Privacy Policy
Last updated 30 October 2026
Draft. This page is a plain-language draft and has not been reviewed by a lawyer. It will be updated before Hushloft accepts real payments.
This explains what Hushloft collects, why, and the choices you have. Hushloft is run by the operator of Hushloft (name not set yet).
What we collect
- Account: your email address (or Google sign-in), username and avatar.
- Study data: finished focus sessions (length, time, subject, place), tasks, notes, goals, preferences and achievements.
- Rooms: rooms you create or join, your focus status while in a room, blocks and reports.
- Billing (Plus only): a Stripe customer ID and your subscription status and dates. Card details go directly to Stripe; we never see or store card numbers or security codes.
- Technical: short-lived server logs for security, and anonymous page-view statistics (Vercel Web Analytics) that don’t identify you.
What others can see
In rooms, other people see your username, avatar and focus status only. Your email, notes, tasks and statistics are private to you. Private-room invite codes are only shown to members.
Service providers
- Supabase: sign-in and database hosting.
- Stripe: payments, invoices and the billing portal.
- Vercel: website hosting and anonymous analytics.
These providers may store data outside Canada. [Needs review: list regions and cross-border transfer wording.]
How long we keep it
Until you delete your account. Then your data is removed, except backups that expire on our providers’ schedule and payment records Stripe must keep by law (see Deleting your account).
Your choices
- See and change your profile and preferences in Settings.
- Hide yourself from room previews in Settings → Privacy.
- Export your study history as CSV (Plus) or ask us for a copy of your data: the support address (not set yet; see the Contact page).
- Delete your account at any time in Settings → Account.
Children
Hushloft is not for children under 13, and we don’t knowingly collect their data.
Contact
Privacy questions: the support address (not set yet; see the Contact page).