Who is responsible
The data controller is FourWeb Studio di Salvatore Bilardi, sole proprietorship, VAT number 10954031216, Via Luigi Calvanese 17, 80026 Casoria (NA), Italy. Questions and privacy requests can be sent to info@fourwebstudio.it.
Data we handle
- Account data: email address, username, display name, locale, and time zone.
- Security data: password and emergency-code hashes, sessions, device identifiers, authentication events, and limited security metadata.
- Focus data: session mode, timing, completion state, streaks, points, XP, and badges.
- Optional community data: friendships, groups, invitations, challenges, profile visibility choices, reports, blocks, and moderation decisions.
- Optional notification data: encrypted push token and notification preferences.
- Privacy choices: separate consent for product analytics and crash diagnostics.
App selections protected through Apple Screen Time stay on the device. NFC tokens contain only a random public token identifier, never account credentials.
Why we use data
We use the data to create and secure accounts, synchronize focus sessions, apply the restrictions a person requests, calculate progress, deliver chosen notifications, operate optional community features, prevent abuse, and answer support or legal requests.
FourMind does not sell personal data, use advertising SDKs, or track people across apps and websites. Analytics and crash reporting are off by default and remain inactive unless separately enabled in the app.
Storage and retention
Vercel hosts the public website and application services. Database, email, notification, and security providers process only the data required to deliver their service. We use contractual safeguards, access controls, and data minimization for processors and international transfers.
Account and focus data remain while the account is active. An in-app deletion request immediately signs the account out and starts a 30-day recovery period, followed by erasure or irreversible anonymization. Security and audit records may be retained for up to 24 months where necessary to protect the service or meet legal obligations. Limited notification delivery records are retained for up to 90 days.
Your choices and rights
The Privacy and data screen lets a person change optional consent, export a portable copy of their data, or request account deletion. A deletion guide is also available at fourmind.app/account-deletion. Depending on location, people may also request access, correction, restriction, objection, portability, or erasure by email.
Community content can be reported from its action menu. A blocked account cannot contact the blocker or appear in their social surfaces. Reports are reviewed under the Community Standards.
Safety and changes
FourMind uses encryption in transit, protected credential storage, access controls, and data minimization. No system is perfectly secure. Material policy changes will appear on this page with a new effective date.