Privacy Policy

At Soft Computers, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our website, services, and apps.

Information We Collect

Website Analytics

We use Google Analytics (GA4) to understand how visitors interact with our website, and only after you accept analytics cookies. This collects pages visited, time on page, browser and device type, coarse geographic location (country or city level), referring site or search terms, and IP address (anonymized by Google). You can decline analytics cookies in our cookie banner, or opt out with the Google Analytics Opt-out Browser Add-on.

Contact Form Submissions

When you submit our contact form, we collect your name and email address (required), company name (optional), your message, and a submission timestamp. This data is stored securely in our database hosted by Supabase and used solely to respond to your inquiry.

Newsletter Subscription

If you subscribe to our newsletter, we collect your email address, signup source, and subscription status. You can unsubscribe at any time using the link in every newsletter email. We use Resend for email delivery, and your email is stored in our Supabase database.

Our Apps

FocusFlow (iOS): FocusFlow can be used entirely on your device. You may continue as a guest, and a guest's tasks, sessions, progress and settings stay on your iPhone in Apple's secure storage and are never sent to us. You may also create an account with an email address, Sign in with Apple, or Sign in with Google. If you sign in and have Pro, FocusFlow syncs your tasks, focus sessions, presets, badges, aggregate stats, settings and, if you set one, your profile photo to our Supabase backend so they follow you between devices. Signing in without Pro still downloads any data already saved to your account. You can use the app without ever signing in.

FocusFlow's Flow AI assistant is optional. When you send it a message, that message and a short context summary, which can include your display name, task titles, session names, streaks and goals, is sent through our backend to OpenAI to generate a reply. If you dictate a message by voice, Apple's speech recognition may process that audio on Apple's servers. If you choose a generated avatar, the text you type as its seed is sent to DiceBear to draw it. Subscriptions are processed by Apple's App Store; we never receive your payment details.

CueCam (iOS): CueCam has no account and no analytics, and the app itself makes no network requests. Your scripts are stored on your device, and the voice-follow feature transcribes audio entirely on device, so your voice is not sent anywhere. Two things do leave the app by design: recordings you make are saved to your Photos library, where iCloud may back them up under your own Apple account, and anything you share with the share sheet goes to the app you choose. The one-time Pro purchase is handled by Apple's App Store, which contacts Apple to verify it; we never receive your payment details.

Nuvex (iOS, iPadOS, watchOS): Nuvex has no account, no server, and no analytics of any kind. Your fasts, weights, and settings are stored only on your own devices using Apple's secure storage, and are shared between your iPhone and your Apple Watch directly, device to device. Nothing is transmitted to Soft Computers, and we have no way to see your record even if asked. Apple Health access is optional and off until you turn it on: with it on, Nuvex writes the weights you log to Health and reads only your weight history so you do not have to retype it. Deleting your data in Settings removes it from the app; weights already written to Apple Health remain in Health, where you control them. The one-time Pro purchase is handled by Apple's App Store, so we never receive your payment details.

Creastora (web): Creastora is a web application and, unlike our apps, requires an account. Your resume files and their extracted text, the details parsed from them such as your name, email, phone number and LinkedIn URL, your work history, and the documents Creastora generates for you are stored on our servers so you can return to them. Generating a resume, cover letter or interview prep sends the relevant content to Anthropic, our AI provider. Payments are handled by Stripe and email by Resend. Creastora has its own privacy policy, which governs it in full and is the authority for account data, documents and payments, available at creastora.com.

How We Use Your Information

• Respond to your inquiries and provide consultations
• Send newsletters and service updates (only with your consent)
• Improve our website, content, and user experience
• Analyze aggregate traffic patterns
• Protect against spam, fraud, and security threats
• Comply with legal obligations

Third-Party Services

• Vercel: website and Creastora hosting
• Supabase: database, accounts and file storage for this site, for FocusFlow accounts, and for Creastora
• Google Analytics: website analytics (consent-gated)
• Google Sign-In: optional sign-in method in FocusFlow, used only if you choose it
• Resend: transactional email delivery
• OpenAI: generates replies in FocusFlow's Flow AI assistant, receiving your message and a short context summary
• Anthropic: generates resumes, cover letters and interview prep in Creastora, receiving the content you provide for that document
• DiceBear: draws generated avatars in FocusFlow, receiving the seed text you type
• Stripe: payments for Creastora
• Cloudflare: bot protection on Creastora forms, which sees your IP address
• Apple: app distribution, in-app purchases, and Sign in with Apple

Nuvex and CueCam are not on this list on purpose: neither app sends anything to any of these services. The only network activity either performs is Apple's own check that a purchase is valid.

Each service has its own privacy policy governing its data practices. We share only the minimum data necessary for each service to function.

Data Sharing

We do not sell, trade, or rent your personal information. We may share information only with the service providers above, when required by law, to protect our rights or safety, or with your explicit consent.

Data Security

• All data transmitted over HTTPS (TLS encryption)
• Database encryption at rest
• Secure authentication for administrative access
• Regular security updates and monitoring
• Access to personal data limited to a need-to-know basis

Cookies

Your cookie choice is stored in your browser's local storage, not in a cookie itself. If you accept, Google Analytics sets analytics cookies to measure how the site is used; these are the only cookies set on our public website. If you decline, no analytics cookies are set. You can change your choice at any time by clearing site data in your browser.

Data Retention

• Contact submissions: retained until resolution or upon deletion request
• Newsletter subscriptions: until you unsubscribe
• Analytics data: up to 14 months (GA4)

Your Rights

Under Canadian privacy law (PIPEDA), you have the right to access the personal data we hold about you, request correction or deletion, unsubscribe from communications, withdraw consent at any time, and file a complaint with the Privacy Commissioner of Canada. To exercise these rights, contact us at support@softcomputers.ca. We respond within 30 days.

Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

International Users

Our website is hosted in North America. If you access our services from elsewhere, your data may be transferred to and processed in Canada or the United States.

Changes to This Policy

We may update this policy from time to time. Material changes are posted on this page with an updated date.

Contact Us

Questions about this policy: support@softcomputers.ca, or through our contact page. Soft Computers, Toronto, Ontario, Canada.