and na only if you pick language: e dey remember which one. E no dey load third-party script, ads or tracker. E dey keep, only for your browser:

• the theme wey you pick, if you pick one;
• the timer wey you dey run, so if you reload, e no go lost;
• your sign-in token, if you sign in for this website;
• whether you off usage count dem, and count dem wey dey wait to send.

If you clear this site data for your browser, e go clear dem.

We dey use some services to run DaintyFocus. Each one dey get only wetin e need to do im work:

• Railway dey host our server and database.
• Resend dey send the sign-in emails, so e dey receive your email address and the link.
• Google, if you choose to sign in with Google, dey confirm who you be and e dey tell us your email address.
• Sentry dey receive crash report dem from the app, and error report dem from our server.
• Anthropic (the Claude AI) dey answer the AI help wey you no must use, for people wey don sign in, and only when you tap im button: e dey receive the description wey you type, the syllabus wey you paste with the days wey remain before your exam, or your focus numbers for the last few weeks. E no dey ever get your name or email address.
• Google and Microsoft, only if you connect Google Calendar or Outlook: dem dey receive your planned session dem (the time and the preset name) for the DaintyFocus calendar, and dem dey tell us when you dey busy, never wetin.
• Todoist, Google Tasks and Microsoft To Do, only if you connect one and link list: dem dey receive the titles of your tasks for the preset dem wey you link and whether each one don finish, and dem dey send us the tasks for that list. If you lock your task titles, nothing go reach dem.
• Firebase App Distribution (Google) dey send test version dem of the app to people wey agree to test dem, so e dey receive the testers email address. E no be part of the app wey we release.

Some of these services dey store data outside Nigeria. Where dem dey do am, we dey depend on the protection wey NDPA allow for that kind transfer. We no dey sell your data, and we no dey share am with anybody else unless the law say we must.

• To give you the account wey you ask for: backup, sync, sign-in and publishing (the NDPA basis na our contract with you).
• To keep the service safe, for example to limit sign-in requests and to keep logs (our legitimate interest).
• To fix crashes (our legitimate interest to make the app work well; you fit off crash report dem).
• To know which parts of DaintyFocus people dey use (our legitimate interest to make am better; the count dem no dey show who anybody be, and you fit off dem).
• To show the person wey dey run group im total, only from members wey on am (your consent, wey you fit take back).

You must reach 13 or pass am before you fit make account. We no go allow anybody wey talk say e never reach 13 to sign up, until we get way for parent or guardian to give permission. The app dey work fully without account for any age. If you think say child wey never reach 13 get account, write to hello@daintymindz.com and we go delete am.

We dey keep your account data until you delete your account. Sign-in links dey go after one day, and sign-in tokens dey go small time after dem expire or dem end. Copies fit still dey our database backups until those backups expire.

Under the NDPA, you fit:

• ask for copy of the personal data wey we get about you;
• make we correct am or delete am;
• talk say you no agree with how we dey use am, or take back consent wey you give;
• ask for am in a form wey you fit carry go another place.

To delete everything at once, use Account › Delete my account for the app. Your preset, history, device, sign-in and page dem wey you publish go clear from our database immediately; wetin dey your phone go stay. For anything else, write to hello@daintymindz.com. If our answer no satisfy you, you fit complain to the Nigeria Data Protection Commission.

Everything wey dey move between the app, the website and our server dey travel encrypted. We dey store sign-in links and tokens only as hash, and na only with person own sign-in fit read im data.

When this policy change, we go update the date for the top, and we go tell you for the app if the change important.