Changelog

Version 1.4.0 introduces the data room: the app and desktop app open documents from the organisation's network drive or NAS via the organisation's own server. It also adds recordings during a running appointment, birthdays with reminders, reliable appointment reminders on every device, sorting the e-file by reference date and a tidier desktop app. Sign-ins now stay valid after interrupted connections.

New

• Data room (app and desktop): browse folders on the organisation's network drive or NAS (mounted directory or WebDAV, e.g. Synology, QNAP, Nextcloud, SharePoint) and open documents in the preview or the default application – read-only and via the organisation's server, so the device needs no access to the network drive. Where the administration allows it, documents can be stored offline, encrypted.
• App: capture photos, videos, audio memos, sketches and documents for the case during a running appointment. Everything is linked to the appointment and appears with its time in the timeline.
• App: a movable floating indicator shows the duration and type of the running appointment (without names or case) outside the appointment and opens it with a tap.
• Desktop: the running appointment is shown in the main window with “Open” and “End appointment”.
• Birthdays of people involved: “Today” shows the birthdays of the next 7 days, and a month-by-month overview is available in the app and desktop app. A reminder at 8 a.m. on the day, in the app without names in the notification; can be switched off.
• E-file: documents appear on the day they refer to (reference date), even if they were recorded later. Sort by reference date, created, modified, name or document type; the search also finds the document type.
• Desktop: icons in the sidebar and menu, a collapsible sidebar and a collapsible case list – collapsed, only the open case is visible, handy in appointments with a laptop.
• Desktop: the width of the case and text snippet lists can be adjusted; the documentation list has a search field.
• Desktop: “Reset app completely” under Settings → About, e.g. to switch to another server.
• Technical handbook: chapter on distributing the apps through device management (e.g. Microsoft Intune) for Android, iPhone/iPad and desktop.

Improved

• Appointment reminders: the app now also reminds you of synced appointments and of appointments after a reinstall; reminders are topped up continuously.
• Licence check: if the licence cannot be confirmed online from day 10, the app offers an encrypted backup, buying or restoring, and continuing free of charge in addition to “Validate now”. All data is kept; after the next successful check the full feature set returns automatically.
• Desktop: the last opened case stays open when switching between sections.
• Android: the app is smaller (optimised Java code).

Fixed

• Sign-in: after interrupted connections (dead zone, app suspended in the background, laptop asleep) you had to sign in again after a few days. The session is now kept; network and server errors count as offline instead of “sign-in expired”.
• Desktop: appointment reminders were saved but never shown. A reminder window now appears at the set lead time plus travel time; new appointments take over the default lead time.
• If a reminder falls on an earlier day than the appointment, it names the date.
• Desktop: after a change with an active list filter, the selection and detail view were lost.
• App (iOS): crash reports now also include errors from the user interface, so that crashes in Split View on the iPhone Duo can be investigated.

Security and privacy

• .NET runtime 10.0.14 in the app, desktop app and server (security update, including the Brotli decoder). Calendar downloads now also only decompress gzip and deflate.
• Data room: read-only; path escapes, symbolic links, hidden and system files are rejected, even if swapped during the check. Only document formats are opened; the desktop app does not launch executable files. Temporary files are deleted on locking; offline copies are encrypted and removed when all data is deleted and when the server connection is removed.
• Reminder windows and birthday notifications show no names while the app is locked or obscured.
• Desktop: the case picker and all open menus close as soon as the lock or privacy cover engages.
• Server images apply the base image's security updates and are fully scanned for vulnerabilities before delivery.

Admin panel and server

• New “Data room” section with its own permission: add sources from a network drive or via WebDAV, test the connection, restrict them to teams and allow offline copies. Access is logged; WebDAV passwords never leave the server.
• Update: the database change is additive. 1.4.0 apps work with admin panels from 1.1.0; the data room requires admin panel 1.4.0.

Version 1.3.0 introduces integration interfaces for organisations (REST API, webhooks, CMIS, XÖV/xdomea, SCIM, calendar subscriptions and SIEM) with four-eyes approval and privacy defaults. In the app, trips can be corrected afterwards, lists load faster, and the app lock and device changes on iOS are considerably more reliable.

