Privacy Policy
Last updated: March 2026
1. Overview
The Night Desk ("we", "our", "the Service") is operated at lofistudio.io. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how it is used and protected.
The Service can be used without an account. In that case, all your data stays in your browser's local storage and never leaves your device.
2. Data We Collect
Without an account (free, no login)
- — Nothing is sent to our servers
- — Timer settings, tasks, and preferences are stored in your browser's localStorage only
- — This data is never transmitted to us
With an account
- — Email address (used for login and account identification)
- — Name and profile picture (if you sign in with Google)
- — Tasks you create (title, category, due date, completion status)
- — Focus sessions (duration, timestamps, session type)
- — Subscription status
Automatically collected
- — Basic server logs (IP address, browser type, pages visited) retained for up to 30 days
- — We do not use third-party analytics or tracking cookies
3. How We Use Your Data
- — To provide and sync the Service across your devices
- — To manage your subscription and process payments
- — To send transactional emails (receipt, password reset)
- — To investigate abuse or security issues
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.
4. Third-Party Services
Authentication and database hosting. Your account data and app data are stored in a Supabase PostgreSQL database hosted in the EU/US. Supabase is SOC 2 Type II certified.Supabase Privacy Policy ↗
Payment processing for Pro subscriptions. We never see or store your card details. All payment data is handled by Polar.Polar Privacy Policy ↗
Lofi music streams are embedded via the YouTube IFrame API. When you play music, YouTube may collect data per their own privacy policy.Google Privacy Policy ↗
5. Data Retention
- — Account data is retained as long as your account is active
- — Focus sessions are retained indefinitely for Pro users; free users have no cloud storage
- — If you delete your account, all your data is deleted within 30 days
6. Your Rights
You have the right to:
- — Access the data we hold about you
- — Export your data (Pro users can export focus stats as CSV)
- — Correct inaccurate data
- — Delete your account and all associated data
- — Withdraw consent at any time
To exercise any of these rights, email support@lofistudio.io
7. Cookies
We use a single session cookie for authentication purposes when you are logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
8. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
9. Security
We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure — if you discover a vulnerability, please disclose it responsibly to support@lofistudio.io
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email for material changes. The "last updated" date at the top of this page reflects the most recent revision.
11. Contact
Questions or concerns about your privacy? Contact us at support@lofistudio.io