FOCUS+Privacy Policy
Last updated: 2026-10-03
Who we are
SWAND AB (org. nr 559523-0896) operates FOCUS+ at focus-plus.space. We are responsible for the personal data we use to provide the product, manage our mailing list, and handle support requests. The service providers below also describe their own processing in their privacy policies. Contact: hello@swandapp.com.
What data we collect
- Email address — when you join the waitlist or buy a product. Used to deliver the product and handle necessary order emails. Voluntary mailing-list emails are sent with your consent.
- First name (optional) — when provided via the opt-in form. Used to personalize emails.
- Purchase data — when you buy via Payhip: name, billing email, country, transaction ID, product purchased, amount, currency. Payment card details are handled directly by the payment processor selected at checkout. They are not available to SWAND AB.
- Cancellation and refund data — your name, email address, order number, product, and submission time when you ask to withdraw from a purchase or request a refund.
- Technical data — IP address, browser type, device type, referrer, pages visited. Used for analytics and fraud prevention.
- Cookie preferences — your consent choice stored in your browser's localStorage.
Why we collect it (legal basis)
| Data | Purpose | Legal basis (GDPR) |
|---|
| Purchase email and order details | Deliver the product and handle necessary order and support emails | Contract (Art. 6(1)(b)) |
| Mailing-list email and optional first name | Send voluntary marketing and educational emails | Consent (Art. 6(1)(a)) |
| Purchase data | Fulfill the purchase, comply with tax law | Contract + Legal obligation (Art. 6(1)(c)) |
| Cancellation and refund data | Confirm and process your request | Contract + Legal obligation (Art. 6(1)(b) and (c)) |
| Technical data | Analytics, security | Legitimate interest (Art. 6(1)(f)) |
Service providers and their roles
We use the providers below for payments, email, hosting, analytics, and product access. Their roles depend on the service: some process data on our behalf, while others are responsible for their own processing under their privacy policies.
- Resend (US) — sends transactional and automated emails. resend.com/privacy
- Google Workspace — receives and stores support emails sent to hello@swandapp.com, including cancellation and data-rights requests. Google Workspace data processing terms
- Payhip (UK) — operates the checkout and stores purchase records. Payhip identifies itself as a data controller in its privacy policy; the selected payment processor handles payment card details. payhip.com/privacy
- Lovable (EU) — hosts the website and, as part of the hosting platform, measures page performance (Core Web Vitals) from your browser. lovable.dev/privacy
- Plausible (EU) — measures site traffic. Cookie-free, no personal data stored, no cross-site tracking. plausible.io/privacy
- Google Fonts (US) — serves the typefaces used on the site. Your browser requests the font files directly from Google, which means Google receives your IP address. policies.google.com/privacy
- Notion (US) — hosts the customer-facing FOCUS+ template you receive after purchase. notion.com/privacy
- YouTube / Google (US) — hosts the onboarding film. policies.google.com/privacy
We do not sell data. We do not share data with advertisers.
International transfers
Some providers process data in the United States. Resend includes Standard Contractual Clauses in its data processing agreement. Google Workspace describes its transfer safeguards in its data processing terms. See each provider's linked policy and terms for its locations, role, and safeguards.
How long we keep it
- Mailing-list email and first name: we stop marketing emails when you unsubscribe and remove data held only for FOCUS+ marketing within 30 days. Purchase records and information needed for a separate service or an unresolved support request are handled separately.
- Our bookkeeping records: retained for the period required by Swedish bookkeeping law. Payhip separately retains purchase data for 10 years under its EU VAT records policy.
- Cancellation, refund, and support data: kept to handle the request. Information needed as part of the bookkeeping record is retained with that record; other support information is reviewed and removed when it is no longer needed.
- Technical and delivery data: provider retention periods differ. Resend retains email data for 30 days on our current plan; this does not automatically delete mailing-list contacts. Plausible provides aggregate traffic statistics. Hosting and other service logs are governed by the relevant provider policies linked above.
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten") — note that bookkeeping records may need to be retained
- Restrict processing
- Receive your data in a portable format
- Object to processing based on legitimate interest
- Withdraw consent at any time
To exercise any right, email hello@swandapp.com. We respond within 30 days. You can also file a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se.
Changes
We will update this policy when our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced via email to active subscribers.