FocusPay ("we", "our", or "us") is a productivity mobile application that helps users stay focused by helping them build habits through virtual coin pledges. Users pledge virtual Karma Coins, commit to a focus duration, and earn dynamic rewards upon successful completion. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the FocusPay mobile application (the "App") and related services.

By downloading, installing, or using FocusPay, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you sign up via Google Sign-In, we collect your name and email address from your Google account.
• Virtual Coin & Subscription Data: Subscription status, coin pack purchases, and transaction history within the App.
• Focus Session Data: Session duration, session coin pledges, session status (active, success, or failed), and start time.
• Productivity Data: Karma Coins, productivity badges, and focus challenge results.

1.2 Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers, and Firebase Cloud Messaging (FCM) tokens for push notifications.
• App Lifecycle Data: We monitor whether the app is in the foreground, background, or the screen is locked during active focus sessions. This is necessary for the core functionality of the App (anti-cheat detection). We do not track your activity outside the App.
• Usage Data: App usage patterns, feature interactions, and crash reports to improve the App experience.

1.3 Information from Third-Party Services

• Google Account: Your name and email when you sign in with Google.
• Razorpay: When you add money to your wallet, Razorpay processes the payment. We receive a payment ID, order ID, and signature to verify the transaction. We do not store your bank account details, card numbers, or UPI PIN.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Manage your virtual coin pledges and dynamic rewards.
• Detect if you leave the app during a focus session (anti-cheat mechanism) to enforce session rules.
• Manage your virtual coin wallet balance and transaction history.
• Award productivity badges and Karma Coins as rewards for completing focus sessions.
• Enable focus challenge features to build better habits.
• Send push notifications for session reminders and updates.
• Display advertisements through Google AdMob.
• Improve the App through analytics and crash reporting.
• Comply with legal obligations.

3. How Focus Sessions Work (Data Perspective)

When you start a focus session:

• A virtual coin pledge is temporarily locked to your session on our server.
• The App monitors whether you remain in the app (or lock your screen, which is allowed) and prompts you with random Pulse Checks.
• If you leave the app, fail pulse checks, or switch to another app, your session ends early. Your pledged virtual coins are permanently lost as a penalty for breaking focus.
• If you successfully complete the session, your pledged virtual coins are returned to your wallet, and you earn dynamic coin bonuses based on the session duration.

4. Data Storage & Security

• All monetary amounts are stored as integers (in paise) to prevent floating-point rounding errors.
• Authentication tokens (JWT) are stored using encrypted secure storage on your device, never in plain-text shared preferences.
• All API communication uses TLS/HTTPS encryption.
• We implement rate limiting and other security measures to protect against unauthorized access.
• Razorpay payment verification uses cryptographic signature validation.

5. Third-Party Services

We use the following third-party services that may collect information:

Service	Purpose	Data Shared
Google Sign-In	Authentication	Email, name
Firebase Cloud Messaging	Push notifications	FCM token, device info
Google AdMob	Advertisements	Device identifiers, ad interaction data
Razorpay	Virtual coin and subscription purchases	Payment amount, order ID (Razorpay handles all payment info)

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies.

6. Virtual Currency & Purchases

Purchases: When you purchase Karma Coins or PRO subscriptions, the payment is processed entirely by Razorpay. We receive a confirmation (payment ID and signature) but never access your bank details, card numbers, or UPI PIN.

No Real Money Withdrawals: Karma Coins are a strictly in-app virtual currency for gamification. They cannot be withdrawn, cashed out, or exchanged for real money. All purchases are final and non-refundable.

Session Pledges: During a focus session, your virtual coins are pledged. If you break focus, these virtual coins are lost as a gamified penalty. No real money or external payment is processed during the session itself.

7. Advertisements

FocusPay uses Google AdMob to display advertisements. AdMob may use device identifiers and usage data to serve personalized ads. You can opt out of personalized advertising through your device's advertising settings. Some features in the app may allow you to watch ads in exchange for bonus rewards.

8. Data Sharing

We do not sell your personal data to any third party. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers (listed above) who help us operate the App, subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Safety: To protect the rights, property, or safety of FocusPay, our users, or the public.

9. Your Rights

Under the Digital Personal Data Protection (DPDP) Act, 2023, you have the following rights:

• Right to Access: You can view all your personal data, virtual coin balance, transaction history, and session history within the App at any time.
• Right to Correction: You can update your profile information through the App.
• Right to Erasure: You can request complete deletion of your account and all associated data. Upon deletion request, your data is soft-deleted immediately and permanently erased within 30 days.
• Right to Withdraw Consent: You can stop using the App at any time.

10. Account Deletion

You can delete your account at any time by:

1. Navigating to Profile → Logout in the App and contacting us for full deletion, or
2. Sending an email to ritik.email01@gmail.com with the subject "Account Deletion Request".

Upon deletion, all your personal data — including virtual coin data, transaction history, focus session records, and profile information — will be permanently removed from our servers within 30 days.

11. Data Retention

• Active accounts: Data is retained as long as your account is active.
• Deleted accounts: Data is soft-deleted immediately and hard-deleted (permanently erased) within 30 days.
• Transaction records: Financial transaction records may be retained for up to 5 years as required by Indian financial regulations.

12. Children's Privacy

FocusPay is not intended for use by anyone under the age of 18. The App involves virtual currency purchases and gamified reward systems and is strictly for adult users. We do not knowingly collect personal information from children. If we learn that we have collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify you through the App. We encourage you to review this page periodically for the latest information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: ritik.email01@gmail.com
• Phone: +91 9693882391