Kiru (切る) Pomodoro, Tasks & Blocker · Browser Extension

Privacy Policy

Last updated: March 2025  ·  Version 1.0.0

1. Who we are

Kiru is a browser extension developed as an independent project. There is no company, no backend server, and no user accounts. The extension runs entirely inside your browser.

2. What data Kiru stores — and where

Kiru stores the following data using Chrome/Edge's built-in storage APIs:

• Heatmap & completed tasks — stored in chrome.storage.local. This data never leaves your device and is not synced anywhere.
• Active tasks & blocked sites list — stored in chrome.storage.sync. If you are signed into a Chrome or Edge account, this data syncs across your own devices via your browser's built-in sync. It is not accessible to this extension's developer.
• Groq API key — stored in chrome.storage.local on your device only. It is never synced, never exported in backups, and never transmitted to anyone other than Groq when you use AI Smart Add.
• Timer state — stored temporarily in chrome.storage.local so the timer survives the popup closing. Cleared when you reset.

3. The only external service: Groq AI (optional)

Kiru includes an optional "AI Smart Add" feature. When you click the ✨ button in the Tasks tab, the text you typed in the task input field is sent to Groq for processing by a language model (Meta Llama 3).

• This only happens when you explicitly click the ✨ button — never automatically.
• Only the task text you typed is sent. No other data (tasks, heatmap, blocked sites, identity) is included.
• Your Groq API key is sent to Groq as an authentication header — this is how Groq's API works and is necessary for the feature to function.
• Groq's handling of this data is governed by Groq's Privacy Policy.
• You can use Kiru fully without ever entering a Groq API key. AI Smart Add is entirely optional.

4. Data we do NOT collect

• We do not collect analytics, telemetry, or crash reports.
• We do not track which websites you visit or block.
• We do not collect your name, email, or any identifying information.
• We do not serve advertisements.
• We do not share any data with third parties (other than Groq, when you opt in to AI Smart Add).

5. Permissions explained

Kiru requests the following browser permissions:

• storage — to save your tasks, heatmap, timer state, and blocked sites locally and via browser sync.
• notifications — to alert you when a work session or break ends.
• alarms — to keep the Pomodoro timer running accurately in the background.
• declarativeNetRequest — to block the sites you choose. This works by declaring redirect rules; Kiru does not monitor or log your browsing history.
• host permission for api.groq.com — required for the optional AI Smart Add feature to contact Groq's API.

6. Backup & restore

Kiru lets you export a JSON backup of your heatmap, tasks, and blocked sites. This file is saved directly to your device — it is not uploaded anywhere. Your Groq API key is explicitly excluded from all exports.

7. Children's privacy

Kiru is not directed at children under 13. We do not knowingly collect any information from children.

8. Changes to this policy

If this policy changes in a material way, the "Last updated" date above will be updated and the change will be noted in the extension's release notes on the Edge Add-ons store.

---