New

• Admin panel: New “Integrations” area for connecting external systems. All interfaces stay switched off until the administration sets them up; API clients and connections are first created as drafts.
• Integrations: REST/JSON API with OAuth 2.0 (client credentials), downloadable OpenAPI description, area binding, IP allowlist, per-client rate limiting and a change feed.
• Integrations: Webhooks following CloudEvents 1.0 with signatures; they contain only identifiers and links. Failed deliveries are retried with increasing intervals, and a transfer log offers “Retry”.
• Integrations: CMIS 1.1 for filing final documents, activity reports and closed files in a DMS or e-file (with folder template, property mapping and versioning) and for importing from an inbox folder. The server also provides a CMIS repository that a DMS can read from and file into.
• Integrations: XÖV/xdomea 3.1.0 and 4.0.0 with file handover when a case is closed (validated against the official schema), import of incoming handovers and import confirmation; transfer via directory, SFTP, XTA 2 or FIT-Connect (end-to-end encrypted, sending only).
• Integrations: SCIM 2.0 for managing practitioner accounts and mapping groups to teams from an identity system.
• Integrations: Calendar subscriptions (iCalendar) per person; by default only “Busy” is shared, without content.
• Integrations: Forwarding of the audit chain to a SIEM via syslog over TLS or in CEF format.
• Integrations: Inbound direction (off by default) for documents, approved fields of case master data, appointments and catalogues. In case of conflicts, the practitioner’s version wins. Incoming items land on the new “Inbox (integrations)” page for review and acceptance; origin and source are visible on the document and in the case history.
• Integrations: Manual handover of a case from the case view (“Hand over to target system”), export and import of the configuration (without secrets, imported as draft) and an emergency stop for all outgoing transfers.
• App: Correct saved trips afterwards: departure and arrival, kilometres, case, start location, destination, purpose and note. A signature is only removed if signed details change, with a notice. Closed periods and other practitioners’ trips remain locked.
• App: When finishing a recording, departure and arrival can always be adjusted in case the start or end was forgotten.
• App: Diagnostic report right under “More”. It helps with troubleshooting, includes a navigation log without case data and can be shared.
• App: After an expired session, “Sign in again” offers sign-in with a passkey (except when SSO is enforced).
• Documentation: New interfaces handbook (German and English) plus a description for each interface; chapters added to the technical handbook and the admin panel handbook.

Improved

• App: Today and the case view show a compact preview with “Show all (n)” – much faster with many entries. The “Open documentation” tile opens the full list when there are several entries.
• App: When the travel time entry belonging to a trip is edited, the trip takes over date, times and case; both are saved together or not at all.
• App: When correcting a trip, unchanged times are kept exactly together with the signature, archived cases remain selectable, and a rate that is no longer valid after a date change is determined anew.
• App (iOS): The app lock appears in its own window above everything, including open system dialogs; these remain open after unlocking. VoiceOver stays within the lock window.
• App: On managed devices, the app reports the device model (e.g. “iPhone Duo”) and a user-assigned device name to the administration.
• Admin panel: “Devices” shows device model, device name and the current app version; the version is updated with every request instead of only at registration. “Licences” shows the version next to the platform.
• Integrations: A connection with 10 consecutive failures is paused automatically and the cause is explained in the status card; resuming redelivers pending transfers.

Fixed

• App (iOS): Detail pages and settings could no longer be opened if the app was locked while a system dialog (e.g. share, camera, sign-in) was open.
• App (iOS): No more crash after changing devices. If the key for existing data is missing, the app shows “Data not readable” with “Set up again”; local backups are kept and can be exported first. If the key is only temporarily locked, it shows “Data still locked” and tries again.
• App (iPhone Duo): Title and toolbar stay visible when opening detail pages; no more empty bar during the transition.
• App (iOS): Swipe actions in lists are no longer cut off at a hard edge in landscape and on iPhone Duo.
• App (iOS): The keyboard no longer covers “Unlock” and the PIN fields.
• Admin panel: Fixed an error after sign-in for accounts without the “Edit policies” permission (affected 1.2.0).
• Admin panel: The “Help & contact” setting was not saved during setup when it was switched off.

