Privacy Policy

Privacy at a Glance

Brain Rest is built privacy-first. Here is the short version:

• Local first. Your data stays on your device by default.
• Encrypted. Optional cloud sync uses secure encryption.
• No tracking. We don't track or sell your browsing data.
• You control it. Export, delete, or modify your data anytime.

What We Collect

Browsing activity

• Time spent: Duration on each website.
• Domain names: Websites you visit (not full URLs).
• Session times: Start and end of browsing sessions.
• Activity status: Active or idle detection.

Account information (optional)

• Email address: For cloud sync and account recovery.
• Display name: Your chosen profile name.

What we never collect: passwords, personal files, keystrokes, or sensitive form data.

How We Use Your Data

• Analytics & insights: Generate personal productivity reports and usage patterns visible only to you.
• Smart notifications: Send break reminders and limit alerts based on your configured preferences.
• Website blocking: Enforce your self-imposed restrictions on distracting websites.
• Cross-device sync: Optionally synchronize settings and data across your devices.

Data Storage & Security

Local storage (default)

• Data never leaves your device.
• Stored in Chrome's secure storage API.
• Automatically cleared if the extension is uninstalled.
• No internet connection required.

Cloud sync (optional, opt-in)

• End-to-end encryption for synced data.
• Hosted on secure Supabase infrastructure.
• HTTPS/TLS for all data transfers.
• Can be disabled anytime.

Security measures

• Encrypted at rest.
• Secure authentication.
• Regular security updates.
• No third-party access.

Your Rights & Controls

• Export your data: Download all your data in JSON or CSV format at any time.
• Delete your data: Permanently remove all or specific data from our systems.
• Modify settings: Change privacy preferences and data collection settings.
• Access your data: View all information we have about your browsing habits.

You have complete control over your data. We respect your choices and make it easy to exercise your privacy rights.

Third Parties & Sharing

We never sell your data. Your browsing data is never sold, rented, or traded to third parties.

Limited service providers

Supabase (optional): Cloud infrastructure for data synchronization.

• Only if you enable cloud sync.
• SOC 2 Type II certified.
• GDPR compliant.
• Data encrypted in transit and at rest.

Legal disclosure

We may disclose information only if required by law, such as:

• Valid court orders or subpoenas.
• To protect our legal rights.
• To prevent harm or illegal activities.
• With your explicit consent.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons.

How we'll notify you

• In-extension notification: A banner will appear in the extension.
• Email (if registered): We'll send updates to your registered email.
• Update date: The "Last updated" date at the top will change.

Version history

• January 2025 — v1.0.0: Initial privacy policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out.