Legal & Privacy
Disclaimer (Non-medical)
Terms of Use
§1. About the Service
FocusMaxing is an AI-powered conversation service for general support within the life mastery and wellness segment. The service is not medical healthcare or medical equipment and does not establish a patient-provider relationship.
§2. Acceptance of Terms
By using the service, you confirm that you have read and accepted these terms.
§3. Account and Age Limits
Over 16 years. Children: We do not offer the service to persons under 16 years. If an account for a user <16 years is discovered, it and associated data will be deleted.
§4. Prohibited Use & Fair Use Policy
It is not allowed to: violate laws or third-party rights, spread hate, threats, harassment, violence, self-harm, illegal acts, attempt "jailbreaking", scraping, DDoS or mass automation, use the service commercially without agreement, use while driving, handling dangerous equipment or under the influence of intoxicants, use in acute crisis situations. The list is not exhaustive. Fair Use Policy (AI & Resources): We offer "unlimited" AI usage for personal, human interaction. However, to prevent abuse (such as automated scraping, botting, or non-personal commercial use that generates excessive costs), we monitor for abnormal usage patterns. A technical safety limit (currently set at 1,000 messages per month) is in place to trigger a review of such accounts. This limit is set high enough that regular personal users will rarely encounter it. If you are a genuine power user and hit this limit, please contact support, and we can review your usage to ensure it aligns with our terms. We reserve the right to limit or terminate accounts that exploit the service for unintended heavy processing or automated tasks. Competitors and Benchmarking: You may not access the Service if you are a direct competitor, except with our prior written consent. In addition, you may not access the Service for purposes of monitoring its availability, performance, or functionality, or for any other benchmarking or competitive purposes.
§5. AI Limitations
Answers may be incorrect. Not for use as healthcare. In acute need, contact local emergency services.
§6. Data Processing
Messages may be processed via third parties. Do not share unnecessary health or personal information.
§7. Availability
We may change, suspend, or stop the service. Temporary downtime may occur.
§8. Payment, Privacy & Restoration
Payment: Subscription renews automatically for the stated period at the current price. A. Web Subscriptions (Stripe) If you subscribed via our website: Your subscription renews automatically. You can manage or cancel your subscription by logging into your account settings on our website, or by contacting support at support@focusmaxing.com at least 48 hours before renewal. B. iOS Subscriptions (Apple App Store) If you subscribed via the iOS app: Your subscription is managed entirely by Apple. We cannot cancel it for you. To cancel, go to your iPhone Settings -> Apple ID -> Subscriptions -> FocusMaxing. All refund requests must be directed to Apple. C. Android Subscriptions (Google Play) If you subscribed via the Android app: Your subscription is managed by Google. To cancel, open the Google Play Store -> Tap Profile -> Payments & subscriptions -> Subscriptions -> FocusMaxing. Right of Withdrawal: Right of withdrawal follows local laws. You have a minimum of 14 days right of withdrawal. If you request immediate access to digital content and tick that the right of withdrawal lapses, you lose the right of withdrawal when delivery starts. Notification that you wish to use the right of withdrawal is sent to our support email. Commenced period is not refunded, unless mandatory consumer legislation dictates otherwise.
§9. Intellectual Property Rights
The Service and its original content (excluding Content provided by users), features and functionality, including all design, concepts, bespoke elements, and unique compositions, are and will remain the exclusive property of Start AS and its licensors. The Service is protected by copyright, trademark, and other laws of both Norway and foreign countries. Our trademarks and trade dress may not be used in connection with any product or service without the prior written consent of Start AS. You agree not to reproduce, duplicate, copy, sell, resell or exploit any portion of the Service, use of the Service, or access to the Service or any contact on the website through which the service is provided, without express written permission by us.
§10. Third Parties
We use subcontractors for operations/AI/hosting. See separate list.
§11. Limitation of Liability
Start AS and affiliated companies, persons, or businesses are not responsible for direct or indirect loss related to user's use or non-use of the service. The service is used at your own risk. User shall not use the service for psychological healthcare, in important or demanding situations.
§12. No Warranties
"The service is provided 'as is'."
§14. Indemnification
User holds us harmless in case of breach.
§15. Changes
Updated as needed. "Last updated" date at the top.
§16. Choice of Law
Nothing in these terms limits your mandatory rights under applicable consumer legislation. The service is regulated by Norwegian law. Oslo District Court is appointed as the venue for any dispute regardless of user's jurisdiction and scope.