Security and privacy

• App: If the lock screen cannot be shown, an opaque cover hides the app; no navigation is possible while the app is locked. Shortcuts, setup links and location-based auto-open wait until the app is unlocked.
• App: The crash notice at startup appears only after the lock, so no content is visible beforehand.
• App (iOS): App data is excluded from iCloud and computer backups and from device transfer. After switching iPhones, the app starts with setup; data comes back via an encrypted backup or server sync.
• Integrations: Data flows containing case data only become active after approval by another person with privacy permissions (with sign-in reconfirmation). Whoever created or last changed an interface cannot approve it; the approval applies only to the reviewed state.
• Integrations: Privacy defaults per interface (pseudonymised, final documents only, notes and confidential document types blocked). Only the privacy role may widen them, or the technical administration when the approval requirement is switched on, with renewed approval.
• Integrations: Interfaces only see cases and records within their area; deleted, restricted or marked-for-deletion data is excluded. Visibility is checked again before each delivery, and importing a configuration never widens case access.
• Integrations: Outgoing connections use HTTPS only, with optional certificate pinning and mTLS; credentials are stored encrypted and must be re-entered when a connection’s target changes.
• Integrations: Stricter verification of the FIT-Connect encryption key against the public administration PKI, including revocation checks.
• Integrations: Incoming files are checked on receipt like attachments (file type, size, file signature, virus scan); size and scope of incoming packages are limited, and failed sign-ins to the CMIS endpoint are throttled.
• Privacy: Final deletion of a case also covers copies in integration inboxes and references. Recipients of disclosures are recorded permanently (identifiers only, no case content) and appear in the data subject access package.
• Server: Updated .NET runtime (10.0.14) with security updates and updated components in the server image.

Admin panel and server

• New permissions “Manage integrations” (preassigned to technical administration and root admin) and “Review and accept integration inbox items”. Assigning and accepting inbox items additionally requires “Edit cases”. The privacy role can view the “Integrations” area read-only.
• New policy “Activate data flows with case data only after approval”, on by default and only switchable off by the privacy role.
• SCIM manages only practitioner accounts up to the “Team lead” role; new accounts get no permissions by default (alternatively the “Practitioner” role). Memberships are tracked per group, manually created team memberships are preserved, and area boundaries apply as in the panel.
• Permission management without a fixed upper limit: permissions are now stored by name. Existing permissions are carried over unchanged during the update, and rolling back to an older image remains consistent.
• Monitoring: New metrics and audit events for the integrations.
• Update: All database changes are additive. The bundled proxy templates (nginx, Caddy) need no changes. 1.3.0 apps work with admin panels from 1.1.0.

Version 1.2.0 brings automatic, signed updates for the desktop apps, a Professional subscription directly in the desktop app, an own Professional licence for staff without a licence seat on the organisation's server, and a native Windows ARM64 version. Also new are “Help & contact” in the app, desktop app and admin panel, support for the iPhone Duo and Split View, and numerous security and privacy improvements.

