FlowRank ("we", "our", or "the extension") is a Chrome browser extension that helps
users track focus sessions, habits, and productivity progress. This policy explains
what data we collect, how we use it, and your rights.
We do not sell your data. We do not share it with advertisers. We collect only what
is necessary to run the app.
1. What We Collect
When you create an account and use FlowRank, we collect:
Email address — used for authentication via Google Sign-In or email/password.
Display name / username — shown on your profile and leaderboard.
Focus session data — session duration, mode (timer/Pomodoro), XP earned, session name, and any visited sites flagged as distracting during strict mode.
Habit data — habit names, completion history, streaks, and XP earned.
XP and rank progress — total XP, weekly XP, current rank, streak count.
Friend relationships — UIDs of users you've added as friends via invite code.
Challenge data — focus challenges created between you and friends, including duration, wager, and outcome.
Subscription status — whether you have a Pro plan (monthly, annual, or lifetime) and when it expires. This is set by our payment processor (Lemon Squeezy) via a secure webhook.
We also store the following locally on your device (not sent to our servers):
Timer and Pomodoro preferences (duration, round count)
Sound and notification settings
List of distracting sites you've configured
Session log for the chart (timestamps and durations only)
2. How We Use Your Data
To authenticate you and display your profile
To calculate and display your XP, rank, and streak
To show your activity feed and sessions chart
To power the friends leaderboard and challenge system
To verify your Pro subscription status
We do not use your data for advertising, profiling, or any purpose beyond operating the extension.
3. Who Has Access to Your Data
Your data is stored in Google Firebase Firestore, a cloud database hosted by Google. It is protected by Firestore security rules that restrict access so each user can only modify their own data.
Payments are processed by Lemon Squeezy. We do not store your payment
card details — these are handled entirely by Lemon Squeezy. Upon successful payment,
Lemon Squeezy notifies our server, which updates your subscription status in Firestore.
No other third parties have access to your data.
4. Browser Permissions
FlowRank requests the following Chrome permissions:
storage — saves your settings and session log locally on your device.
alarms — triggers timer and Pomodoro end events in the background.
tabs / activeTab — reads the current tab URL during a focus session to detect if you visit a distracting site you've blocked.
identity — enables Google Sign-In via Chrome's identity API.
notifications — shows a browser notification when a session ends.
offscreen — plays a sound when a session ends (audio cannot be played directly from a service worker).
host_permissions (<all_urls>) — monitors the current URL during strict focus mode only. No browsing history is stored or transmitted.
5. Data Retention
Your data is retained as long as your account exists. Activity feed entries older than
365 days may be pruned automatically. Local storage data (settings, session log) is
stored on your device until you uninstall the extension or clear it manually.
6. Your Rights
You have the right to:
Access your data — it is visible directly in the extension UI.
Delete your account and all associated data — email us at the address below and we will permanently delete your Firestore records within 30 days.
Export your data — contact us and we can provide a JSON export of your profile and activity.
7. Children's Privacy
FlowRank is not directed at children under 13. We do not knowingly collect personal
information from children under 13. If you believe a child has created an account,
please contact us and we will delete it.
8. Changes to This Policy
We may update this policy as the extension evolves. The "last updated" date at the top
will reflect any changes. Continued use of FlowRank after changes constitutes acceptance
of the updated policy.