Privacy Policy

What this is

Personal Command Center (thefocus.co.uk) is a self-hosted personal scheduling application. In v1 it runs as a closed two-account household app for the operator of this deployment and their partner. This policy describes what data is collected and how it is stored.

What data is collected

All data is provided by the users, including:

• Personal schedules, projects, OKRs, and goals
• Children’s school details and curriculum tracking
• Family members’ display names (set during setup)
• Reading lists and book progress

The application also stores:

• Encrypted session cookies for sign-in
• Application logs (errors, request timestamps, IP addresses — kept 30 days)

AI features and your data

This application does not call any AI or LLM service at runtime. AI-assisted artefacts (task breakdowns, lesson plans, daily briefs, reviews, reflections) are produced outside the app — you copy a prompt into a tool of your choice (e.g. Claude.ai), and paste the result back in. The application never transmits your schedule, your children’s data, or any other personal data to an AI provider on its own. You decide what, if anything, to paste into an external tool.

Where data is stored

• Primary storage: a PostgreSQL database on the operator’s own server.
• Backups: encrypted nightly to local disk and, optionally, to Cloudflare R2 (EU jurisdiction) with client-side encryption.
• No third-party analytics, tracking pixels, or ad networks.

Who has access

In v1: only the two adults in the household, each via their own password. Per-account data isolation is enforced at the database level (row-level security); family-shared data (children, curriculum, shopping list) is visible to both adults by design.

Children’s data

Children’s data (names, school details, curriculum tracking, lesson outcomes) is processed under the guidance of their parents and stored only on the operator’s own server. It is not transmitted to any third party by the application. Display names can be used in place of legal names; legal names are kept for official documents only and are never sent to external tools by the app.

Data retention and deletion

Users may export or delete their data at any time. Deletion removes the account and all data cascaded from it.

Contact

This deployment is operated by Ron Lai, Carshalton, UK. For questions: [contact email].

Changes

This policy may change; significant changes are noted in the changelog. This is a v1 skeleton and should be replaced with lawyer-reviewed text before any public or paid launch.