privacy policy

# NoDopa AI Privacy Policy

Effective date: July 13, 2026

NoDopa AI is a user-controlled Chrome extension that helps individuals stay disciplined online by blocking distracting websites during self-selected focus sessions. It is not spyware, parental control software, employee monitoring software, or hidden tracking software. Users install and control the extension themselves.

## What NoDopa AI does

NoDopa AI protects only the Chrome browser profile where it is installed. It cannot control other browsers, mobile apps, other devices, uninstalling the extension, or another person's activity.

## Data stored locally

Core features use Chrome local storage. Local data may include settings, blocking and allowance rules, active and completed focus sessions, local progress, Learning Queue items, Focus Notes, Later List items, saved overrides, and cached classification decisions. Local blocking rules work locally.

Users can export or delete local data from Settings. Removing the extension also removes extension-managed local storage according to Chrome's behavior.

## Account and optional sync data

If a user signs in, NoDopa AI may process an email address, authentication provider, account identifier, entitlement status, and selected focus data used for account restore or sync. Authentication is provided through Supabase Auth, including optional Google sign-in. NoDopa AI does not receive the user's Google password.

## Hosted Smart Focus Checks

Hosted Smart Focus Checks are a paid Pro feature. They do not run for guests or Free users. When a Pro user enables the feature, NoDopa AI may send limited current-page context needed for classification, such as the current URL or domain, page title, short visible text snippet, headings, metadata, YouTube video title, channel, and the user's stated focus goal.

NoDopa AI does not intentionally send passwords, cookies, private form entries, screenshots, full browsing history, private messages, comments, transcripts, or complete page contents for Smart Focus Checks. Provider credentials stay on the server and are not stored in the extension.

Successful hosted checks may be logged with an input hash, limited target metadata, classification result, provider/model metadata, and usage count for allowance enforcement, abuse prevention, support, and reliability. Server cache entries may be retained temporarily to avoid repeat provider calls.

## Payments

Card payments are handled by Lemon Squeezy, the merchant of record. NoDopa AI does not store card numbers or card details. Lemon Squeezy processes payment, tax, invoices, refunds, and subscription-management data under its own policies. NoDopa AI stores only the identifiers and subscription status needed to provide Pro access.

## Chrome permissions and browsing access

NoDopa AI requests broad website access because users can choose arbitrary websites to block and because YouTube cleanup and optional Pro classification operate on supported pages. The extension checks current URLs and limited page context to provide user-requested protection. NoDopa AI does not use this access to create or sell a passive browsing-history profile.

## Sharing and sale

NoDopa AI does not sell personal data, use it for advertising, determine creditworthiness, or provide it to employers, parents, schools, or other third parties to observe a person's activity. Data is shared only with service providers needed to operate user-requested features, including Chrome, Supabase, AI providers used by the hosted service, and Lemon Squeezy for payments, or when legally required.

## Security and retention

NoDopa AI uses signed-in user sessions, row-level database security, server-only payment and provider credentials, signed webhook verification, and server-side entitlement enforcement. No internet service can promise absolute security.

Local data remains until the user deletes it or removes the extension. Account, billing, support, and fraud-prevention records may be retained while an account is active and for a reasonable period afterward where needed for legal, tax, security, dispute, and accounting obligations. Cached AI decisions expire according to service configuration.

## User choices and deletion

Users can keep using local features without an account. Users can disable Smart Focus Checks, delete local data in Settings, cancel Pro through the Lemon Squeezy portal, and request deletion of synced account data by contacting `rnehra824@gmail.com`.

## Individual use and minors

NoDopa AI is intended for individuals managing their own focus. It must not be installed or used secretly to observe another person's activity. A person purchasing a subscription must be legally able to enter the subscription agreement or have authorization from a parent or legal guardian.

## Changes

Material changes will be reflected by updating this page's effective date. Continued use after a change means the updated policy applies where permitted by law.

## Contact

Privacy and data requests: `rnehra824@gmail.com`