Privacy Policy

1. Information We Collect

Quiz answers and focus-pattern data

When you complete the FocusRoute assessment, we collect your self-reported answers about focus patterns, attention, energy, executive function, and related experiences. These answers are used to generate your Brain Profile, Cognitive Signature™, and Executive Function Radar™. This data is sensitive by nature — we treat it with care, store it securely, and do not use it for advertising profiling or sell it to third parties.

Account and login data

If you create an account, we collect your email address and optional display name. Authentication is handled by Supabase, which manages session tokens and login state. We do not store passwords in plain text. Account data is linked to your quiz results and purchased entitlements so your Brain Profile and library are accessible when you sign in.

Payment data handled by Stripe

All payments are processed by Stripe. FocusRoute never sees, receives, or stores your full card number, CVV, or bank account details. We receive a payment confirmation event from Stripe (via webhook) that includes your email address, the amount paid, and the product purchased. Stripe's own Privacy Policy governs how they handle your payment data and is available at stripe.com/privacy.

Automatic usage data

We may collect basic, anonymised usage information such as page visits and feature interactions to understand how the product is being used. We also use analytics and advertising measurement tools to understand campaign performance and improve marketing. This may include page views, button clicks, referrer, campaign parameters, browser or device data, anonymised session identifiers, and payment conversion events.

2. How We Use Your Information

We use the information we collect to:

• Generate and display your Brain Profile, protocol, and bonus library
• Deliver the content you have purchased and manage your account entitlements
• Send transactional emails (purchase confirmation, login links)
• Improve the product using aggregated, anonymised usage patterns
• Respond to support requests and account inquiries

We do not sell your personal data. We do not share raw assessment answers, OTP codes, or payment card details with advertising platforms. We may share limited conversion events with advertising platforms for measurement, retargeting, and campaign optimisation.

3. How We Store and Protect Data

Your account data and quiz results are stored in a Supabase-managed PostgreSQL database with row-level security enabled, meaning your data is scoped to your account. All data is transmitted over HTTPS. Access to production data is restricted to authorised team members only.

FocusRoute is not a healthcare provider and is not covered by HIPAA or equivalent medical privacy regulations. We are not able to guarantee any specific level of healthcare-grade data protection. If you have serious concerns about the sensitivity of your information, please consider that before submitting it.

4. Third-Party Services

• Stripe— processes all payments. Stripe's privacy policy applies to payment data: stripe.com/privacy
• Supabase— provides database, authentication, and row-level data security. Supabase's privacy policy applies: supabase.com/privacy
• Vercel— hosts the FocusRoute application. Basic server logs may be retained per Vercel's standard practices: vercel.com/legal/privacy-policy
• Analytics and advertising measurement — Vercel Analytics and Speed Insights help us understand site usage and performance. Meta Pixel and Meta Conversions API may receive limited page, click, and conversion events for advertising measurement and optimisation. We do not send raw assessment answers, OTP codes, or payment card details to these tools.

All third-party providers are selected for their data security standards. We do not use providers that sell your data for advertising.

5. Cookies and Local Storage

FocusRoute uses the following limited browser storage:

• Authentication cookies — Supabase sets session cookies to keep you logged in. These are necessary for the dashboard to function.
• Session storage — used to recover an in-progress quiz if your browser session ends unexpectedly. This data is cleared when the tab is closed.
• Analytics identifiers — used to understand anonymous sessions, campaign attribution, and whether marketing traffic converts. These identifiers do not prove account access or purchase status.

Paid access and entitlements are verified server-side — not from browser storage.

6. Data Retention

We retain your account data and quiz results for as long as your account is active or as needed to provide the services you have purchased. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (for example, payment records for tax purposes).

Aggregated, anonymised data (with no individual identifiers) may be retained indefinitely for product improvement purposes.

7. Your Rights and Deletion Requests

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and personal data
• Withdraw consent for email communications (unsubscribe link in any email we send)
• Object to or restrict certain processing of your data

To exercise any of these rights, email privacy@getfocusroute.com. We will respond within 30 days.

8. Children's Privacy

FocusRoute is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly. If you believe a child has submitted data to our service, please contact us at privacy@getfocusroute.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of FocusRoute after changes are posted constitutes acceptance of the revised policy. For significant changes, we may send a notice to the email address on your account.

10. Contact

For privacy-related questions, data access requests, or deletion requests, contact us at: privacy@getfocusroute.com

FocusRoute is operated as an independent product. We take your privacy seriously and are committed to handling your information with care and transparency.