Privacy Policy

1. Who we are and scope

FocusRoom is a study-planning and productivity service operated by Saumya Shrestha in Lalitpur, Nepal (referred to as “FocusRoom,” “we,” “us,” or “our”). This Policy applies to FocusRoom’s website at focusroomstudy.com, its applications, and related services.

2. Information we collect

Information you provide

• Account and profile: name, email address, password hash, profile image, verification status, and account preferences.
• Study content: classes, assignments, deadlines, estimates, study sessions, timers, notes, reflections, and progress information.
• AI content: prompts and recent conversation context you submit to the Study Assistant, and its responses.
• Communications: information you send when requesting support, exercising privacy rights, or reporting a security issue.

Information collected automatically

We process IP address, browser and device information, request time, requested page or endpoint, request identifiers, authentication and security events, and diagnostic data needed to operate, secure, and troubleshoot FocusRoom.

Information from other services

If you use Google Sign-In, Google provides your Google account identifier, name, email address, and email-verification status. We do not receive your Google password.

Cookies and local storage

FocusRoom uses essential session and CSRF-protection cookies to keep you signed in and protect account actions. Browser local storage remembers interface preferences such as theme and sidebar state and may cache limited profile display information. These technologies are necessary for functions you request; FocusRoom does not currently use advertising cookies.

3. How and why we use information

We use personal information to:

• create and authenticate accounts and provide the study workspace;
• save assignments, sessions, preferences, and progress;
• send verification, password-reset, and user-requested reminder emails;
• provide the AI Study Assistant;
• protect FocusRoom, enforce our Terms, prevent abuse, and investigate security incidents;
• maintain, diagnose, and improve reliability and accessibility; and
• comply with legal obligations and respond to valid legal requests.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and securing FocusRoom, compliance with law, and consent where we specifically request it. You may withdraw consent at any time where processing depends on consent, without affecting earlier processing.

4. How we share information

We disclose information only as needed for these purposes:

• Render for application hosting and scheduled services;
• MongoDB for database infrastructure;
• Google for Google Sign-In and Gmail-based transactional email delivery;
• NVIDIA API to process Study Assistant prompts and generate responses;
• diagnostic or security providers, if enabled, to identify errors and protect the service;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, prevent fraud or abuse, or address a legal claim; and
• a successor organization in connection with a merger, financing, acquisition, or sale of all or part of the service, subject to appropriate safeguards.

Service providers may process information only to deliver their services to us under their own contractual and legal obligations. Do not submit confidential personal information to the AI Study Assistant.

5. International data transfers

FocusRoom is operated from Nepal, and our providers may process information in other countries. Those countries may have different privacy laws. Where required, we use contractual or other lawful safeguards for international transfers.

6. Retention

We keep account and study information while your account is active or as needed to provide FocusRoom. When you delete your account, associated live account and study records are deleted promptly. Residual copies may remain in protected backups for up to 30 days before automatic deletion. We may retain limited security logs, transaction records, or information required for legal compliance, dispute resolution, or abuse prevention for as long as reasonably necessary. AI and other providers may apply their own limited retention periods.

7. Security

We use measures designed to protect information, including encrypted connections, hashed passwords, secure authentication cookies, CSRF protection, access controls, rate limiting, and monitoring. No system is completely secure. You are responsible for using a strong, unique password and protecting access to your email and device.

8. Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, withdraw consent, and complain to a data-protection authority. You can update profile information and export or delete your account through FocusRoom’s settings. You may also email us. We may verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

9. Age requirements

FocusRoom is not intended for children under 13, and we do not knowingly collect personal information from them. Users who are under the age of legal majority where they live must have permission from a parent or legal guardian. If local law requires a higher minimum age or parental authorization for online services, that local requirement applies. If you believe a child under 13 has provided information, contact us so we can delete it.

10. Changes to this Policy

We may update this Policy as FocusRoom or applicable law changes. We will post the revised Policy with a new “Last updated” date and provide additional notice for material changes when required.

11. Contact us

Please use the subject “Privacy Request” for privacy-related inquiries.