Bokeh

Privacy policy

Effective 13 October 2026

Bokeh is the planning and focus app at bokeh.sh. This policy explains what information the app uses, why it uses it, and how to request deletion.

The service is operated by Kwon, its developer. For privacy questions, contact kwonmyungstone@gmail.com.

Information we collect

Google sign-in and Calendar

Google sign-in identifies your account. With your permission, the app requests read-only Calendar event access so you can see meetings beside planned focus blocks. The current integration reads your connected account’s primary calendar for the date range you display.

We retrieve event identifiers, titles, start and end times, and whether an event is all day. The integration does not create, edit or delete Google Calendar events. Calendar event records are fetched from Google and displayed in the app; the calendar service does not save those event records in its database.

Google authorization tokens are stored on the server so the app can retrieve events and refresh access while permission remains granted. We may send a token to Google to verify the permissions actually granted to it.

Google account and Calendar API data are used to provide sign-in and the visible calendar integration. We do not sell that data, use it for advertising, or use Calendar API event data to train AI models or send it to attention-assessment models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Focus and AI attention features

Attention assessments use the current app, hostname, window title, active task, intention and lane information to judge whether an activity supports your focus session. Depending on the feature and server configuration, this information is processed by our hosted Laya service, Google’s Gemini API, or TypeSafe AI. A comparison assessment can send the same context to more than one configured provider.

The attention-assessment request contains text context, rather than screenshots or full page contents. Window titles and task text can still reveal sensitive information. This activity context is separate from data retrieved through the Calendar API.

How information is used and shared

We use information to provide sign-in, synchronize your work, display meetings, track focus sessions, assess attention, diagnose faults and protect the service. We do not sell personal information or use it to serve targeted advertising.

Service providers process information needed to operate these features: Google Cloud hosts the API and hosted attention services, Supabase hosts the application database, and Vercel hosts the website. Google provides sign-in, Calendar access and Gemini processing when used; TypeSafe AI provides attention assessments when configured. Download links lead to GitHub, and the homepage loads fonts from Google Fonts, so those services receive ordinary browser request information.

Information may be processed outside your country by these providers. We may access or disclose information when necessary to provide support you request, investigate security issues, or meet legal obligations. The service uses HTTPS for communication with its public API, account-scoped access controls and the security controls of its hosting providers.

Retention and deletion

Account records and saved app content remain stored while your account is in use, unless you delete content or request account deletion. Signing out does not delete your account, saved content or Google authorization tokens.

To request access, correction or deletion of your account data, email kwonmyungstone@gmail.com from the email address associated with your account. We may verify account ownership before acting. Account deletion includes saved app content and stored Google authorization tokens. Backups and operational logs can remain until they are rotated or expire; records necessary for security or legal obligations may be retained longer.

Your choices

You can revoke the app’s Google permissions at any time through Google Account connections. Revoking Calendar access stops future authorized event retrieval; it does not delete saved app content. You can stop using focus and attention features to stop new assessments from those features.

The app is intended as a general productivity tool and is not directed at children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it.

Changes and contact

We will update this page when data practices change and revise the effective date. If a change introduces a new use of Google user data, we will explain it and obtain any required consent before that use begins.

Privacy questions or complaints: kwonmyungstone@gmail.com.