Bokeh
Privacy policy
Effective 13 October 2026
Bokeh is the planning and focus app at bokeh.sh. This policy explains what information the app uses, why it uses it, and how to request deletion.
The service is operated by Kwon, its developer. For privacy questions, contact kwonmyungstone@gmail.com.
Information we collect
- Account information: when you sign in with Google, we receive your Google account identifier, name, email address and profile image. We store account records, session credentials and authorization tokens.
- Information you create: projects, tasks, notes, planned blocks, focus lanes, focus sessions and distraction records are stored to provide the app and sync your work across devices.
- Activity information: during focus features, the app can read the foreground app name and identifier, browser hostname, window title, active task and stated intention. These details may contain personal information from the apps and pages you use.
- Technical information: hosting services process request information, including IP addresses, timestamps and errors, to deliver and operate the service. Diagnostic attention logs can include app names, hostnames, window titles, task names, lanes and assessment results.
Google sign-in and Calendar
Google sign-in identifies your account. With your permission, the app requests read-only Calendar event access so you can see meetings beside planned focus blocks. The current integration reads your connected account’s primary calendar for the date range you display.
We retrieve event identifiers, titles, start and end times, and whether an event is all day. The integration does not create, edit or delete Google Calendar events. Calendar event records are fetched from Google and displayed in the app; the calendar service does not save those event records in its database.
Google authorization tokens are stored on the server so the app can retrieve events and refresh access while permission remains granted. We may send a token to Google to verify the permissions actually granted to it.
Google account and Calendar API data are used to provide sign-in and the visible calendar integration. We do not sell that data, use it for advertising, or use Calendar API event data to train AI models or send it to attention-assessment models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Focus and AI attention features
Attention assessments use the current app, hostname, window title, active task, intention and lane information to judge whether an activity supports your focus session. Depending on the feature and server configuration, this information is processed by our hosted Laya service, Google’s Gemini API, or TypeSafe AI. A comparison assessment can send the same context to more than one configured provider.
The attention-assessment request contains text context, rather than screenshots or full page contents. Window titles and task text can still reveal sensitive information. This activity context is separate from data retrieved through the Calendar API.
How information is used and shared
We use information to provide sign-in, synchronize your work, display meetings, track focus sessions, assess attention, diagnose faults and protect the service. We do not sell personal information or use it to serve targeted advertising.
Service providers process information needed to operate these features: Google Cloud hosts the API and hosted attention services, Supabase hosts the application database, and Vercel hosts the website. Google provides sign-in, Calendar access and Gemini processing when used; TypeSafe AI provides attention assessments when configured. Download links lead to GitHub, and the homepage loads fonts from Google Fonts, so those services receive ordinary browser request information.
Information may be processed outside your country by these providers. We may access or disclose information when necessary to provide support you request, investigate security issues, or meet legal obligations. The service uses HTTPS for communication with its public API, account-scoped access controls and the security controls of its hosting providers.
Retention and deletion
Account records and saved app content remain stored while your account is in use, unless you delete content or request account deletion. Signing out does not delete your account, saved content or Google authorization tokens.
To request access, correction or deletion of your account data, email kwonmyungstone@gmail.com from the email address associated with your account. We may verify account ownership before acting. Account deletion includes saved app content and stored Google authorization tokens. Backups and operational logs can remain until they are rotated or expire; records necessary for security or legal obligations may be retained longer.
Your choices
You can revoke the app’s Google permissions at any time through Google Account connections. Revoking Calendar access stops future authorized event retrieval; it does not delete saved app content. You can stop using focus and attention features to stop new assessments from those features.
The app is intended as a general productivity tool and is not directed at children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it.
Changes and contact
We will update this page when data practices change and revise the effective date. If a change introduces a new use of Google user data, we will explain it and obtain any required consent before that use begins.
Privacy questions or complaints: kwonmyungstone@gmail.com.