Privacy Policy

1. Controller

2. iFocus Plus privacy principles

The iPhone/iPad app iFocus Plus does not use advertising tracking, tracking identifiers, or a separate user account. The app does not include analytics or advertising services. Optional web access maintains the server-side iCloud-account mapping described in section 12. Tasks, notes, appointments, settings, focus data, and attachments are generally processed locally on your device.

3. iCloud and CloudKit sync

When iCloud is available on your device, the iFocus Plus iPhone/iPad app can sync content between your own Apple devices through the private CloudKit database associated with your Apple ID. For this sync between the native apps, data is transferred directly through Apple. The separately activated web access instead processes content through the iFocus Plus service on IONOS; the provider receives the access described in section 12 for that purpose. Apple processes data according to your Apple ID settings and Apple’s privacy terms.

Your content remains available locally when no iCloud connection is available. You can manually start a local export and later restore that export within the app.

4. Device permissions

Features such as Calendar, Reminders, Photos, Camera, and Notifications are used only after you grant permission. You can change permissions at any time in system settings. Calendar and reminder content is processed inside the app for the selected display or editing function and is not transferred to a server operated by iFocus Plus.

5. App Store and purchases

Apple handles downloads, purchases, and payments under its own responsibility and terms. iFocus Plus does not receive users’ complete payment details.

6. Website hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you access the site, the hosting service processes technically necessary access information, including the requested file, time, referrer, browser, operating system, device type, and an immediately anonymized IP address. This information is processed to provide the website securely and reliably and, according to IONOS, is retained for eight weeks. The legal basis is Article 6(1)(f) GDPR.

IONOS WebAnalytics for web hosting operates without cookies. IP addresses are anonymized immediately and evaluated statistically without a personal reference. This website does not add any other analytics, advertising, or tracking services.

7. HTTPS redirects through Cloudflare

The additional domains ifocusplus.de and ifocusplus.com are encrypted and redirected to the primary domain ifocusplus.app using services from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes technically necessary connection information, particularly the IP address and details about the requested domain, URL, time, and browser, to establish the HTTPS connection, perform the redirect, and protect against abusive requests.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable, and encrypted availability of the brand domains. Cloudflare’s Data Processing Addendum and its Standard Contractual Clauses apply to possible transfers to the United States. Cloudflare Web Analytics, Turnstile, interactive challenges, and Under Attack Mode are not enabled on the redirect domains.

8. Cookies and local appearance preference

The public website uses no analytics, advertising, or tracking cookies. If you switch between light and dark appearance in the header, your browser stores only that selection locally on your device. It contains no unique identifier and is not transmitted to us or third parties.

After successful sign-in, the separate, non-public Community administration area sets one strictly necessary random session cookie. It is used only for authentication, access control, and request-forgery protection; it is protected with Secure, HttpOnly, and SameSite=Strict and expires after no more than eight hours or 30 minutes of inactivity. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR.

9. Contact form and E-Mail

The contact form sends the information you enter through a first-party endpoint on this domain to support@ifocusplus.app. This includes the sender address, subject, category, message, and any technical details you choose to provide. To limit automated abuse, a non-reversible value derived from the IP address is stored briefly and no longer considered after 15 minutes. Message contents are not stored in a website database for this purpose.

If direct delivery is technically unavailable, the website opens your local mail app with a prepared message instead. In that case, the message is sent only after you confirm it there. Depending on the request, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR. Requests are deleted when no longer required and no statutory retention duty applies.

10. Protected Community staging

The public Community page remains a read-only, clearly labeled preview. A separate server-protected staging area is available only to the owner and authorized administrators. It provides no self-registration and no public access to staging content.

The staging MariaDB on IONOS web hosting processes data including email address, display name, role, account status, password hash, encrypted authenticator secret, accepted document versions, sessions, test posts, reactions, reports, moderation decisions, reviews, and a tamper-evident chained audit log. A keyed HMAC derived from an IP address may be used briefly for login protection; the raw IP is not stored for that purpose in the Community database. Passwords and invitation or session tokens are never stored in plaintext.

Depending on the operation, the legal bases are Article 6(1)(b), (c), or (f) GDPR. Sessions expire after no more than eight hours, failed-login buckets are removed after no more than two days, and invitations normally expire after 24 hours. Test content, reports, decisions, and audit records are retained only as long as required for staging validation, security, evidence, or statutory duties; a binding deletion and backup schedule will receive final review before an invite-only public beta.