New

• Desktop: The desktop app for Windows, macOS and Linux checks for a new version at startup and every 12 hours after that. A notice at the top of the main window offers “Download and install” or “Later”; a manual check is available under “About Focus Family” → “Check for updates”. Without internet access the check stays silent and is repeated later.
• Desktop: Every update is digitally signed and verified after download and again immediately before installation. Installations running version 1.1 need to be updated to 1.2.0 manually once; from then on they install updates themselves.
• Desktop: On Windows the installation runs in the background and the app restarts by itself afterwards. On macOS the installer package opens and the app restarts after the update; on Linux the software manager opens. If windows with possibly unsaved changes are still open, the app asks first.
• Desktop: With a server connection, the desktop app only receives updates that match the version of the organisation's server. Matching updates are also offered when connected to servers running version 1.0 or 1.1.
• Desktop: The desktop app is no longer tied to an organisation. Free features remain usable without an account, and Professional can be subscribed to monthly or yearly directly in the desktop app (payment in the browser). The same rules as in the mobile app apply, and the subscription also works on iPhone, iPad and Android via the Focus Family ID.
• Desktop: New licence window (Settings → Licence → “Manage licence”, also reachable from the Pro explanation window via “Subscribe to Pro”) showing plan and status, where the subscription comes from, the Focus Family ID, subscribing and managing the subscription, taking over an existing Focus Family ID, and showing the recovery code behind the app lock.
• Own Professional licence on the organisation's server: if the organisation allows it, staff without an assigned licence seat can sync on iOS, Android and desktop devices with a Professional subscription they purchased themselves. Purchasing and restoring are then possible even with an active server connection, and the app links the subscription on its own. If a device is removed from the server, the own licence stays valid.
• App: Without a server connection, the licence page shows the Focus Family ID and – after Face ID, fingerprint or PIN – the recovery code with copy buttons, so the licence can be used in the desktop app, for example.
• Windows ARM64: The desktop app is now also available as a native ARM64 version. On ARM devices it replaces an existing x64 installation; updates pick the right variant automatically.
• Windows ARM64: Text recognition for scanned and imported documents uses the text recognition built into Windows. If no suitable language is installed for it, the electronic file and the scan window point this out, and documents are filed without recognised text.
• Help & contact: In the app (under “More”), in the desktop app (Settings → About) and in the admin panel, bug reports, feature requests, general enquiries and security reports can be sent directly to the vendor. This section replaces the previous security report.
• Help & contact: Before sending, the text is checked against names stored in the installation and blocked if one is found; contact details, account names, file paths and access keys are removed. A preview shows exactly what will be sent. Without internet access the text can be copied or sent by email. Case data or other app data is never transmitted.
• App: Support for the iPhone Duo and Split View on iPad. Content no longer sits under the side tab bar or toolbar, and the AI chat, trip map and Pro explanation window adapt to the actual window width.

Improved

• App: On iPhone and iPad, pages now appear in the correct layout straight away without shifting afterwards. The QR scanner's camera preview and sketches adapt correctly to the window orientation.
• App: Biometric unlock (Face ID, fingerprint) is switched on and requested whenever a PIN is set; cancelling the prompt no longer turns it off. Existing installations with a PIN and biometrics turned off are asked once after unlocking whether to enable biometrics; the answer is remembered.
• App and desktop: If the Focus Family ID was taken over on another device, “Show recovery code” no longer shows an outdated code but explains that it is no longer valid and offers “Generate new code”. After a takeover in the desktop app, the new code is shown immediately.
• App: A Professional subscription purchased outside the App Store or Google Play now shows a neutral notice on the licence page instead of “Manage subscription”. A matching warning appears when connecting to a server.
• App: When the licence identity is deleted, a Professional subscription purchased outside the store is cancelled immediately; the confirmation explains this beforehand. The app states the expected duration of the deletion, checks its progress at startup and confirms the actual completion once.
• App: With a server connection and an own Professional subscription, the licence page shows the status of the personal subscription.
• Help & contact: Every report includes a reference number as well as product version, platform and licence type, so that follow-up questions can be answered faster.

Fixed

• App: The lock screen showed the Face ID or fingerprint button and started an unlock attempt even though biometric unlock was turned off, and then reported an error immediately. The button now only appears when the setting is on and the device is ready.
• Desktop updates: On Windows the app now always restarts after installation, even if the administrator prompt was cancelled, and nothing is installed while the app is still running. On Linux, starting the installation no longer blocks the user interface.

Security and privacy

• App: MFA keys, recovery codes and the licence recovery code are copied via a protected clipboard and removed again after 60 seconds; on Windows they are excluded from clipboard history and cloud sync.
• App: The app switcher hides sensitive views such as the recovery code and MFA setup even when the privacy screen is turned off; on Android, screen protection is active while the recovery code is visible.
• App: Quick actions and links from companion apps only lead to their destination after unlocking.
• App: “Open authenticator” now only accepts authenticator links, and details provided by the server are cleaned up and shortened in the connection dialog.
• Desktop updates: The verified installer package is protected against replacement until installation has finished, responses and downloads are size-limited, and pre-release versions are only offered over encrypted connections and only by the organisation's server.
• Server images: The runtime and bundled tools have been brought up to the current security level. The shipped images no longer contain any known fixable critical or high vulnerabilities.
• A cryptography library has been updated to a version without known vulnerabilities.
• Help & contact: Reports are deleted no later than 30 days after receipt, usually as early as 10 days after they have been dealt with. The data transmitted for each type of report is described on a dedicated information page and in the privacy policy.

