Privacy Policy

Introduction

Corner Pocket Holdings LLC ("we," "our," or "us") operates Heads Up, a macOS application for real-time focus tracking during meetings. This Privacy Policy explains how we collect, use, and protect your information when you use our app and website at headsup.work.

Information We Collect

Information collected during focus sessions

• Active application name: Which app is in the foreground during a session
• Activity timestamps: Keyboard and mouse activity timestamps to determine focus state (heads up, away, or idle)
• App switch counts: How many times you switched between applications
• Session metadata: Session start/end times, meeting title, and participant email addresses

Information we do NOT collect

• Keystroke content or what you type
• Websites visited or URLs
• Screen content or screenshots
• Any activity outside of active focus sessions
• File contents or documents

Calendar data

If you connect your Google Calendar, we access your calendar events (title, time, attendees, and meeting links) in read-only mode to display upcoming meetings. Calendar data is fetched in real time and is not stored on our servers beyond what is needed for the active session. We do not modify, delete, or share your calendar data.

Device information

We generate a random device identifier (UUID) stored locally on your Mac to associate your sessions. This is not linked to your Apple ID or any other personal identifier.

How We Use Your Information

• To provide real-time focus tracking during meetings with your teammates
• To display session statistics (focus time, away time, session count)
• To show teammate leaderboards within your team
• To detect and display upcoming meetings from your calendar

Data Storage & Security

Session data is stored in a cloud database (Supabase) to enable real-time collaboration with teammates. Google Calendar OAuth tokens are stored securely in your Mac's Keychain and are never transmitted to our servers.

Data Retention

You can configure how long session data is retained (default: 30 days). You can delete all your session data at any time from the app's Settings.

Third-Party Services

• Google Calendar API: Used to read your calendar events (read-only). Subject to Google's Privacy Policy.
• Supabase: Cloud database for session and participant data.
• Sparkle: Used for in-app update checks. No personal data is transmitted.

Your Rights

You can at any time:

• Disconnect your Google Calendar from the app
• Delete all your session data from Settings
• Revoke Heads Up's access from your Google Account permissions
• Request deletion of all your data by contacting us at the email below

Children's Privacy

Heads Up is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this Privacy Policy, contact us at jgvandehey@gmail.com.