11. Your rights

Subject to the GDPR, data subjects have rights including access, rectification, erasure, restriction of processing, data portability, and objection. Consent can be withdrawn with effect for the future. Requests can be sent to support@ifocusplus.app.

You also have the right to lodge a complaint with a data protection supervisory authority.

12. Web access with iCloud and acquisition verification

Web access at /en/app/ is being prepared privately and has not been released to the public. This section describes the sign-in and activation flow implemented for that purpose. Server configuration and verification with Apple will be completed before public release. First-time activation requires the version of the iPhone/iPad app prepared for this feature and downloaded from the App Store.

Sign-in takes place with Apple. The browser loads Apple’s CloudKit library and then passes an access token issued by Apple to the iFocus Plus service on IONOS. The service confirms the associated iCloud identifier with Apple and creates an internal web-account mapping. iFocus Plus does not store an additional website password or your Apple password. To activate access, you enter a single-use browser code, valid for ten minutes, in the native app and confirm the link. The app sends the signed App Store acquisition record and Apple’s device/app verification evidence. Data processed includes the iCloud identifier, the app acquisition identifier and dates, the original app version, device-verification information, and access status.

One verified App Store acquisition is linked to exactly one iCloud web account. The app and browser must use the same iCloud account for this link. This process cannot establish that the Apple account used for purchases is the same underlying account as the iCloud identity. For the base app, the evidence also cannot reliably distinguish a direct purchase from Family Sharing or a legitimate promotional/free acquisition, or automatically detect later refunds immediately.

After sign-in and activation, reads and changes to the complete iFocus archive pass through IONOS to Apple. This includes unchanged tasks, iFocus events, notes, profile information, settings, and attachments. Content is processed in browser memory and on the server during transfer; the private CloudKit database remains the permanent content store. The provider can read content transferred for web access during this processing. The application code does not create an additional content database or log complete archives, raw acquisition records, or sign-in tokens. A new iFocus profile is created only after activation and an explicit request. Deleted tasks and events first move to the shared trash.

The browser uses a necessary random session cookie protected with Secure, HttpOnly, and SameSite=Lax. A session before sign-in expires after no more than 30 minutes. Signed-in sessions expire after a fixed twelve hours, or 30 days with “Stay signed in”; activity does not extend these limits. Without “Stay signed in”, the cookie has no persistent expiration date, although a browser’s session-restore feature may preserve it after closing. Apple may end iCloud access earlier. Signing out revokes the session and removes its stored iCloud token; the acquisition mapping remains.

IONOS stores the CloudKit access token and app transaction identifier encrypted; session tokens are stored only as hashes. Internal account/iCloud identifiers, license status, verification timestamps, and public device-verification keys and counters are kept in the database for access management. The new sign-in flow does not persist CloudKit tokens in localStorage or sessionStorage. Tokens from an earlier preview are not imported for sign-in. On startup and sign-out, the web app attempts to remove known old tokens where the browser permits this storage access. Tasks and events are not stored in these browser stores.

The operating plan provides for regular cleanup: session records become eligible for deletion at least 24 hours after expiry or revocation, and activation pairings at least 24 hours after the code expires or is used. Short-lived values protecting against repeated or excessive requests are cleaned up one hour after their expiry or 48 hours after the start of their time window, respectively; sign-in and activation security events are scheduled for removal after 90 days. Deletion takes place in the next successful cleanup run, with backlogs monitored. Account, acquisition, and device-verification records remain for the continuing access mapping and are not deleted by this technical cleanup. Erasure requests are handled separately under the rights described in section 11. Cleanup operation and backup retention will receive final review before public release.

Processing supports the requested web access, acquisition mapping, and protection against unauthorized access. Depending on the operation, the legal bases are Article 6(1)(b) or (f) GDPR; necessary storage on your device is covered by Section 25(2)(2) TDDDG. Web access does not use advertising or tracking cookies. In the private Sites preview, an enabled connection to the IONOS service additionally processes sign-in tokens, session references, and complete archives through the Sites/Cloudflare infrastructure. Private-preview access, Apple sign-in, and acquisition verification are separate steps. Information about Apple’s processing is available in the Apple Privacy Policy. The rights described in section 11 also apply to web-access data.

13. Authoritative version and effective date

This English translation is provided for convenience. In case of discrepancies, the German Privacy Policy is authoritative.

Effective date: 6 September 2026.