Privacy policy

Nova Focus builds privacy-first software; our products are designed to process sensitive content on your device, and we never sell personal data.

This Privacy Policy applies to Nova Focus Private Limited, a company incorporated in India with its office in Bengaluru, Karnataka, and its affiliate NovaFocus LLC (United States) (together, "Nova Focus", "we", "us"). Nova Focus Private Limited is the data controller ("data fiduciary" under India's Digital Personal Data Protection Act, 2023).

It covers:

• Our websites: novafocus.in, blockp.io and their subdomains
• Our products: BlockP for Android, iOS, macOS, Windows and Chrome, and any other app, extension or service we publish that links to this Policy (each a "Product")
• Our communications: support, transactional and marketing emails

(together, the "Services").

Some Products process data specific to how they work. Those details are set out in the Product Schedule at the end of this document and form part of this Policy. Where a Product Schedule is more specific than the general sections, the Product Schedule applies for that Product.

Summary

• We collect account details, settings you choose to sync, purchase records, product analytics, support messages and, on our websites, cookie-based analytics and advertising data.
• We do not collect the content you view, your browsing history inside our Products, messages, photos, files or precise location.
• We never sell personal data. On our websites, we use advertising cookies to measure and target our own ads, which you can refuse or opt out of (Section 3).
• You can access, correct, export or delete your data at any time.

We collect only the categories below. Anything not listed here, or in a Product Schedule, we do not collect.

Payment details. We never receive or store full card numbers, bank details or wallet credentials. Payments are processed by Apple (App Store), Google (Google Play) or Stripe (our websites and direct downloads). They may share a limited billing record with us, such as your name, email, country, card brand and last four digits, solely to identify your purchase.

Data we never collect

• The content you view, type or receive on your device, including screen content and screenshots
• Browsing or search history from inside our Products
• Messages, contacts, photos, files, microphone or camera data
• Precise (GPS) location
• Health or biometric data

Data about other people

If you give us someone else's contact details (for example, an accountability partner in BlockP), you confirm you have their permission. We use them only for the feature you set up, never for marketing, and the person may ask us to delete them at any time.

Our websites use cookies and similar technologies (pixels, local storage, SDK identifiers) for three purposes. Analytics and advertising cookies are optional, and in the EU, UK and India we set them only after you accept them in our cookie banner.

How advertising works here

• Advertising cookies let Google and Meta learn that a browser visited our site or completed a sign-up or purchase. They combine this with data they already hold, under their own privacy policies.
• We never send ad platforms the content you view, your blocklists or anything collected inside our Products' protection features.
• Where we upload email lists to ad platforms for matching (for example, to exclude existing customers from ads), we send them only in hashed form and only where the law allows or you have consented.

Your choices

• Cookie settings: change or withdraw your consent at any time using the Cookie settings link in our website footer. Withdrawing consent does not affect processing before you withdrew it.
• US residents: using advertising cookies may count as "sharing" or "targeted advertising" under California and other state laws. You can opt out using the Your Privacy Choices link in our footer. We honour Global Privacy Control (GPC) browser signals as an opt-out.
• Platform controls: Google Ads Settings (adssettings.google.com), Meta Ad Preferences, and your browser's cookie controls.
• Do Not Track: browsers' Do Not Track signals have no agreed standard; we rely on GPC instead.

Inside our apps

Our mobile and desktop apps use analytics SDKs (Section 2) but do not use advertising SDKs or share an advertising identifier (IDFA or Google Advertising ID) with ad platforms. [Confirm before publishing.]

We use personal data only to run and improve the Services, and share it only with the providers listed here.

Uses and legal bases

• Provide the Services (accounts, sync, Product features, paid access): performance of our contract with you.
• Payments, refunds, tax and accounting: legal obligation and contract.
• Analytics, security, fraud and abuse prevention: our legitimate interest in reliable, secure Services.
• Website advertising and ad measurement: your consent where the law requires it; otherwise our legitimate interest, subject to your opt-out.
• Support: contract and legitimate interest.
• Product and company news: your consent or legitimate interest, as local law requires; unsubscribe anytime.

We do not make automated decisions that have legal or similarly significant effects on you.

Who we share data with

Providers that act on our behalf (processors) may use data only to serve us, under written contracts. Google and Meta act as independent controllers for data they collect through advertising cookies.

We may also disclose data (a) when required by law, court order or valid government request; (b) to protect the rights, safety or property of Nova Focus, our users or the public; (c) between Nova Focus Private Limited and NovaFocus LLC to operate the Services; or (d) to a buyer or successor in a merger, acquisition or asset sale, who must honour this Policy.

We do not sell personal data for money. The only "sharing" for advertising is the website cookie use described in Section 3, which you can refuse.

How long we keep data

International transfers

We are based in India; our providers store data in the United States, the European Union and elsewhere. For transfers out of your country, we rely on the safeguards your law requires, such as the European Commission's Standard Contractual Clauses.

You can access, correct, export or delete your data at any time, wherever you live.

Your rights

Depending on your location (including under India's DPDP Act, the EU and UK GDPR, and US state privacy laws such as the CCPA), you may have the right to:

• Access your personal data and receive a copy in a portable format
• Correct inaccurate data
• Delete your data (except purchase records we must keep by law)
• Withdraw consent, or object to processing based on legitimate interest, including advertising
• Opt out of the sale or sharing of personal data and of targeted advertising (US)
• Restrict processing in certain cases
• Nominate another person to exercise your rights if you die or become incapacitated (India)
• Not be treated differently for exercising these rights
• Appeal our decision on your request (certain US states), and complain to your data protection authority

How to exercise them

• Delete your account: use Delete account in the Product's settings, or email us from your registered address.
• Cookies and ad opt-out: Cookie settings and Your Privacy Choices links in our website footer, or a GPC signal.
• Marketing emails: the unsubscribe link in any email.
• Anything else: email admin@novafocus.in from your registered address.

We verify your identity before acting and respond within 30 days, or sooner if your law requires. An authorised agent may make a request for you with your signed permission. Deleting your account does not cancel an App Store or Google Play subscription (Terms, Section 10).

Children

Our Services are intended for users aged 18 and over. A person under 18 may use them only with the consent and supervision of a parent or legal guardian. We do not knowingly collect data from children under 13, or the minimum age in their country, without verifiable parental consent, and we never use a child's data for advertising or tracking. If you believe a child has given us data without consent, contact us and we will delete it.

Security

We use encryption in transit (TLS), encrypted storage at our cloud providers, least-privilege staff access, and access logging. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires, including the Data Protection Board of India and CERT-In.

Changes to this Policy

We may update this Policy at any time. We will post the new version here with a new "Last updated" date. If a change materially affects how we use your data, we will also notify you in the Product or by email at least 7 days before it takes effect, and ask for consent where the law requires.

Contact

Nova Focus Private Limited, Bengaluru, Karnataka, India.contact: admin@novafocus.in