Privacy Policy

1. Your tasks, and optional sync

NoRush saves your tasks, small steps, notes, reminders, focus history, cards, achievements and settings in your browser's own storage on your device. When you are not signed in, or when sync is switched off, this data stays on your device. It is not uploaded and is not linked to an account.

Sync turns on when you sign in. The sign-in window says so before you continue, and you can turn it off at any time in Settings > Account. When it is on:

• A copy of your tasks, steps, notes, cards, achievements, daily totals, settings and the state of your day (focus timer, closed day, Meeting Mode) is stored with your account at our account provider, Supabase, so your other devices can load it.
• It is sent over an encrypted connection and stored encrypted. Each account can only reach its own copy.
• We keep it only to send it back to your devices. We do not use it or share it.
• You can turn sync off at any time. "Stop and delete the online copy" removes the copy and leaves your data on your device.

A few small things are also kept on your device only: your light or dark theme choice and, if you sign in, the sign-in session that keeps you logged in.

If you remove the extension, your browser deletes all of this. You can export a backup, import one, or erase everything at any time from Settings > Your data.

2. The free trial

NoRush is free for 7 days with every feature included. The trial starts by itself the first time NoRush runs. It does not need an account, an email address or a payment card, and it sends nothing to us.

To keep the trial fair, NoRush remembers the date it started. That one date is saved on your device, including as a small cookie in your browser. The cookie holds only the date, contains no personal information, and is never sent to any website. If you sign in, the date is also saved with your account, so the same free week applies on every computer.

When the trial ends, your tasks stay saved on your device and you can still download them.

3. Accounts

You only need an account to buy a plan, or to use a plan you bought on another computer. You can sign in two ways:

• Continue with Google: Google handles the sign-in in its own window and shares your email address, your name and your profile picture address with us. We never see your Google password.
• Email and password: you choose a password and confirm your email address. Your password is stored only in scrambled (hashed) form. We cannot read it.

Your account is stored with our account provider, Supabase. It contains:

• your email address and a random account ID,
• how you signed in (Google or email), and the basic profile details Google shares if you used Google,
• the times your account was created and last used,
• the date your free trial started.

We use your email address to sign you in, to link your purchase to you, and to send essential account messages such as confirming your email address or resetting your password. We do not send marketing email unless you ask for it.

4. Plans and payments

Paid plans are sold through Gumroad, which is the seller of record. This means Gumroad takes the payment, handles taxes and sends your receipt, under its own privacy policy. We may add Dodo Payments as a second payment provider in future, on the same terms.

• The checkout: the payment form is shown in a panel inside NoRush, or in a browser tab. Either way it is Gumroad's own form, in a frame that NoRush cannot read. We never receive or store your card number, security code or other payment details.
• Linking your purchase: a checkout opened from inside NoRush carries your NoRush account ID, so Gumroad can tell us which account paid. A checkout opened from this website is matched by the email address you enter.
• What Gumroad tells us: that a purchase happened, which plan it is (monthly, yearly or lifetime), whether it is active, cancelled, refunded or ended, the related dates, a purchase reference, and the email address used at checkout.
• Checking your plan: when you sign in, press "Check my plan", and from time to time while you use NoRush, the extension asks our server whether your plan is active. Our server may ask Gumroad whether there is a purchase for your account's email address. This check never includes your tasks or anything you write in NoRush.

We keep a small record of your plan with Supabase: the payment provider, the purchase reference, the plan, its status and dates, and the checkout email address.

5. What is stored where

6. What NoRush does not do

• It does not read, collect or store the content of the websites you visit.
• It does not keep or send your browsing history.
• It does not use advertising, ad trackers, analytics or fingerprinting.
• It does not sell, rent or trade your personal information.
• It does not use your information to train AI models.