Privacy Policy (GDPR-Art. 13/14)
1. Purpose and Basis for Processing
Operations (Art. 6(1)(b)) Security/misuse (Art. 6(1)(f)) Customer support (6(1)(b)/(f)) Payment/accounting (6(1)(b)/(c)) Analysis/improvement (6(1)(f)) Marketing (6(1)(a)) Health information: only based on explicit consent (Art. 9(2)(a)) Consent to processing of your personal and health information: You can at any time withdraw your consent to processing, delete, view or edit your personal information by sending an email to our support email. Deletion can also be done when you are logged into your user account. Click: more -> settings -> account -> delete. We will stop further processing, and delete or irrevocably anonymize existing personal and health information within 30 days.
2. Data Categories
Account (email, password hash) Usage data (IP, error log) Conversation content (text) Other data the user logs in the app about themselves Payment references (handled by third party) Cookies – see cookie policy.
3. Storage
Chat logs: until account deletion or anonymization. Account data: until account deletion + up to 90 days. Security logs: 3 months. Payment data: acc. to bookkeeping rules.
4. Rights
Access, rectification, erasure, restriction, data portability (in JSON/CSV format where technically possible), objection, withdraw consent. We may require identity verification before rights claims are granted. Response deadline: 1 month (possibly +2 for complexity).
5. Sharing and Recipients
Only necessary data processors See subcontractors.
6. Transfer to Third Countries
See subcontractors for actual transfers and SCCs.
7. Security
Encryption at rest, access control, MFA, audit logging min. 3 months.
8. Automated Decisions
Not performed.
9. Complaint
Datatilsynet, www.datatilsynet.no
10. Changes
Updated as needed.
Cookie SettingsDecide which cookies you want to allow.
1. What are cookies?
Cookies are small text files stored in your browser when you visit the website. We use cookies to deliver function, remember settings, and collect anonymous statistics to improve the service.
2. Consent
Non-necessary cookies only after consent.
3. Categories
Necessary, functional, analysis, marketing.
4. Administration
Email: our stated support email address.
5. Changes
You can change or withdraw consent at any time.
6. Transfer
Analysis/marketing may involve transfer outside the EEA.
Acceptable Use & Content Policy
See §4 in Terms of Use for detailed information on prohibited use. It is not allowed to: - violate laws or third-party rights - spread hate, threats, harassment, violence, self-harm, illegal acts - attempt "jailbreaking", scraping, DDoS or mass automation - use the service commercially without agreement - use while driving, handling dangerous equipment or under the influence of intoxicants - use in acute crisis situations
AI Transparency Warning
You are interacting with AI, not a human Limitations: not diagnoses, not acute assessment. Sources of error: hallucination, context errors. AI answer = AI generated.
Security & Vulnerability Reporting (CVD)
Encryption in transit/at rest (where supported), access control and MFA. Admin access is MFA-protected and audit-logged for 3 months. Two-person principle for linking email <-> user ID. Vulnerabilities are reported to our support email address with descriptions. In case of personal data security breach, we assess risk and notify the Data Inspectorate within 72 hours when required, and affected users when high risk exists.
Data Processing Agreement (DPA)
For B2B customers the following applies: Separate data processing agreement is signed. Processing only according to customer's instructions. Access controls and encryption. Regular security audits. Notification of data breach within 24 hours.
Subprocessors
- Stripe – Payment – EU – NO
- Google (Cloud/Firebase/Analytics) – Hosting/Auth/Database/Analytics – EU/US – YES (SCC)
- OpenAI – AI Processing – US – YES (SCC)
- Google (Gemini / Vertex AI) – AI Processing – EU – YES (SCC)
- xAI (Grok) – AI Processing – US – YES (SCC)
- Microsoft (Azure AI Foundry) – AI Processing – EU – YES (SCC)
- Anthropic (Claude) – AI Processing – US – YES (SCC)
- Mistral AI – AI Processing – EU – NO
- Resend – Email Service – US – YES (SCC)
- GatewayAPI – SMS Service – EU – NO
- PostHog – Product Analytics – EU – NO
- RevenueCat – Subscription Management – US – YES (SCC)
- Meta Platforms (Facebook) – Marketing/Analytics – US – YES (SCC)
- Snap Inc. – Marketing/Analytics – US – YES (SCC)
Notice: Changes to the list may occur. This will be updated and stated in this document on our website.
Service Terms/SLA
"The service is provided 'as is'."
Notice-and-Takedown
Notification of infringement shall contain identification of work, URL and contact info. We may remove content temporarily while we assess.