BEWARE. This app is severely insecure. Nothing against the creators but they clearly don't have much familiarity with web security. I can list things that are obviously wrong with it that they haven't spotted, but even if they fix those, they still are not qualified to store sensitive data, and you should not put sensitive data into this app.
Now, most obviously: go to https://headfocus.herokuapp.com/activities and go ahead and view every activity that is active, by any user of the site. It appears you can also delete or edit them without authentication, though I didn't try.
Again, to the creators of the site: It's a cool idea, I have nothing against you, but you're clearly not qualified to work with other people's data, and I recommend that you stop at once.
Now, most obviously: go to https://headfocus.herokuapp.com/activities and go ahead and view every activity that is active, by any user of the site. It appears you can also delete or edit them without authentication, though I didn't try.
Again, to the creators of the site: It's a cool idea, I have nothing against you, but you're clearly not qualified to work with other people's data, and I recommend that you stop at once.