7. Why NoRush asks for its permissions

• Access to websites: to show the small floating reminder bubble and the command bar on the pages you visit, and to recognize when a page is a video call so Meeting Mode can hide your tasks. Page content is not read or saved.
• Tabs: to notice distracting sites during a focus session, to recognize meeting pages, and to notice when a sign-in window has finished. Only the page address is used, on your device.
• Notifications and alarms: for your reminders, focus timers and the end of your work day.
• Storage: to save your tasks and settings on your device.
• Cookies: only to save the date your free trial started, so that reinstalling NoRush does not restart it. NoRush does not read or change any website's cookies.
• Identity: to give the sign-in window a safe address to return to when you sign in. It is not used to read your browser profile.
• Context menu, scripting and offscreen: for "Add to NoRush" on right-click, adding the bubble to tabs that were already open, and playing optional background sounds (generated on your device, nothing is downloaded or sent).

8. Other services NoRush uses

These are the only services NoRush connects to. None of them receives your tasks or anything you write in NoRush, with one exception: Supabase stores your synced copy while you are signed in with sync on.

• Supabase (accounts, plan records and synced data): only if you sign in. Described in sections 1, 3 and 4.
• Google sign-in: only if you choose "Continue with Google". Described in section 3.
• Gumroad (payments): only if you open the checkout or buy a plan. Described in section 4.
• An email delivery service: only to send essential account emails, such as confirming your address or resetting your password. It receives your email address and the message.
• Weather in Meeting Mode (Open-Meteo): only if you add a city or choose "Use my location". The city name, or approximate coordinates, is sent to Open-Meteo to look up the weather.
• Heading font (Google Fonts): NoRush's pages load a typeface from Google Fonts. As with any website that uses web fonts, your browser makes a standard request to Google for the font file. No NoRush data is included.
• Breaking tasks into steps: uses the AI built into your browser, which runs on your own device, when available. Your task text is not sent to us or to any online AI service.

These providers may process information in countries other than your own. Like any online service, they also see technical details needed to deliver a request, such as your IP address.

9. This website

This website (www.getnorush.com) is separate from the extension and collects very little:

• No cookies, no analytics and no tracking. There are no advertising or social media scripts.
• Your light or dark choice is remembered in your own browser. It is not sent to us.
• The heading font loads from Google Fonts, as described in section 8.
• Our hosting provider keeps standard technical logs, such as IP addresses and the pages requested, to deliver the site and keep it secure.
• Links to the Chrome Web Store and Gumroad take you to those services, which have their own privacy policies.
• If you email us, we use your address and message only to reply.

10. How long we keep information

• On your device: until you erase it in Settings or remove the extension.
• Your account and plan record: while your account exists. When you delete your account, both are deleted from our account provider.
• Your synced copy: until you choose "Stop and delete the online copy" or delete your account. Either one removes it.
• Payment records: Gumroad keeps purchase, tax and invoice records as the law requires, under its own policy. We cannot delete those for you, but you can contact Gumroad about them.

11. Your choices and rights

• You can use the free trial without an account.
• You can delete your account yourself at any time from Settings > Account > Delete my account. Your tasks stay on your device. If you have a subscription, cancel it first.
• You can cancel a subscription at any time using the "Manage membership" link in your Gumroad receipt email. You keep access until the end of the period you paid for.
• You can turn sync on or off, and delete the online copy, from Settings > Account.
• You can export or erase your task data from Settings > Your data. With sync off, it never leaves your device unless you move it yourself.
• You can ask us for a copy of the account information we hold about you, or ask us to correct or delete it.

Depending on where you live (for example under the GDPR or the CCPA), you may have extra rights, such as objecting to how your information is used or complaining to your local data protection authority. We will respect them.

12. Security

Account information is sent over encrypted connections (HTTPS). Each account can only read its own plan record, and only our payment systems can change it. Passwords are stored in hashed form. Payments are handled by Gumroad, which follows payment card industry security standards. No system is perfectly secure, but we keep what we hold to the minimum so there is little to lose.

13. Children

Accounts and paid plans are not intended for children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it.

14. Changes to this policy

If this policy changes, we will update this page and the date at the top. For important changes that affect accounts, we will also tell account holders by email. We will never start storing your task data online without clearly asking you first.

15. Contact

Questions or requests about privacy? Contact Cretivo Technologies at support@getnorush.com.