Admin panel and server

• New policy “Allow own Pro licence for staff without a licence seat” (default: off). The licence page marks such accounts with “Own Pro licence” and offers “Release link”; links of deleted accounts are released automatically. Changes are logged.
• New policy “Allow Help & contact in the apps” (default: on). When turned off, the section is hidden in the app and desktop app, and in the admin panel for all accounts without the “Edit policies” permission. Without a server connection the section remains available.
• New “Help & contact” page in the admin panel. Sent reports appear in the audit log with type and reference, but without their text.
• The admin panel provides connected desktop apps with update information and only offers versions that match its own version.
• Under “Downloads” there is a second Windows button for the ARM64 version.
• The update to 1.2.0 is purely additive; the admin panel and its data can be updated from any version since 1.0.0. Apps connected to older servers treat “Help & contact” as allowed.

Version 1.1.0 adds, among other things, trip recording with a GPS route, including from the Apple Watch, the case cover sheet with export and import including on-device AI, the document scanner in the electronic case file, report numbers with QR codes, ZUGFeRD e-invoices, and Turkish, Russian and Polish as additional app languages. For organisations it adds single sign-on and multiple areas per social worker.

New

• App: trip recording with “Start trip now” and “Arrived” – the app records route, distance and duration by GPS, even with the screen locked, and creates a trip with a linked travel-time entry. Distance, case, destination, purpose and note can be checked and completed on the review sheet before saving.
• App: “Review trip” and the trip view show the recorded route with departure and arrival on the system map (Apple Maps or Google Maps). The map service only loads the visible section; if no Google map service is available on Android, a route sketch is shown instead.
• Apple Watch: trips can be started and ended on the watch – without a case or with a case from today’s appointments or open cases. During the trip the watch shows elapsed time and distance; the iPhone records the route.
• iPhone: after a trip is started or ended on the watch, the app opens the running trip or “Review trip” the next time it is opened. If the Watch app is installed, the app asks once for “Always” location access so that recording also works while the app is closed.
• iPhone and Apple Watch: the Live Activity and complication show a running trip when no appointment is in progress.
• App: case cover sheet – a tabular cover page for a case as PDF and/or DOCX listing the people involved and their addresses, optionally pseudonymised and filed directly in the electronic case file.
• App: new case from cover sheet – case, people involved and addresses are taken from a file (PDF, Word, Excel, CSV, text, image) or a camera scan, optionally with local on-device AI (Pro). All detected details are confirmed in a review step before the case is created.
• App: document scanner in the electronic case file – paper documents are captured with edge detection, combined into a PDF, made searchable with on-device text recognition and filed in the chosen section, entirely offline.
• Activity reports: every exported report carries a report number, version, export time, checksum and QR code; exporting again increases the version and references the previous one.
• E-invoicing: in addition to XRechnung, a ZUGFeRD invoice can now be created (PDF/A-3 with embedded factur-x.xml, EN 16931 profile) – with the same mandatory details and the same number range.
• App and desktop: Turkish, Russian and Polish as additional user interface languages.
• App: during first-time setup, below the usual offline start, a new “Sign in to server” button connects the device directly to the organisation’s server. Name and requirements such as a mandatory app lock are then taken from the server; starting without an account remains the default.
• App and desktop: sign-in with the organisation account (single sign-on) via “Sign in with organisation account” or “Sign in with …”. SSO accounts entering email and password are automatically taken to browser sign-in; when SSO is enforced, the sign-in screens only offer this route, while PIN and biometrics remain available.
• App and desktop: when connected to a server, e-invoices use the organisation’s centrally maintained invoicing details. Invoice numbers are then unique across the organisation, even if there is no connection when the invoice is created; only accounts with the “Create e-invoices” permission can create e-invoices.
• Desktop: like the mobile app, time tracking shows “Open signatures (30 days)” with a list; the navigation item and dock icon show the count as a badge.

