ITmode App and Browser Extension Privacy Policy
This Privacy Policy covers the ITmode application and the ITmode browser extension. It describes how data is processed, stored, and shared, and what choices users have. The browser extension provides a focus timer and blocks user-selected websites during focus sessions, with account-based synchronization across ITmode apps.
1. General approach
ITmode is operated by Individual Entrepreneur Sergey Evgenievich Rozhkov (OGRNIP 323246800070969, INN 246310082661) and acts as a technical platform that provides focus timer, league, and social features. The Service processes only the minimum data technically necessary for core functionality. We do not collect or process any personal data beyond what is strictly required for the Service to operate.
Any additional information a user enters into the Service (including profile content, display name, bio, avatar, and other data) is provided entirely voluntarily, at the user’s own initiative and at their own risk. The user is solely responsible for choosing what to share and bears full responsibility for the nature, accuracy, legality, and scope of such data. We are not responsible for any consequences arising from the user’s decision to voluntarily disclose information through the Service.
2. What data may exist in the Service
Depending on the features a user chooses to use, the following data may be present:
- Account authentication data: account identifier and sign-in information, such as an email address. This data is used to authenticate the user and associate the Service’s data with the correct account.
- Technical infrastructure data: IP address, device model, OS, app version, language, time zone, technical session identifiers, and error logs. This data is generated automatically by the infrastructure to ensure the Service operates correctly and for security purposes.
- In-app activity data: focus session records, duration, statistics, and league participation generated through the user’s use of the Service.
- iOS App Blocker data (optional): if the user authorizes Apple Family Controls, the system picker lets the user select applications, categories, and websites to restrict during focus sessions. Apple provides ITmode with opaque selection tokens. The tokens and the actual selection are stored only on the user’s iPhone in the app’s shared container and are not sent to ITmode servers. To associate the local selection with the user’s App Blocker group, the server stores a random selection reference, an app-installation identifier, the device model, and the number of selected applications, categories, and websites. The server does not receive the selected applications’ names or bundle identifiers, selected website domains, raw Family Controls tokens, or local shield counters.
- Android App Blocker data (optional): when the user opens the Android application picker, ITmode reads the applications with launcher activities that are available on the device. The full application list remains on the device and is not sent to ITmode servers. Only the applications the user adds to a blocking group are synced with the user’s account. For catalog applications, the server stores preset references. For custom applications, the server stores the application name, selected package names, and an application icon. With Accessibility access, the Android service receives the foreground app’s package name and technical event details. During focus, ITmode checks the app against the block list on the device. ITmode does not read screen content or typed text and does not send foreground-application activity or history to its servers.
- Notification tokens (if enabled by the user): push notification delivery identifiers required for the notification functionality.
- User-provided content (voluntary): display name, bio, avatar, and any other information the user voluntarily adds to their profile. The user decides what to share and bears full responsibility for the nature, accuracy, legality, and scope of this data. We do not require this information and are not responsible for the user’s decision to provide it.
We do not request, require, or encourage users to submit personal or sensitive information beyond what is technically necessary.
Browser extension
- Sign-in and session data: the email address and password entered in the extension are sent over HTTPS to our authentication service. The extension does not save the password. It stores the authenticated session, including account information and access and refresh tokens, in the browser’s local extension storage to keep the user signed in.
- Data synchronized with the account: timer state, focus session records and durations, tags, blocking group names, selected website presets, and custom website domains. The extension can also display and manage application rules and device-selection metadata already saved in the same groups by other ITmode apps; it does not scan the computer for installed applications. Selected website domains are saved blocking rules, not a record of sites visited.
- Local website checks: the extension compares the current page’s hostname with the user’s blocking rules. When the user asks to close a blocked tab, it checks the tab’s current URL and any pending navigation URL to avoid closing a tab that has navigated elsewhere. These checks take place within the browser. The extension does not upload visited-page URLs or browsing history, or collect page text, form input, passwords entered on other websites, or website cookies. It changes page interaction only to show the blocking screen, restrict access to the blocked page, and pause media while blocking is active.
- Local settings and blocking state: language and timer preferences, cached blocking policy, temporary website access, API connection settings, and daily blocking-screen counters. Each counter stores an account identifier, a website-service identifier, a date, a count, and a last-update time, rather than a list of visited URLs. Temporary access and these counters are not sent to ITmode servers.
