Privacy Policy

Last updated: October 18, 2026

1. Overview

FocusLedger is built for people with ADHD who want to understand their money and manage their tasks in one place. We take your privacy seriously. This policy explains what data we collect, why we need it, how we protect it, and what rights you have.

We are FocusLedger. If you have questions about this policy, contact us at privacy@focusledger.net.

2. What We Collect

We collect only what we need to run the service. Here's what, why, and how:

We do not collect biometric data, precise location data, health information, or any data not listed above.

3. How We Store & Protect Data

All personal data is stored in a PostgreSQL database hosted on Neon (a fully managed PostgreSQL service by Neon Technologies). Data is encrypted at rest on Neon servers.

Access tokens for bank connections (Plaid) and email connections are encrypted at rest using AES-256-GCM before being stored in our database. These tokens are only accessible to your own account and are never shared between users.

Passwords are salted and hashed using PBKDF2 (SHA-512, 100,000 iterations). We never store plaintext passwords. If you sign in with Google, we don't have a password for you at all.

Uploaded documents are stored in S3-compatible cloud object storage (Cloudflare R2).

Data isolation: Each user can only access their own data. We enforce this at the application layer via authenticated session tokens.

Data transit is protected by TLS 1.2+. We do not support outdated cipher suites.

4. Third-Party Integrations

We use third-party services to operate FocusLedger. Each handles data according to their own privacy policies:

Plaid, Inc. (Bank & Financial Data)

FocusLedger uses Plaid to connect your bank and credit accounts. When you link a bank account (Autopilot feature), Plaid acts as a secure data intermediary between your financial institution and FocusLedger. Access is read-only: we request transaction data only, and FocusLedger cannot move money or make payments.

What financial data FocusLedger receives via Plaid:

• Transaction amounts, dates, and merchant names (up to 24 months of history when you first connect)
• Account names and account types (checking, savings, credit)
• Institution names (e.g., "Chase", "Bank of America")
• Account balances (when available)

What FocusLedger does NOT store:

• Bank account numbers or routing numbers
• Bank login credentials (username or password)
• Full card numbers or PINs

Your bank credentials are entered directly into Plaid's secure interface — FocusLedger never sees or handles them. FocusLedger receives only the transaction and account metadata you explicitly authorize.

• Plaid's End User Privacy Policy governs their data handling
• You can disconnect your bank connection at any time from Settings
• Plaid may retain data per their own retention policy after disconnection

Stripe, Inc. (Payment Processing)

Stripe processes your subscription payments. We do not store your full card details on our servers:

• Stripe stores card details; we store only a tokenized payment reference
• Stripe's Privacy Policy governs payment data
• Stripe may retain transaction records per their legal obligations

Google (Sign-in, Gmail and Calendar)

If you sign in with Google, we receive your name, email address and basic profile from Google. If you connect Google Calendar, FocusLedger requests read-only access to your calendar to show your events alongside your tasks; you can disconnect it from Settings.

When you connect Gmail via Google OAuth (Autopilot feature), FocusLedger requests read-only access to your inbox. We use this access to surface actionable emails as suggested tasks — we do not send email, modify your inbox, or access your contacts.

What FocusLedger accesses via Gmail:

• Email subject lines, sender names, and received dates
• Email body snippets to identify actionable items (not stored long-term)

What FocusLedger does NOT do:

• We do not store full email body content beyond the immediate session
• We do not train AI models on your email content
• We do not share email content with third parties
• We do not access your Google Contacts, or any Google service you haven't connected

• Google's Privacy Policy governs their data handling
• You can disconnect Gmail at any time from Settings in FocusLedger
• You can also revoke access directly from your Google Account permissions page

Microsoft, Yahoo (Email OAuth)

The same read-only access and data handling principles apply to Outlook (Microsoft) and Yahoo email connections as described above for Gmail.