Improved

• Sync: if a device’s last sync is older than the server’s retention period, this no longer causes a permanent sync error. The device automatically performs a full reconciliation with the server; local, private and not yet sent content is kept.
• Sync: preparing the data to be sent is considerably faster, especially with many records.
• Consistent product name “Focus Family” in the file names of data exports, backups, encrypted exports and diagnostics, as well as in calendar files and display texts. Existing installations, paths and data formats remain unchanged.
• Android: before the first location request, a notice explains what location is used for during trip recording; after a refusal the app offers “Open settings”.
• iOS: the location usage explanation now correctly describes recording while the screen is off.
• Watch: if the iPhone app has not been set up yet, the watch shows “Finish setup in the iPhone app”.

Fixed

• Browser sign-in: after a password change at first sign-in, a password sign-in in the browser or two-factor confirmation, the sign-in did not reach the app or desktop. Returning to the app now works reliably.
• Activity report CSV export: the column headers are back in the first line; the identification block (number, version, checksum) follows as a separate block at the end of the file, so imports into Excel and billing systems remain readable.
• macOS: the installer removes the version 1.0.0 application bundles (“Apple Silicon.app” or “Intel.app”) from the Applications folder; data and keys are not touched.
• PDF import: headers and footers are only removed from the top and bottom of the page; details of people that differ only in digits are no longer lost.
• App: a QR code with a server address but no enrolment ID now opens server sign-in directly with the address pre-filled.

Security and privacy

• Server: for records whose processing is restricted, the associated attachments are now also blocked for devices.
• App and desktop: open sync conflicts are stored encrypted on the device; existing entries are converted on first opening and the old data is securely overwritten. Conflict resolution ensures that private and unsent content is not lost.
• App and desktop: names of contact cards and institutions are no longer stored in an unencrypted search index; existing legacy values are removed. Backups from 1.1.0 can therefore no longer be restored in 1.0.0.
• App: when “Open case at location” is switched off, any running location lookup stops immediately and late results are discarded.
• Android: unneeded permissions brought in by third-party libraries (phone state, storage access, advertising ID) have been removed. Trip recording still works without background location access.
• iOS: the privacy manifest declares the use of precise location for app functionality (no tracking).
• Single sign-on: first linking of an SSO account and automatically created accounts require an email address confirmed by the identity provider – or a one-time approval in the admin panel valid for 24 hours. A normal SSO sign-in no longer counts as re-authentication for security-relevant actions.
• Admin panel: area-bound specialist admins can neither see nor change accounts with technical administration permissions.

Admin panel and server

• Single sign-on via OpenID Connect or SAML 2.0 (e.g. Entra ID, AD FS, Keycloak, Okta, Google Workspace) on the new “Single sign-on” page with redirect addresses, connection test, SP metadata and certificate. The page only shows the fields of the selected protocol; secrets and keys are stored encrypted. Works on intranets too, as only browser redirects are needed.
• SSO accounts can be created in advance or created automatically at first sign-in without permissions or licence; domain and group restrictions and “Enforce SSO” can be configured. Accounts are marked “SSO” in the user list and licensing, and switching between local and SSO is done in the user menu. Local system administration accounts remain as emergency access to the admin panel.
• New system permission for managing SSO; on update it is granted to all system administration accounts.
• Multiple areas per social worker with one primary area: area admins of every assigned area see the social worker and their cases. In area mode, social workers without an admin role are automatically responsible for their own areas.
• Areas page: lists all social workers and offers the bulk actions “Add to area” and “Remove from area”. Teams can be assigned to another area; members receive that area in addition.
• User management: areas and primary area can be changed under “Edit”; areas appear in the user list as a second line below the name. New “Manage areas” permission, granted to all specialist admins on update.
• New “Invoice issuer” page for the organisation’s central invoicing details (address, contact, tax number or VAT ID, bank details with IBAN check, invoice number prefix, payment term) with the new permissions “Manage invoicing details” and “Create e-invoices”. On update, both permissions are granted to all accounts with the specialist admin role.
• Organisations can specify a billing basis (rate per professional service hour, billing increment and rounding, mileage rate, share of travel time, VAT) that connected devices adopt. Rounding and VAT are chosen from selection lists, amounts are shown in the number format of the interface language and can be entered with comma or point.
• Managed settings with multiple areas: a fixed order applies – primary area before other own areas before areas via teams.
• Case history: clearer; entries without a name show their category and, for appointments, time entries and trips, the date; purely technical entries are hidden.
• Archive for activity reports with report number on the server.
• The admin panel makes use of wide screens: tables and lists grow with the window, and from a window width of 1800 px cards are arranged in two columns. On laptops, tablets and phones the layout stays single-column.
• New “Show beta versions for updates” switch in the policies (off by default, system administration only).
• Update from the admin panel: the panel downloads the image matching its own processor architecture (x64 or ARM64). If no matching image is available, the update is shown as manual-only.
• Operation on intranets or VPNs: an outgoing proxy can be set in the environment file and applies to the licence server, version check, update download and virus scanner updates. The operations manual describes firewall rules, DNS/TLS and VPN variants.
• Password change at first sign-in: requirements are checked before submitting; on an error all entries are kept and the focus moves to the affected field.
• Fixed: a strong password suggested by iOS stayed hidden in the password field despite toggling, or was shown in the wrong text colour; showing and hiding now works reliably.
• The server update file is now called focusfamily-server-<version>-<architecture>.tar.gz. Image name, Compose files, paths, database and environment file are unchanged; all schema changes are applied automatically during the update.

