Privacy Policy

This Privacy Policy explains how Exora handles information when you use the app and the Exora website.

What Exora is

Exora is an accountability and execution companion built to help people stay focused, follow through, and finish important work. It is built mobile-first, with Android-specific protection features where supported by the operating system.

Information Exora may store

• your account profile preferences and display name
• your goals, tasks, and focus session notes
• focus session duration, completions, streaks, and progress trends
• settings such as discipline mode, selected protection mode, default blocked apps, and focus preferences
• group accountability pool details, invite codes, membership, and synced session history
• push notification tokens used to send account or focus reminders when notifications are enabled

Accessibility Service API (Android)

To enforce distraction blocking, Exora features "Blocking" and "Both" protection modes, automatic rules, and app/website categories which use Android's Accessibility Service API.

• Purpose: The Accessibility Service is used to detect foreground app/window-change events and the opened app name/package when a selected blocked app is opened, then return you to Exora.
• Website blocking: When you block a website or enable the adult-site filter, Exora reads only the current tab's address-bar domain in supported browsers to check it against your block list. It does not read page contents, form fields, or browsing history, and no URLs or history are stored or transmitted.
• No screen reading: The Accessibility Service does not read messages, passwords, payment details, typed content, or personal screen content.
• No advertising use: Accessibility data is not sold, shared, or used for advertising.
• Prominent disclosure: Exora shows an in-app disclosure and requires your confirmation before opening Android Accessibility settings.

Website Blocking (Windows) and Device Authentication

• Hosts file: On Windows, the ExoraGuard service blocks websites by mapping your blocked domains to 0.0.0.0 inside a clearly-marked, isolated section of the system hosts file. The rest of your hosts file is preserved, and the section is removed when blocking is turned off.
• Biometric / device lock: Opening your "Never allowed" list can require your device's own biometric or passcode. Exora only asks the operating system to authenticate you and never sees or stores your fingerprint, face, or passcode.

Installed Applications / Package Visibility

To support customizable app blocking and the "Minimalist" launcher mode, Exora queries launchable installed applications on your device.

• The installed app list is used to let you choose which apps should be blocked, delayed, or left normal.
• The full installed app list is not sold, shared, or used for tracking or advertising.
• Your selected blocked-app preferences may be saved locally and may sync with your account so focus protection works after sign-in.

Focus Pools and Cloud Sync

If you join or create a "Focus Pool" (a group accountability room):

• Your completed focus sessions, focus durations, and display name are synced to support pool leaderboards.
• This data is shared within your Focus Pool to populate the live ranked leaderboard.
• Private sessions not associated with a Focus Pool are kept locally on your device or in your personal account sync depending on your sign-in status.

Focus Wrap & Local Analytics

Exora aggregates your focus history locally to generate weekly reflections and story-style recaps ("Focus Wrap"). These statistics are calculated on-device. If you choose to export or share a Focus Wrap card, it is rendered on your device.

How data is used

Exora uses stored data to:

• show your tasks, progress, and accountability state inside the app
• power features such as focus sessions, progress summaries, and reflections
• maintain live group leaderboard rankings in Focus Pools
• sync your account after sign-in or email verification
• send push reminders when notifications are enabled

Website data

The Exora website is primarily a marketing and download site. It may collect standard website analytics or server logs depending on how it is hosted. If additional tracking, forms, or external integrations are added later, this policy should be updated.

Data sharing

Exora is not intended to sell your personal data. Information is only shared when necessary to provide hosting, platform services, or group leaderboards within active Focus Pools you choose to join.

Security

Reasonable efforts are made to protect stored information, but no storage or transmission method can be guaranteed to be completely secure.

Your choices

• you can edit or remove tasks, profile details, and group memberships
• you can reset locally stored app data from settings where supported
• you can sign out, delete your account, or request support by email
• you can turn Android permissions off from system settings at any time

Contact

For privacy or support questions, contact: exorafocus@gmail.com or greenearth.wo@gmail.com