9-5 Reset — Privacy Policy

Google Calendar Data: Access, Use, and Purpose

9-5 Reset requests read-only access to your Google Calendar (calendar.readonly scope) for a single, specific purpose: to detect free time windows between your scheduled meetings, so the extension can suggest short movement/stretch sessions during those gaps.

What we access: Only event start times and end times. We do not access event titles, descriptions, attendee lists, locations, attachments, or any other event content.

How we use it: Event start/end times are read and processed entirely within your local browser, in real time, to calculate gaps in your schedule. This calculation happens on-device only.

How we handle and store it:Calendar data is never transmitted to, or stored on, any server we control. It is held temporarily in your browser's local extension storage only for as long as needed to detect the next available gap, and is overwritten on each refresh. We do not retain a history of your calendar data.

Who we share it with: We do not sell, rent, share, or transfer your Google Calendar data to any third party, advertiser, or analytics provider, under any circumstance.

Revoking access:You can revoke 9-5 Reset's access to your Google Calendar at any time via your Google Account permissions page. Doing so immediately stops all calendar data access; the extension will fall back to manual schedule entry.

This use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Account Sign-In (Email)

If you choose to sign in, 9-5 Reset asks for your email address and sends a one-time 6-digit code — there are no passwords.

What we collect: Your email address, and a session token that keeps you signed in between uses.

How we store it:Your email is stored in our authentication system (provided by Supabase). The session token is stored locally in your browser's extension storage so you don't have to sign in every time you open the extension.

Why we collect it: Solely to identify your account and check whether it has Pro access. We do not use your email for anything else unless you separately opt in to product update emails (see below).

Signing out:Signing out clears your local session immediately. It does not delete your account record — see "Data Retention and Deletion" below for that.

Pro Subscription & Payments

If you upgrade to Pro, payment is handled entirely by our payment processor, Polar — we never see or store your card details.

What we store: Once a payment succeeds, Polar notifies our server, and we store your email address, Pro status (on/off), plan type (lifetime or monthly), a Polar customer reference ID, and the date this was last updated. This is kept in our database (Supabase) so the extension can check your Pro status.

Who can access this: Only our server, using a private key that is never included in the extension or visible to anyone installing it. Polar also retains your payment information under its own privacy policy, since they are the ones processing the charge.

Why we collect it: Solely to unlock Pro features (calendar sync, unlimited sessions) for the email address you paid with, and to handle subscription cancellations.

Contact / Product Updates Opt-In

During setup, you can optionally check a box to receive occasional product update emails.

What happens if you check it: Your email address and the date you opted in are sent to a Google Sheet (via a Google Apps Script) that we use to manage our update mailing list.

What happens if you don't: Nothing — this is entirely optional and unchecked by default.

Opting out: Contact us (below) to be removed from this list at any time.

Other Data We Collect

We collect anonymous, non-personal usage data (e.g. number of sessions completed, notifications shown) solely to understand product engagement and improve the extension. This usage data is not derived from or linked to your Google Calendar content, and does not include personal health information.

This is separate from, and does not include, the email-based account and subscription data described above — that data is tied to your email address, not anonymous, and is covered by the sections above.

Third Parties We Work With

We rely on a small number of service providers to operate 9-5 Reset, each of which only processes the data described in the relevant section above, under their own privacy policies:

• Google — Calendar API (read-only event times, see above) and Google Sheets/Apps Script (only if you opt in to product updates).
• Supabase — hosts our authentication system and database (account email, session handling, Pro subscription status).
• Polar — processes payments for Pro upgrades and holds your billing/payment details.
• Vercel — hosts our landing page and the server-side code that receives payment notifications from Polar.

We do not sell your data to any of these providers or to anyone else.

Data Retention and Deletion

Calendar data: Never stored by us in the first place, as described above.

Account, email, and subscription data: Retained for as long as you have an account or an active/past subscription, so we can verify Pro access and handle support or billing questions.

Deletion: You can request deletion of your account, email, and subscription record at any time by contacting us at the email below. We will delete it promptly upon request.