First public release of Focus Family: case documentation for child and youth welfare on iPhone, iPad, Apple Watch, Android, macOS, Windows and Linux – fully usable offline and encrypted. Organisations run their own server with an admin panel, team sync and central licence management.

Feature scope

• App: Focus Family for iPhone, iPad, Apple Watch and Android phones and tablets; requires iOS/iPadOS 17, watchOS 10 or Android 9 or later.
• Desktop: dedicated apps for macOS (Apple silicon and Intel), Windows (MSI) and Linux (.deb for Ubuntu, Debian and Mint, .rpm for Fedora and the RHEL family, each for x64 and ARM64); usable without an organisation server.
• Works fully offline: all features are available without a network; data and licences sync as soon as a connection is available.
• Today: daily overview with appointments, tasks, overdue items and the “Open signatures” tile.
• Cases: case file with participants, households, youth office caseworker, hour quota and support measure; case pickers sorted alphabetically by case name.
• Goals, agreements and roadmap: goals with predecessors, review points and help plan meetings; the roadmap shows the timeline, goal tracks, review points and hours used against the quota.
• Planning: appointments and tasks in one view (overview, appointments, tasks); overdue items are flagged on the same day.
• Recurring appointments: series that work offline; edit or delete just this appointment, this and following, or the whole series.
• Prepare, conduct and follow up appointments; sync with the device calendar.
• Protection of records: appointments with a signature, time entry or documentation cannot be deleted by accident.
• Scheduling with clients (Pro): import shared calendars from Google, iCloud, Nextcloud or Outlook by file or link, record fixed commitments such as school or therapy, and get suggestions for times when everyone is free.
• Documentation: several documentation types per case, with text snippets (Pro) and dictation via speech recognition.
• Media in the case: photos, videos, audio memos, sketches and handwriting; entries can be kept private.
• E-file: all documents of a case in one place, with document import, text recognition (macOS and Windows) and signatures on documents; fill in PDF forms (Pro).
• Child protection under § 8a SGB VIII (free): guided six-step risk assessment with completeness check, follow-up tasks and an emergency call notice for acute danger.
• Deadline radar (free): end of approval, upcoming help plan meetings, due reviews and hour quotas at a glance, on “Today” and in the case view.
• Deadline reminders (Pro): notifications 28 and 7 days before the end of approval and 7 days and 1 day before the help plan meeting.
• Report assistant (Pro): structured development report with source references, optionally supported by the offline AI.
• Structure dictation (Pro): a dictation is split into sections; detected agreements and next steps are created as agreements and tasks after review.
• Genogram and network map (Pro), exportable as PDF, anonymised if desired.
• Agreements in easy-to-read language (Pro) and an anonymised case vignette for supervision (Pro).
• AI assistant on the device: Apple Intelligence on iPhone and iPad, local models on Android, macOS, Windows and Linux; no case content goes to a cloud.
• Time tracking as its own section: time entries with activity, contact type (client contact or indirect) and suggested wording; turn an appointment into a time entry with one tap.
• Activity records per case or per worker for a month, a year or the whole period, with quota balance and signature rate; export as PDF, Word, Excel or CSV.
• Countersignature: clients can voluntarily sign appointments and time entries on the device; a refusal is recorded.
• Invoicing: invoice preparation per cost bearer and e-invoices in XRechnung 3.0 format (Pro) with sequential invoice numbers and routing ID (Leitweg-ID).
• Practice overview (Pro): monthly figures with revenue, comparison with the previous month, documentation share, open signatures and quota warnings.
• Export: case records as PDF, Word, Excel, CSV, HTML or text, also anonymised.
• Share contact details (Pro): maintain your own contact card with availability times and pass it on to families as a vCard, QR code, email, message or text; also the card of the current substitute.
• Substitution: hand over cases to colleagues for a limited time, starting and ending automatically.
• Apple Watch: today overview, list of overdue tasks and the own contact card as a QR code to scan; appointments can be started and ended on the watch and short notes recorded, complications show the next appointment on the watch face.
• iPhone and Android: quick actions on the app icon; on the iPhone, a Live Activity and the Dynamic Island show the running appointment.
• Backup: encrypted, password-protected backups; one backup per week on the device in the free version, unlimited with Pro and with a freely chosen storage location.
• Free and Pro: core features are free; Pro features carry a badge and explain their benefit before purchase.
• Server and team: connect to the organisation’s server via QR code; cases, appointments, documents and files sync within the team, and conflicts can be resolved individually.
• Languages: German, English, Spanish and French.
• Accessibility: screen reader labels on all icon buttons in the app and desktop app.

