Introduction
UltraFocus ("we", "us", or "our") operates the UltraFocus web application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
We are committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
Information We Collect
Personal Information
- Name and email address (when you create an account)
- Payment information (processed securely through Stripe)
- Profile preferences and settings
Usage Data
- Learning session data (topics, goals, duration, phase completion)
- Focus scores and performance analytics
- Session history and progress tracking
- Device information and browser type
- IP address and general location data
AI Interaction Data
- Concepts and explanations you submit to our Feynman technique assistant
- AI-generated feedback and analysis results
- Token usage and AI interaction history
How We Use Your Information
- Provide and maintain our learning platform services
- Process your subscription payments and manage your account
- Generate AI-powered learning assistance and feedback
- Track your learning progress and provide analytics
- Send important service updates and notifications
- Improve our services and develop new features
Data Sharing and Third-Party Services
We share your information only with trusted third-party service providers necessary to operate our platform:
- Supabase: Database hosting and authentication (ISO 27001 certified, SOC 2 Type II compliant)
- OpenAI: AI-powered learning assistance. Your explanations are processed but not used to train their models.
- Stripe: Secure payment processing (PCI DSS Level 1 compliant)
- Vercel: Application hosting and content delivery
Data Security
We implement industry-standard security measures to protect your information:
- End-to-end encryption for data transmission (HTTPS/TLS)
- Encrypted data storage at rest
- Regular security audits and vulnerability assessments
- Strict access controls and authentication requirements
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Your Privacy Rights
Under Canadian privacy laws (PIPEDA and BC PIPA), you have the right to:
- Access: Request a copy of your personal data
- Correction: Request corrections to inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Export your session data and history
- Withdraw Consent: Opt out of non-essential data processing
- File a Complaint: Contact the Office of the Privacy Commissioner of Canada if concerned
Data Retention
We retain your information for as long as your account is active or as needed to provide services:
- Active session data: Retained indefinitely for your learning history
- Account information: Retained until you request deletion
- Deleted account data: Permanently removed within 30 days, except where required by law
Cookies and Tracking
We use essential cookies for authentication and session management. For more details, see our Cookie Policy.
Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or through a prominent notice on our platform. Your continued use after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
Email: support@ultrafocus.app