ActualFocus macOS App Privacy Policy

1. Scope

This Privacy Policy applies to the ActualFocus macOS app published by ImpactLoop Ltd., trading as ArdSaor. It covers the macOS app itself, the in-app Safari extension integration, local browser bridge features, local exports created by the app, and the app’s optional diagnostics and usage telemetry. The separate Chrome extension permission model is described at ActualFocus Chrome Extension Privacy Policy.

2. Summary

ActualFocus is designed to be local-first. Its purpose is to classify focus sessions on your Mac using local computer activity signals and optional local camera-derived attention signals. The app is intended to work without uploading raw activity records, raw camera frames, or detailed browsing history by default.

3. System permissions and local signals

Depending on the features you enable, ActualFocus may request or use the following macOS capabilities:

• Camera access: to analyze frames locally for person presence, phone visibility, and coarse attention checks during a focus session.
• Accessibility access: to include active window titles in the local event stream. Without Accessibility access, the app can still track the frontmost application and idle state.
• Local notifications: to show on-device warnings and auto-pause notices.
• Browser integration: Safari integration and optional Chrome integration to improve active-domain classification while the browser is frontmost.

4. Camera processing

If you allow camera access, ActualFocus analyzes camera frames locally on your Mac to derive signals such as person present, phone visible, coarse display attention, confidence values, and camera health status.

ActualFocus is designed so that camera frames are processed and then discarded. It is not intended to store webcam photos or video, and it is not intended to upload webcam frames off-device.

5. Computer activity and idle tracking

During sessions, ActualFocus may monitor the frontmost application, idle or away state, sleep and wake boundaries, session lifecycle events, and related derived focus-state transitions. If Accessibility access is granted, the app may also record the active window title as part of the local activity stream.

ActualFocus is not intended to record keystrokes, clipboard contents, audio, or raw screen contents.

6. Browser data and local browser bridge

ActualFocus can work without browser extensions, but browser setup improves domain-level classification. When Safari integration or the optional Chrome extension is enabled, the browser may send the active page URL and page title locally to the ActualFocus app.

The app derives and may store the following locally while a session is running:

• Browser name
• Domain
• URL scheme such as http or https
• Page title

Full URLs are used transiently for local browser-to-app delivery and are not intended to be stored as a browsing-history log or sent off-device by default. For Chrome, the local bridge is intended to accept requests only on loopback addresses such as 127.0.0.1, ::1, and localhost.

7. What ActualFocus stores locally

ActualFocus may store the following locally on your Mac:

• Session start, pause, resume, and stop events
• Derived timeline segments such as focused, phone distraction, digital distraction, away, and unknown
• Frontmost app and browser-domain activity used to classify a session
• Derived camera signals and camera-health metadata
• Rules, settings, onboarding state, and privacy preferences
• Telemetry consent state and telemetry preference state
• Local export files you explicitly create

8. What does not leave the device by default

ActualFocus is intended to keep the following on-device by default:

• Raw camera frames
• Raw browsing history
• Raw app timelines
• Focused window titles
• Per-sample camera observations
• Detailed per-domain activity logs
• Session goals and similar sensitive free-form content

9. Optional telemetry and diagnostics

ActualFocus supports optional telemetry only when telemetry is configured in the app build and you explicitly opt in. If enabled, optional diagnostics and a small allowlisted set of usage or session-summary metrics may be sent to third-party providers such as Sentry and PostHog.

Approved off-device events are intended to be limited to high-level product and health signals such as install or onboarding milestones, session started and completed events, auto-pause triggered, false positive marked, browser extension connected, export used, aggregate error data, and allowlisted summary metrics like focus rate or session duration.

ActualFocus is not intended to send raw camera activity, raw browser activity, or raw app timelines off-device through telemetry.

10. Exports and user control

You control when sessions start and stop. You can use the app without browser extensions, decline camera access, decline Accessibility access, and decline notifications, although those choices can reduce accuracy or limit some features. If optional telemetry is available, you can also leave it off or disable it later.

The app may offer exports such as JSON, CSV, or raw event logs. Those exports are created only when you explicitly request them, and once exported they are under your control on your Mac and in any destinations where you store or share them.

11. Sharing and subprocessors

We do not sell ActualFocus activity data. The core app is intended to run locally without a cloud runtime. If you opt into optional telemetry where configured, telemetry providers such as Sentry and PostHog may receive the limited diagnostics or allowlisted metrics described above. If you email support, normal email or ticketing providers may process your contact details and the information you choose to send us.

12. Retention

Local activity records remain on your Mac until you remove them, replace them through normal app operation, or remove the app and its local data. Export files remain wherever you save them. Telemetry data sent to a configured provider, if any, is retained according to that provider’s policy and your chosen configuration.

13. Security

We aim to minimize data movement and keep sensitive processing local. The app is designed around local inference, loopback browser delivery where applicable, least-privilege permissions, and optional rather than mandatory off-device diagnostics.

14. Children

ActualFocus is not directed to children under 13, or the equivalent minimum age in your jurisdiction.

15. Changes to this policy

We may update this page if ActualFocus changes its permissions, telemetry model, export behavior, or local processing. The effective date at the top of this page reflects the latest revision.

16. Contact

If you have questions about this policy or the ActualFocus macOS app, contact our privacy inbox.