Privacy Policy

FocusFlow - Modern Pomodoro Timer Chrome Extension
Effective Date: July 22, 2025 | Last Updated: July 22, 2025

Overview

Privacy-First Design: FocusFlow is built with privacy as our top priority. All your data stays on your device - we never collect, transmit, or store your personal information on external servers.

FocusFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our Chrome extension handles your information when you use our Pomodoro timer application.

✅ 100% Local Storage - No External Data Collection

Information We Collect

✅ Data Stored Locally on Your Device

FocusFlow stores all data locally using your browser's localStorage. We store:

Data Type Purpose Examples
Timer Settings Remember your preferences 25-minute focus sessions, 5-minute breaks, sound preferences
Task Data Manage your daily tasks Task descriptions, completion status, creation dates
Usage Statistics Track your productivity Session counts, focus time, productivity streaks
Session State Resume timer after browser restart Current timer mode, remaining time

❌ Data We Do NOT Collect

  • Personal Information: No names, emails, or contact details
  • Browsing History: We don't track your web activities
  • Account Data: No user accounts or login credentials
  • External Analytics: No Google Analytics or tracking services
  • Device Information: No hardware or system details

How We Use Your Information

Your data is used exclusively for app functionality:

  • Timer Functionality: Maintaining timer state across browser sessions
  • Personal Productivity: Displaying your focus statistics and progress
  • Task Management: Storing and managing your daily task list
  • Settings Persistence: Remembering your preferred configurations

No Third-Party Sharing: Your data is never shared, sold, or transmitted to any external parties, services, or analytics platforms.

Data Storage & Security

🔒 Local Storage Architecture

All data is stored securely within your browser:

  • Uses Chrome's localStorage API for data persistence
  • Data remains encrypted within browser's security sandbox
  • No external servers, databases, or cloud storage
  • Data is isolated per browser profile

🛡️ Security Measures

🔐 Browser-Level Security
  • Protected by Chrome's built-in security protocols
  • Sandboxed execution environment
  • No network communication endpoints
  • Minimal permission model

📊 Data Format Example

// Example of data stored locally in your browser { "settings": { "focusTime": 25, "shortBreak": 5, "soundEnabled": true, "selectedSound": "bell" }, "tasks": [ { "id": 1642693200000, "text": "Complete project documentation", "completed": false, "createdAt": "2025-07-22T13:13:20.000Z" } ], "stats": { "totalSessions": 15, "dailyCount": 3, "totalFocusTime": 375, "currentStreak": 5 } }

Chrome Permissions Explained

Our extension requests minimal permissions for core functionality:

Permission Purpose Data Access
storage Save your settings and tasks locally Local browser storage only
activeTab Display floating timer on web pages Current tab URL only (for widget display)
tabs Update timer across browser tabs Tab management only
alarms Keep timer running when popup is closed No data access
notifications Show session completion alerts No data access

No Broad Permissions: We don't request access to your browsing history, bookmarks, or other sensitive browser data.

Data Retention & Deletion

📅 Automatic Data Management

  • Persistence: Data remains until you choose to delete it
  • Daily Reset: Daily statistics automatically reset each day
  • No Expiration: Your tasks and settings don't expire

🗑️ How to Delete Your Data

You have complete control over data deletion:

  1. Remove Extension: Uninstall FocusFlow from Chrome
  2. Clear Browser Data: Use Chrome's "Clear browsing data" feature
  3. Developer Tools: Manually clear localStorage via F12 console

Your Rights & Control

🎛️ Complete Data Control

Since all data is stored locally, you have absolute control over your information.

Access Rights

  • View all your data through the extension interface
  • Access statistics, tasks, and settings anytime
  • No hidden or encrypted data

Modification Rights

  • Edit or delete tasks individually
  • Modify all settings and preferences
  • Reset statistics if desired

Portability Considerations

  • Currently no export/import functionality
  • Data is browser-specific and profile-specific
  • Future updates may include backup features

Children's Privacy

FocusFlow is safe for users of all ages:

  • No personal information collection from any users
  • No age verification or parental consent required
  • Educational focus on productivity and time management
  • No social features or communication capabilities

International Use & Compliance

🌍 Global Availability

  • Works worldwide without geographic restrictions
  • No server-based processing
  • No cross-border data transfers

📋 GDPR Compliance

✅ GDPR Compliant by Design
  • No personal data collection eliminates most GDPR requirements
  • Local storage ensures data sovereignty
  • Users maintain complete control over information

Privacy Policy Updates

We may update this policy to reflect:

  • New extension features or functionality
  • Changes in Chrome extension policies
  • Legal or regulatory requirements

Notification: Updates will be posted within the extension and highlighted in update notes. Continued use constitutes acceptance of changes.

Contact Information

📧 Get Support

  • Chrome Web Store: Leave reviews or feedback
  • Extension Support: Use Chrome Web Store support channels
  • Documentation: Check our FAQ and help resources

🔍 Privacy Questions

For privacy-related inquiries:

  1. Review this privacy policy thoroughly
  2. Check Chrome Web Store listing for updates
  3. Submit feedback through official channels

Technical Implementation

🔧 Privacy by Design

  • Local-First Architecture: No external dependencies
  • Minimal Permissions: Only essential Chrome APIs
  • No Network Calls: Zero external communication
  • Transparent Code: Open development practices

🛠️ Security Implementation

  • Content Security Policy (CSP) compliance
  • Manifest V3 security requirements
  • Sandboxed execution environment
  • No inline scripts or unsafe evaluations