FocusForge is a study planner you log in to with Google or email. This document explains exactly what we collect, where it lives, and how to get it back or delete it.
Last updated: 2026-04-26 · Effective: 2026-04-26 · Reflects scope swap to drive.file
FocusForge ("we", "us", "the app") is operated by Itathya Technologies LLP, based in Bangalore, India. The service is delivered at focusforge.in. For privacy questions, contact support@itathya.com.
We collect only the data you provide by signing in and using the app. There is no third-party analytics tracking, no advertising, no data sales.
Some preferences are stored only in your browser via localStorage and never leave your device unless you copy them yourself. This includes your theme, accent color, accessibility settings, ambient-sound preference, and — only if you choose to enable the optional fallback — your personal Gemini API key. AI features otherwise work without you supplying a key (see Section 4).
When you sign in with Google or connect Google Docs, we request the following OAuth scopes. We use them only for the listed purpose and do not retain raw document content beyond the moment of import.
| Scope | Why we ask | What we keep |
|---|---|---|
email & profile |
To create your account and personalise the greeting. | Email, display name, profile photo URL — stored in your user record on our database. |
openid |
Required for OpenID Connect sign-in flow. | Nothing persisted beyond the session token Firebase manages. |
drive.file |
To read a specific Google Doc you explicitly choose via the Google Picker UI. This non-restricted scope grants per-file access only — never your whole Drive. We never browse, list, search, or index your Drive contents. We only see the file(s) you pick. | Only the parsed text of the chosen document at the moment you click Sync, plus the doc's ID and name (saved so we can re-fetch it on schedule). The original document stays in your Drive — we don't copy or store the raw file. |
You can revoke FocusForge's access to your Google account at any time at myaccount.google.com/permissions. Revoking access does not delete data already in your FocusForge account; for that, see Section 8.
AI Study Plan, AI Coach pep talks, weekly journal summaries, and other AI-powered surfaces are processed by Google's Gemini 2.5 Flash model via Firebase AI Logic (the Gemini Developer API backend). The integration is managed by us so users do not need to bring their own API key — Firebase holds the key server-side and gates each request with your Firebase Auth identity.
What gets sent. When you click Generate (or trigger any AI surface), the prompt — which may include your study goal text, journal-entry text, current subject, and aggregate stats like streak/level/study minutes — is sent from your browser to Firebase AI Logic, which forwards it to Google's Gemini API. The response is shown to you and saved to your FocusForge account only when you explicitly save it (e.g., saving an AI plan or journal summary).
What is NOT sent. Your name, email, school, friends list, or other profile fields are not included in AI prompts. Raw note bodies and homework details are not auto-attached; only what you type into the AI input is sent.
Google's role as processor. Both Firebase and the Gemini Developer API are operated by Google LLC and are subject to Google's Privacy Policy and the Google Cloud Data Processing Addendum. Per Google's terms, prompts and responses sent through the Gemini Developer API may be used by Google to improve their products unless you are on a paid tier with that opted out — see Google's documentation for current policy.
Optional: bring your own key. A power-user fallback lets you paste a personal Gemini API key in Profile → AI Features. When set, that key is stored only in your browser's localStorage, never sent to us, and is used only when our managed service is temporarily unavailable. You can clear it any time in the same place.
All account and study data is stored in Google Firebase (Firestore + Firebase Authentication), which acts as our data processor. Firebase data centres operate under Google Cloud's compliance framework (SOC 2, ISO 27001, GDPR, CCPA). We do not transfer your data to any other servers.
We do not sell, rent, or share personal data with third parties. The only ways your data leaves our database are:
FocusForge is designed for students. We do not knowingly collect data from children under 13 (or the equivalent age in your jurisdiction). If you believe a child under that age has signed up, please email us and we will delete the account. Schools or guardians using FocusForge with minors are responsible for obtaining any required consent.
You can:
Under GDPR (if you are in the EEA/UK) and CCPA (if you are a California resident), you have additional statutory rights including the right to object to processing and to lodge a complaint with your data protection authority.
We retain your data for as long as your account is active. If you delete your account, we erase your records within 30 days. Server backup snapshots managed by Firebase may retain copies for up to 30 days after deletion before they are overwritten.
Connections to FocusForge are encrypted with HTTPS. Firestore enforces per-user access rules (see Firebase Security Rules) so only you can read or write your private subcollections; only your top-level profile (name, school, points) is visible to other authenticated users for the leaderboard and friends features.
If we change this policy, we will update the "Last updated" date at the top and, for material changes, surface an in-app notice on next sign-in. Continued use of FocusForge after a change constitutes acceptance.
Email: support@itathya.com