Security and privacy

• Several rounds of security audits completed before release.
• Encryption of all case data and files on the device (AES-256-GCM); keys in the operating system’s secure storage, encrypted file attachments on the server as well.
• App lock with PIN (at least 6 digits) or biometrics; increasing wait time after three failed attempts, unlocking also possible via server sign-in.
• Local key rotation: the encryption of data on the device can be renewed.
• Complete deletion: “Delete case” and “Delete all data” also remove all related files and device backups.
• Crash reports contain no case content; sending them to the server can be switched off in the settings.
• No tracking; privacy policy and end user licence agreement (EULA) accessible directly from the app and desktop app.
• Security reports from the app, desktop app and admin panel: the report is created locally, shown in full and only leaves the device after explicit confirmation; personal data is removed.
• Passkey sign-in (passwordless) and two-factor authentication for organisation accounts.
• Tamper-evident audit log: entries are chained together and can be checked for completeness in the admin panel.

Admin panel and server

• Self-hosted server for organisations with a browser-based admin panel; runs on Docker in your own data centre.
• Manage users, teams and case assignment; fine-grained permissions with separate roles for professional, technical and data protection administration; team leads can edit entries within their scope.
• Set up the apps via QR code; view and remove devices and reset a device’s PIN lock.
• Define policies and managed settings centrally, e.g. mandatory two-factor authentication or passkeys as default for new accounts.
• View and edit cases, participants, planning, goals and roadmap, time tracking and calendars and commitments per case in the panel.
• Activity records in the panel: filter by case, worker and period, signatures with verification, export and draft invoice; past months and years can be closed and only reopened with a reason.
• Catalogues and templates: maintain institutions, support measures, activity types, text snippets as well as contact cards, organisation contact details and substitutions centrally.
• Data protection section: data subject requests under Art. 15 to 21 GDPR handled as cases with deadlines, identity check, review, four-eyes approval and an encrypted disclosure package; several data subjects per request.
• GDPR documents: data processing agreement template, technical and organisational measures (TOMs) and deletion concept generated from the organisation’s privacy profile.
• Deletion requests, security audit and crash reports with retention periods in the panel.
• One-click system update: server and admin panel are updated from within the panel, with a database backup beforehand and automatic rollback on errors.
• Monitoring interface for Prometheus and Uptime Kuma, with access key and optional IP allowlist.
• Desktop installers for macOS, Windows and Linux available for download directly in the admin panel; handbooks and ISO documents available for download as well.
• Licensing: the organisation’s seats are managed on the server; without an online check the apps remind from day 3 and only lock from day 10, without touching any data.