3. How data is used
Minimum required and technical data is used to:
- authenticate users and maintain accounts;
- provide the focus timer, statistics, and league functionality;
- ensure security, prevent abuse, and investigate incidents;
- maintain app stability, performance, and reliability;
- deliver notifications when enabled by the user.
The iOS App Blocker data described above is used only to maintain the user’s blocking rules and apply them during user-started focus sessions. It is not used for advertising, tracking, analytics, or profiling.
Android App Blocker data supports blocking. Analytics records editor actions and rule counts, but not app names or package names. This data is not used for advertising.
The browser extension uses its data to provide the focus timer, synchronize the user’s rules and focus sessions, apply website blocking, and show local blocking counters. Access to HTTP and HTTPS websites is needed because the user can choose any website to block; it also supports the URL safety check before closing a tab at the user’s request. The storage permission saves the local data described above. The alarms permission schedules synchronization and updates when a focus session or temporary access expires.
Our handling of browser-extension user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell this data, use or share it for advertising, or use it to determine creditworthiness or for lending purposes.
User-provided content (profile data) is displayed to other users as part of the platform’s social features. The user controls what content is shared and may edit or remove it at any time.
4. Third parties and infrastructure
The app relies on infrastructure providers (for example, cloud backend, storage, push delivery, and error monitoring) to operate. These providers may handle technical data as part of normal infrastructure operation. Such handling occurs in accordance with the providers’ own policies.
The browser extension uses Supabase for authentication, account data, synchronization, and storage, and ITmode’s regional API proxy on Yandex Cloud for routed requests. These providers process the request data needed to deliver those functions and may receive technical connection data such as the IP address and HTTP headers. The extension does not send them visited-page URLs or local blocking counters. We share extension data only as needed to provide its functionality, comply with law, or protect against fraud and abuse. Human access is limited to the user’s explicit consent, security or legal needs, or aggregated and anonymized data for internal operations.
5. Data retention
Data is retained only as long as needed for the Service to function, including security and legal requirements. Users may delete their account and associated data through the app settings.
Server-side iOS App Blocker metadata is retained while the related blocking rule and account remain active. A device rule that has not been confirmed by its installation for more than 180 days is deleted automatically. Local Family Controls selections are removed when the user replaces or deletes the related rule from the same installation, or when iOS removes the app’s data. Signing out isolates local selections from other accounts but does not automatically delete them. Revoking Family Controls authorization stops active restrictions but does not by itself delete a saved selection or its server metadata.
Synced Android App Blocker rules are retained while the related blocking group and account remain active. Foreground-application activity is not retained on ITmode servers because it is processed only on the device. Revoking Android Accessibility access stops application blocking but does not by itself remove the user’s synced blocking groups.
Signing out of the browser extension removes its saved authentication session and clears the previous account’s cached blocking policy, temporary access, and blocking counters. Changing accounts also clears the previous account’s blocking state and counters. Language, timer, and API connection preferences may remain locally. In Chrome, uninstalling the extension removes its local storage; simply disabling it does not. Signing out or uninstalling does not delete the ITmode account, synchronized focus records, or blocking groups. Users can remove saved blocking rules or groups through ITmode, or delete their account as described below.
6. Security
We apply technical and organizational measures to reduce risks of unauthorized access, loss, alteration, or disclosure. No system is absolutely secure, and security measures are continuously improved.
7. User choices
- Users control what information they add to their profile and may edit or remove it at any time.
- Users may delete their account through the app settings. Step-by-step instructions are available on the account deletion page.
- Users may enable or disable push notifications through device settings.
- Users may revoke Family Controls authorization in iOS settings. To delete a saved App Blocker selection and its server metadata, the user may remove the related rule or group, or delete their account.
- Users may revoke ITmode Accessibility access in Android settings. They may remove applications from a blocking group or delete the related group through the app.
- Browser-extension users may edit or delete website rules and blocking groups, sign out, restrict site access through browser settings, or disable or uninstall the extension. Restricting site access prevents blocking from working on those sites. Account deletion is available through the main ITmode app using the instructions linked above.
- Depending on applicable law, users may have additional rights regarding their data. To exercise any such rights, use the contact details below.
8. Children and age restrictions
The app is not intended to be used by children where prohibited by applicable law. Users must be at least 16 years old (or the minimum age required by their jurisdiction) as described in the Terms of Use.
9. Policy changes
We may update this Policy from time to time. If changes are material, the updated version will be posted in the app and/or on the website, and the update date will be revised.
10. Contact
For questions about this Policy, contact us at support@itmode.app or use official ITmode support channels available in the app and on the website.