• Your email credentials are held by the provider, not FocusLedger
• You can revoke OAuth access from Settings or directly from your Microsoft/Yahoo account security settings

Anthropic (AI Processing)

Our AI features run on Claude, made by Anthropic. See AI Processing below for what is sent and why. Anthropic's Privacy Policy and commercial terms govern their handling.

Meta (Advertising Measurement)

We use the Meta Pixel to measure our Facebook and Instagram ads. See Cookies, Analytics & Ads for exactly what it sends. Meta's Privacy Policy governs their handling.

Service Providers That Help Run FocusLedger

These companies process data on our behalf, only to run the service:

• Render — hosts our servers and keeps server logs
• Neon — hosts our PostgreSQL database
• Cloudflare (R2) — stores documents you upload to your Vault
• Resend — sends our emails (your email address and the email content) and receives emails you send to us or forward into FocusLedger
• Sentry — collects error reports so we can fix bugs. Error reports can include technical details such as the page or feature involved and your user ID; we configure it not to send default personal data such as IP addresses or cookies.
• Push notification services — if you turn on notifications, your browser's push service (e.g. Google, Apple, Mozilla) or Apple Push Notification service delivers them

5. AI Processing

Several FocusLedger features use AI: Buddy (check-ins and coaching conversations), breaking tasks into steps, the "I'm stuck" flow, brain dumps, journal-to-task matching, photo capture of receipts and notes, document detail extraction, cancellation help for subscriptions, and personalized insights.

To provide these features, the relevant content is sent to Anthropic (the maker of Claude), our AI provider. Depending on the feature, that can include your task names and steps, check-in answers, Buddy messages, journal text, brain dumps, photos you capture, document details (such as file name and type), merchant names, and summaries of your spending and task activity. We send only what the feature needs, when you use it (or, for insights, on a daily schedule).

• Under Anthropic's commercial API terms, inputs are not used to train models.
• We do not use any other AI provider.
• We do not sell, share or use this content for advertising.

AI output can be wrong. Treat Buddy's suggestions as suggestions, not financial, medical or legal advice.

6. Your Rights

You have complete control over your data. You can:

Export Your Data

Contact us at privacy@focusledger.net with "Data Export" in the subject line. We'll provide a full export of your tasks, expenses, and account data in JSON format within 30 days.

Delete Your Account

Delete your account yourself from the Settings page. We email you a confirmation link (it expires after 24 hours and works once). When you click it, we cancel any active subscription with Stripe and then immediately and permanently delete your account and the data tied to it — tasks, expenses, bank connections and transactions, check-ins, journal, documents, and more. Your stored bank access tokens are deleted, so FocusLedger can no longer pull data from your bank. If we can't cancel your billing, we stop and don't delete anything, so you're never charged for an account that no longer exists.

Disconnect Linked Accounts

You can disconnect your bank account or email OAuth connection at any time from Settings. Revoking access through the provider (Google, Plaid, etc.) also severs the connection.

Correct Inaccurate Data

You can edit any task, expense, or profile information directly in the app at any time.

Opt Out of Non-Essential Communications

You can unsubscribe from marketing emails via the unsubscribe link in each email. Transactional emails (account security, billing) cannot be opted out of.

Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with the relevant data protection authority in your jurisdiction. You can also contact us directly at privacy@focusledger.net.

7. Cookies, Analytics & Ads

Keeping you signed in

• Session: When you sign in, we set a first-party, HttpOnly session cookie and store a sign-in token (JWT) in your browser's localStorage. Both expire after 30 days.
• Service Worker: Our PWA uses a Service Worker to cache app resources for offline functionality. It does not track you.

Our own analytics (first-party)

We run our own lightweight analytics. It sends nothing to third parties and sets no cookies:

• A random visitor ID is stored in your browser's localStorage. Our server stores it only as a hash that changes every day, so we count daily visitors without following you from day to day.
• We record which pages you view, the steps of signing up, and the features you use, plus your device type.
• How you found us: on your first visit from an ad or another website, we save ad campaign tags (UTM tags), ad click IDs (Facebook's fbclid, Google's gclid) and the referring website's domain only (never the full address) in localStorage for up to 90 days. If you sign up, we save this to your account so we know which ads and channels work.

