Epic Focus is a productivity app built by Connor Dodge LLC. We collect the minimum data needed to make the app work, store it on infrastructure we control, and we don't sell it, share it, or use it for advertising. This page explains what we collect, why, and how it's protected.
1. Who We Are
Epic Focus is operated by Connor Dodge LLC ("we", "us", "Epic Focus"). If you have any questions about this policy or your data, email connor@greatness.games.
2. What We Collect
Account information
When you create an account, we store your email address and a cryptographic hash of your password (we never store the password itself). If you sign in with Google, we receive your email address and a Google account identifier — we do not receive your Google password.
Your productivity data
Anything you create in Epic Focus is stored on our servers so it can sync across your devices:
- Tasks, quests, chapters, subtasks, and tags — titles, due dates, notes, durations, completion status
- Habits and habit completions — habit name, target value, units, schedule, completion dates and values
- Focus sessions — start, pause, and end times, duration, and any focus rating you provide
- Blocker profiles — the lists of domains, search terms, and app names you choose to block during focus
- Game state — the progression of your city/village within the app's gamified layer
- Preferences — display, notification, and integration settings
Apple Health data
If you connect a habit to Apple Health, Epic Focus reads aggregated daily values for that habit from HealthKit on your device — for example, your total step count for today, or your total sleep hours for last night. We then send a single number per habit per day to our servers, tagged as coming from Apple Health.
We do not receive raw HealthKit samples, timestamps within the day, individual workouts, heart-rate series, or any HealthKit data not tied to a habit you specifically enabled. Your raw HealthKit data never leaves your device.
In line with Apple's HealthKit terms: we do not use HealthKit data for advertising, do not share or sell it to third parties, and do not use it for any purpose other than tracking the habits you've connected. Epic Focus only reads from HealthKit — it never writes data back.
Calendar data
If you grant calendar access, Epic Focus reads your calendar events from your device so it can display them alongside your tasks and focus sessions. Your calendar events stay on your device. We do not transmit them to our servers, and we do not write new events to your calendar.
Device permissions we may request
- Calendar — to display events next to your tasks (read-only)
- HealthKit — to read aggregated daily values for habits you've connected (read-only)
- Contacts — to display attendee information on calendar events (read-only)
- Notifications — to send reminders for habits and focus sessions (sent locally from your device)
You can revoke any of these permissions at any time in your device settings.
Technical information
When your app talks to our servers, we automatically receive standard request metadata: your IP address, the time of the request, and a user-agent string identifying your device type. We use this to operate the service (rate-limit abuse, debug errors, keep servers healthy). We do not build advertising profiles from it.
Waitlist signups
If you submit your email on our marketing site, we add it to a marketing contact list managed by Resend (our email provider) so we can notify you about availability. We rate-limit signups by IP address to prevent abuse. You can ask us to remove you at any time by emailing connor@greatness.games.
3. What We Don't Collect
To be explicit about what Epic Focus does not do:
- No analytics or behavioural tracking. No PostHog, Mixpanel, Firebase Analytics, Amplitude, or anything similar. We don't track which buttons you press.
- No advertising or ad networks. Epic Focus does not show ads and does not embed advertising SDKs.
- No third-party crash reporting. We do not currently send crash reports to Sentry, Crashlytics, or similar services.
- No URL or browsing-history collection. The optional browser extension that powers site blocking enforces rules locally in your browser. The URLs you visit are never sent to our servers.
- No selling your data. Ever.
4. How Your Data Is Protected
Encryption in transit
All communication between the Epic Focus app and our servers is encrypted with HTTPS / TLS. Our browser extension and desktop integration communicate over secure local channels.
Encryption at rest
Our database is PostgreSQL, hosted on Google Cloud. Google Cloud encrypts all data at rest with AES-256, using Google-managed encryption keys. This applies to the live database, automated backups, and read replicas.
Credentials
Passwords are stored as cryptographic hashes — we cannot read your password and could not disclose it even if asked. API tokens used by integrations (the Raycast extension, the MCP server) are similarly stored as SHA-256 hashes on our servers. On your device, authentication tokens are kept in your operating system's secure storage (Keychain on Apple platforms, equivalent on others).
5. Third-Party Services
Epic Focus relies on a small set of third parties to operate. Each only receives the data necessary for its function:
- Google Cloud — hosts our application servers and PostgreSQL database. Subject to Google Cloud's privacy and security commitments.
- Google Sign-In (optional) — if you choose to sign in with Google, Google receives the standard sign-in request and returns your email and an account identifier to us.
- Apple HealthKit — an on-device API. Apple does not see what Epic Focus reads from HealthKit; the data is shared only between HealthKit and the Epic Focus app on your device.
- Resend — our transactional and marketing email provider. Receives email addresses submitted to our waitlist and any email we send you.
6. Data Retention
We keep your account and the productivity data you've created for as long as your account is active. If you delete your account, we delete your account record and the data associated with it from our active database. Encrypted nightly backups containing previous states may persist for up to 7 days before being overwritten on rotation.
If your account is inactive for an extended period, we may reach out before deleting it.
7. Your Rights
You have the right to:
- Access the data we hold about you
- Correct data that's wrong
- Delete your account and the data tied to it
- Export your productivity data in a portable format
- Withdraw consent for optional integrations (Apple Health, Calendar, Google Sign-In) at any time from your device settings
To exercise any of these rights, email connor@greatness.games. We aim to respond within 30 days.
8. Children
Epic Focus is not directed at children under 13, and we do not knowingly collect data from children under 13. If you believe a child has created an account, please contact us and we will delete it.
9. International Users
Our servers are located in the United States. By using Epic Focus, you understand that your data will be transferred to and processed in the United States, which may have different data-protection laws than your country of residence.
10. Changes to This Policy
If we make material changes to this policy, we will update the "Last updated" date at the top and, where appropriate, notify you in the app or by email. Continued use of Epic Focus after changes take effect means you accept the updated policy.
11. Contact
Questions, requests, or concerns about your data: