Privacy Policy for Chore.md

1. User Data Collection

Chore.md adheres strictly to data minimization principles. We collect only the minimum data essential to provide the extension's core functionality:

• User-Initiated Web Content & Clippings: When you explicitly use the context menu ('Save as new note' or 'Append to active note') or side panel to capture text from a webpage, the extension extracts the user-selected text and active tab URL/title solely for source citation.
• Editor State & Preferences: User interface preferences (dark/light theme, font size, active note path, editor layouts, open tabs) and local drafts are saved locally in your browser to maintain your workspace.
• Optional GitHub OAuth Token: If you explicitly choose to connect your GitHub account to sync repositories, an OAuth access token is stored locally to communicate directly with GitHub's REST API.
• Website Aggregated Metrics (chore.md website only): When visiting the public website at https://chore.md, standard aggregate, privacy-preserving interaction analytics (page views, referrer) are collected via Google Analytics. The Chrome extension itself contains zero tracking scripts or analytics.

Data We DO NOT Collect:

• No Personally Identifiable Information (PII): We do not collect names, email addresses, phone numbers, or government IDs.
• No Sensitive Personal Data: We do not collect financial, payment, banking, health, or medical data.
• No Browsing History: We do not monitor, log, or track websites you visit or your general browsing history.
• No Keystroke or Background Surveillance: We do not record background user activity or keystrokes outside the explicit editor input area.

2. Data Handling and Purpose

Every piece of data processed by Chore.md is tied directly to a specific user-facing feature:

• Markdown Note Authoring & Editing: Local text notes are processed solely to render live markdown formatting, syntax highlighting, task lists, tables, and Mermaid.js diagrams.
• Web Snippet Capture & Attribution: User-selected text and active tab metadata are handled solely to create formatted markdown quote snippets with source attribution hyperlinks.
• On-Device AI Processing (Gemini Nano): All AI capabilities—including summarization, translation, proofreading, and rewriting—execute 100% on-device using Chrome's built-in Gemini Nano model (Prompt API). Zero prompts, notes, or webpage contents are transmitted to external AI servers or cloud APIs.
• GitHub Repository Synchronization: If enabled, OAuth credentials and document payloads are handled exclusively to commit, pull, and push files directly to user-authorized GitHub repositories.
• Document Export: Converting documents to Markdown (.md), PDF, HTML, or Word (.docx) is handled entirely client-side inside the browser memory without external server processing.

3. Data Storage and Security

Chore.md stores user data using secure, isolated browser mechanisms:

• Local-Only Storage: Extension preferences, layouts, and notes are saved exclusively in your browser's local sandbox via chrome.storage.local and browser IndexedDB (database: chore-storage).
• Zero Server Storage: Chore.md operates no external databases or servers that receive, process, or store your markdown documents or notes. We have zero access to your private content.
• Security & Isolation: All extension code runs in Chrome's sandboxed MV3 environment. Remotely hosted code is strictly prohibited and excluded from the extension build. GitHub tokens are stored in secure origin-isolated storage and transmitted only over HTTPS directly to api.github.com.

4. Data Sharing, Disclosure, and Third Parties

We maintain an uncompromising stance on user privacy and data disclosure:

• Zero Data Selling: We do NOT sell, rent, trade, lease, or monetize your personal data, documents, or clipped content under any circumstances.
• Zero Advertising or Tracking Transfer: We do NOT transfer or disclose user data to advertising networks, data brokers, or credit evaluation entities.
• Third-Party Integrations:
  • • GitHub (Optional): If you choose to enable GitHub sync, network requests travel directly between your browser client and GitHub's official servers (https://api.github.com). Data handling is governed by the GitHub Privacy Statement.
  • • Chrome Built-in AI: On-device AI processing is managed locally by your Google Chrome browser installation with zero network transmission.
• No Other Third Parties: Chore.md does not disclose user data to any other third-party services or vendors.

5. Data Retention and Deletion

You maintain complete ownership and control over the lifecycle of your data:

• Retention Duration: Because notes and settings reside in your browser's local storage, they are retained indefinitely on your device until you decide to delete them.
• In-App Deletion: You can delete any document, snippet, or folder at any time directly through the file explorer in the Chore.md interface.
• Extension Data Reset: You can purge all extension data at any time via Chrome: go to chrome://extensions > Chore.md > Site settings > 'Clear data', or clear IndexedDB in Chrome Developer Tools.
• Uninstall Deletion: Removing or uninstalling the Chore.md extension immediately and permanently removes all data stored in chrome.storage.local and extension IndexedDB from your device.
• Revoking GitHub Access: You can disconnect your GitHub account at any time in Chore.md settings, or revoke the OAuth application authorization at any time in your GitHub Account Security Settings.

6. User Rights and Data Portability

Chore.md is built to guarantee full user autonomy without platform lock-in:

• Data Ownership: You retain 100% intellectual property ownership of all notes, drafts, and documentation created in Chore.md.
• Instant Export: You can export your documents at any time to open standard formats: raw Markdown (.md), styled HTML, formatted PDF, or Microsoft Word (.docx).

7. Chrome Extension Permissions Justification

The Chore.md extension requests only the minimum necessary permissions required for its feature set:

• sidePanel: Displays the markdown writing workspace in Chrome's native side panel alongside active web tabs.
• storage: Persists user theme preferences, recent files, and editor settings locally on your machine.
• identity: Facilitates standard OAuth authentication flow if you choose to connect your GitHub account.
• contextMenus: Adds right-click options to save or append selected webpage text into your notes.
• tabs: Inspects the active tab's URL and title to generate source attribution citations for clipped notes.
• activeTab: Grants temporary script access to the active webpage when invoked by user gesture.
• scripting & host_permissions: Extracts user-selected DOM elements as formatted Markdown and enables reading active tab text in the side panel for AI summarization.
• <all_urls>: Enables note clipping and local AI tab analysis across websites browsed by the user.
• https://*.chore.md/*: Connects to Chore.md public documentation and web app assets.
• https://api.github.com/*: Communicates with GitHub's REST API for repository synchronization.

8. Policy Updates

We may periodically update this Privacy Policy to reflect application improvements. Any revisions will be published immediately at https://chore.md/privacy-policy with an updated effective date. Major updates will be documented in our release notes.

9. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our local-first architecture, please reach out to us:

• Email: support@chore.md
• GitHub Issues: https://github.com/chore-md/chore.md/issues
• Website: https://chore.md