Last updated: October 4, 2026
Contact: venna7899@gmail.com
Lock-In AI is a Chrome extension that helps you stay focused. It covers websites that are too engaging, or that don't relate to your goal, with a calming break screen. This policy explains what information the extension handles, where it goes, and the choices you have.
In short: your Gemini API key and your goal stay on your device. Your sign-in details and your radar chart scores are stored with our backend provider, Supabase. If you have a goal set, each page's title, description and address path are sent to Google's Gemini API, using your own key, to check whether the page fits your goal. Nothing is sold, shared for advertising, or tracked.
When you log in using Google Authentication, we collect your Google user ID and email address via Supabase Auth to create and secure your account. The data is only used to create a new user profile, manage sessions, save data, and allow for easy sign-in. The email address is stored securely using our backend infrastructure (Supabase), however it is never accessed for any other means than authentication into Lock-In AI extension. We don't store plain-text password at all.
Google may also share your name and profile picture address as part of sign-in, and Supabase keeps them with your account. The extension only shows your email address in its window and does not use the other details for anything else. Your Google password is entered on Google's own sign-in page and is never seen by us or by the extension.
Gemini API key. The AI features (rating goals, generating goals, and checking whether a page fits your goal) run on your own Google Gemini API key, which you paste in after signing in. The key is stored only on your device, in the extension's local storage. It is never sent to our servers or to Supabase, and we can never see it. The only place it is sent is Google's Gemini API, with each request, so that Google can authorize it. The key is deleted from your device every time you log out, and you can replace it at any time in Settings.
Lock-In AI only looks at the pages you visit after you have signed in, added your Gemini key, and tapped Allow site access and approved Chrome's permission prompt. You can turn site access off at any time in the extension's Settings or at chrome://extensions, and the extension stops reading pages immediately.
Engagement Bar (measured on your device). While Engagement Bar mode is running, the extension measures how long you actively use a page, how far you scroll, how many times you click or tap, whether new content keeps loading as you scroll, and whether a video is playing (and whether it is phone-shaped, like Shorts or Reels). These are turned into a score for each site, inside your browser. We record that a key or button was pressed, never which key, and never what you type. These measurements are not sent to our servers or to anyone else.
Goal mode (sent to Google Gemini). While you have a goal set, each time you open or move to a new page the extension sends the following to Google's Gemini API, using your own key, and asks whether the page fits your goal:
the website's name, and the page's address path (the part after "?" and "#" is removed),
the page's title and its short meta description (up to 240 characters),
your goal's title, description and related topics.
Gemini answers yes or no. If you have no goal, nothing is sent to Gemini for pages you visit. The text you type into the goal templates, when you describe or generate a goal, is also sent to Gemini to create the description and difficulty rating.
Google handles this information under its own terms and privacy policy, not ours. Depending on the plan your API key is on, Google's terms may allow it to use content submitted through the API to improve its products. Please check Google's Gemini API terms for the plan you use.
Temporary storage on your device. To avoid asking Gemini about the same page twice, and to keep a block in place if you reload, the extension keeps a short-lived list in your browser's session storage: recently judged page addresses and titles with a yes or no, each site's engagement score, and which sites are currently locked. Page decisions expire after about 30 minutes. This list stays on your device, is cleared when you close the browser or log out, and is never uploaded.
What we do not collect. The extension does not read or collect the text or contents of pages, form entries, passwords, messages, cookies, what you type, screenshots, or a history of the sites you visit. It does not run in Incognito windows unless you allow that in Chrome.
Stored in our database (Supabase):
your user ID,
your radar chart scores for Focus, Consistency, Ambition and Achievement (each 0 to 100),
the difficulty rating (0 to 100) of your most recent goal,
a few bookkeeping values needed to calculate Consistency: the date progress was last updated, a snapshot of your earlier scores, and the number of days in a row without improvement,
creation and update timestamps.
Each user can only read and change their own row (row level security). Data is sent over encrypted HTTPS connections.
Stored only on your device:
your current goal (title, description, difficulty, related topics and aim),
your settings (block shape, chosen puzzles, Engagement Bar limit and whether it is running),
your sign-in session and your Gemini API key,
a local copy of your radar scores.
Your goal text, the sites you visit, how long you spend on them, and your Gemini API key are not stored in our database.
Logging out deletes your Gemini API key, sign-in session and local copy of your scores from your device. Your current goal and settings stay on the device until you delete the goal or uninstall the extension.
We use the information described above only to provide Lock-In AI's features: signing you in, deciding when to cover a page, rating and describing your goals, and showing your radar chart. We do not sell your data, use it for advertising or profiling, use it to decide credit or lending, or use it for anything unrelated to the extension's purpose. We do not use analytics or tracking tools, and the extension does not load remotely hosted code.
Supabase hosts our sign-in and database service.
Google provides Google sign-in and the Gemini API that you connect with your own key.
We share information with no one else, except where the law requires it.
The use of information received from Google APIs and from your browser will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to provide and improve the single purpose described above, do not transfer it to others except as described in this policy, and do not allow humans to read it except with your consent, for security, to comply with law, or for internal operations.
Your account and radar scores stay in our database until you ask us to delete them. To delete them, email us at the address above from the email you signed in with, and we will delete your account and all data tied to it within 30 days. Data stored on your device is removed when you log out (key and session) or uninstall the extension (everything).
Lock-In AI is not directed to children under 13, and we do not knowingly collect information from them.
If we change this policy, we will update the date at the top. If a change is significant, we will also tell you in the extension.