Meta Pixel (advertising)

We use the Meta (Facebook) Pixel to measure whether our ads work. It loads only on our public pages (home, pricing, sign-up, log-in, our story, science, changelog and the thank-you page shown right after a purchase), never on the pages you use after signing in. It sets Meta's _fbp cookie and sends Meta a PageView event when a page loads and a Lead event when you create an account, and a Purchase event (the plan name and price, nothing else) on the thank-you page after you subscribe. Like any web request, Meta also receives your IP address, browser details and the page address, and may connect this to your Facebook or Instagram account under Meta's own policies.

We do not send Meta your tasks, spending, bank data, check-ins, journal or any other content you put into FocusLedger, and we don't send your email address or name to Meta.

Your choices

• Block or delete cookies, or use an ad or tracker blocker, in your browser. FocusLedger still works without the Meta Pixel and without our analytics.
• Control ad personalization in your Meta ad preferences.
• Clearing your browser's site data removes the visitor ID and saved attribution. It also logs you out of FocusLedger.
• We don't currently respond to browser "Do Not Track" signals.

8. ADHD Data Sensitivity

We understand that the data in FocusLedger — your productivity patterns, task completion rates, spending behavior, financial history — is inherently personal and potentially sensitive, especially for people with ADHD who may have spent years navigating shame around these areas.

Our commitments:

• Never sell your data. Your task data, financial data, or usage patterns will never be sold, licensed, or transferred to any third party for advertising, profiling, or data brokerage purposes.
• No advertising profiling. We do not use your productivity data or financial data to build advertising profiles or target you with ads anywhere. The Meta Pixel described above measures visits, sign-ups and purchases only; it never receives what you put into FocusLedger.
• No secondary use. Data you enter into FocusLedger is used only to provide the FocusLedger service to you.
• No third-party analytics sold to others. Our analytics data is for internal product improvement only.

If this changes in any way, we will notify you by email at least 30 days before the change takes effect.

9. Data Retention

We retain your data for as long as your account is active, plus a grace period:

• Active accounts: Data retained indefinitely while you use the service.
• Deleted accounts: Your account data is deleted from our database as soon as you confirm deletion. Our database provider keeps a 6-hour restore window and we keep no other database backups, so deleted data is unrecoverable from our systems after 6 hours. Copies held by other service providers expire on their own schedules.
• Bank transactions: Retained while your account is active so we can spot recurring bills and subscriptions, and deleted when you delete your account.
• Attribution data: Kept in your browser for up to 90 days if you don't sign up.
• Server logs: Kept by our host for 7 days, then purged. Error reports sent to Sentry are kept for up to 90 days.
• Marketing emails: If you delete your account, you are unsubscribed from all marketing emails immediately.

We may retain aggregated, anonymized data indefinitely for product improvement purposes. This data cannot be linked back to you.

10. Children's Privacy

FocusLedger is not designed for or directed at children under 13. We do not knowingly collect personal information from anyone under 13 years of age.

If we learn that we have collected personal information from a child under 13, we will take immediate steps to delete that data. If you are a parent or guardian and believe your child has provided us with personal information, contact us at privacy@focusledger.net with "Children's Data" in the subject line.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We update the "Last updated" date at the top of this page
• For material changes affecting your rights or data handling, we notify you by email
• We post a notice in the app dashboard

Continued use of FocusLedger after changes constitutes acceptance of the updated policy.

12. Contact

Questions, concerns, or requests about your data? We're here:

Email: privacy@focusledger.net
Company: FocusLedger
Website: https://focusledger.net

We aim to respond to all privacy inquiries within 72 hours.