FOCO Privacy Policy
Last Updated: August 2, 2026 • Version 1.21.2
We believe digital social spaces require unshakeable personal safety. FOCO is engineered with trauma-informed privacy principles: you retain absolute control over how you are perceived. Features like Ghost Mode allow you to exist inside high-energy class lineups and benefit from crowd momentum without ever forcing public visibility.
1. Information We Collect
FOCO collects minimal personal information necessary to provide squad workout synchronization, passkey authentication, and live schedule feeds:
- Account Credentials: Your email address and WebAuthn public keys (for passwordless 1-tap passkey sign-in) or temporary 6-digit verification codes. We do not store passwords.
- Profile & Squad Data: Display name, username, bio, optional soundtrack playlist links, and squad connections you choose to establish.
- Lineup & Schedule Data: Fitness classes you save to your lineup, studio preferences, and iCal feed subscriptions.
- Technical Diagnostics: IP addresses, browser user agent strings, and session timestamps used strictly for security, rate-limiting, and session validation.
2. How We Use Your Information
Your data is processed strictly to operate the FOCO platform:
- Authenticating your account via WebAuthn passkeys or email verification links.
- Rendering your live class lineups and optional squad sync notifications.
- Generating your private live iCal subscription feed for your phone calendar.
- Detecting abuse, rate limits, and unauthorized access attempts.
We never sell, rent, trade, or monetize your personal information to third parties or advertising networks.
3. Ghost Mode Privacy Armor (Anonymous Volume)
Ghost Mode is active by default. When Ghost Mode is enabled:
- Your name and profile never appear on public attendee rosters.
- Your presence is counted only as anonymous numerical volume (for example: “Sarah, Tyler, + 3 others”).
- You can turn Ghost Mode off or on at any time in your profile settings with immediate effect.
4. Data Security & Service Providers
We maintain industry-standard security safeguards to protect your information:
- Database Infrastructure: Serverless Postgres hosted on Neon with encrypted connections.
- Transactional Email: AWS Simple Email Service (SES) with TLS encryption.
- Passkey Cryptography: WebAuthn FIDO2 public-key cryptography. Private keys remain secure inside your device hardware (Apple Keychain, 1Password, or YubiKey).
5. Data Control & Account Erasure
You own your data. You can edit your loadout, disconnect squad syncs, or permanently erase your account at any time in your account settings. When you request account deletion, your user record, saved lineups, and sessions are immediately and permanently removed from our active database.
6. Contact Us & Privacy Inquiries
For questions regarding this Privacy Policy, data requests, or abuse reports, contact our privacy team:
FOCO • 702 S 9th St, Las Vegas, NV 89101