Privacy Policy

Last Updated: February 27, 2026

This Privacy Policy explains how Ivywall Corporation collects, uses, stores, and protects personal data when you use CONCENTRATE.

Data We Collect

Account Data: email and authentication identifiers.
Usage Data: focus sessions, EXP, unlock status, and app preferences.
Technical Data: device/app logs necessary for security and service operation.
Guest Mode Data: local data or anonymous identifiers.

Legal Basis for Processing (GDPR)

Contractual Necessity: to provide app functionality you request.
Legitimate Interests: to secure, maintain, and improve the app and prevent abuse.
Consent (where applicable): for optional features you choose to enable.

How We Use Data

We use data to operate the app, sync progress, process purchases, provide support, comply with legal obligations, and improve service quality.

We do not sell your personal data.

International Data Transfers

We process and store data via Supabase infrastructure. Data may be transferred to and stored in the United States. By using the app, you acknowledge and consent to this transfer, storage, and processing in the U.S.

Your Privacy Rights (GDPR / CCPA)

Right of Access: request access to personal data we hold about you.
Right to Deletion: request deletion of your account and associated personal data.
Right to Portability: request a copy of your data in portable format where applicable.
Right to Withdraw Consent: withdraw consent for consent-based processing at any time.
Right to Lodge a Complaint: contact your local supervisory authority or data protection authority.

Do Not Track (DNT)

Because there is no consistent industry standard for DNT signals, the app does not currently respond differently to browser or device DNT settings.

Cookie / Token and Authentication Storage

For authentication and session continuity, Supabase may store local tokens in app or browser storage. These are used for account access and security, not for behavioral advertising.

Children's Privacy (COPPA)

The app is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe such data was provided, contact us to request deletion.

Data Erasure and Account Deletion

You may request deletion through the app (when available) or by emailing me.question.contact@gmail.com. We will process verified deletion requests subject to legal retention requirements.

Contact Us / Support

For privacy, legal, or billing support, contact: me.question.contact@gmail.com.

FAQ

Q: I have a billing issue with Monthly Subscription. What should I do?
A: If you encounter billing issues with your Monthly Subscription, please contact us at me.question.contact@gmail.com. We respond within 48 hours.

Q: Do you sell my personal data?
A: No. We do not sell your personal data.

Q: How do I request deletion?
A: Use in-app deletion (if available) or email me.question.contact@gmail.com.