noftime®

Privacy Policy · Updated 14 September 2026

Privacy Policy

noftime looks at your screen so it can vouch for your work. This page says exactly what happens to that picture, and to everything else we hold about you.

The short version

  • Screenshots go from your Mac straight to Google’s AI for a single verdict. They are never stored by noftime, never written to your disk, and never seen by us.
  • We keep your account, the verdicts, and your record of verified work. Nothing more.
  • No ads, no analytics trackers, no selling or renting your data.

1. Screenshots

During a focus round, the app captures the display your cursor is on at intervals, scales it down, and sends it, together with the names of the tasks you planned for the round, encrypted, from your Mac directly to Google Vertex AI (the Gemini model). The model answers with a verdict: which of your tasks the screen matches, if any. That verdict is all that comes back.

noftime’s own servers never receive the image. The app does not write it to disk; it exists in memory only for as long as the request takes. Google processes it as our infrastructure provider under the Google Cloud terms, which do not allow Google to use your data to train its models.

Nothing is captured outside a running round, and only the display your cursor is on is captured. When you are offline, nothing is captured at all; the round is recorded as pending proof.

To authorise each call to Google, our server issues the app a short-lived token. Each issue is logged with your user ID, the time and your IP address, so we can rate-limit and catch abuse. Those logs are kept for a limited time and are not linked to any screen content.

2. Your account

You sign in with Google or Apple, through Supabase Auth. From the provider we receive a user ID, your email address, and, if they share it, your name and profile picture. We keep a profile with your display name, when your account was created and when your trial ends.

Your sign-in session is stored on your Mac, encrypted with macOS’s own secure storage, so you don’t have to sign in every time.

3. Your record

While you are signed in, the app uploads your record so it survives a reinstall and can follow you to another Mac:

  • the words you commit to: the word, the mode, the dates, your timezone and the outcome;
  • your daily commitments: their name, frequency, dates and outcome;
  • each verified round: the name of the task you were working on, the date and the moment it was verified;
  • daily round counts;
  • an integrity chain: cryptographic hashes that let us prove the record wasn’t rewritten. The hashes contain no content;
  • the devices you use noftime on: platform, app version and when they were last seen.

This is upload-only: the server keeps a copy of what your Mac reports. Screenshots, the contents of your screen, and rounds that were never verified are not part of it.

4. Duels

When you send a duel invite, the link (noftime.com/duel/…) shows your display name, the word, the number of days and the daily target to anyone who opens it. Invite pages are not indexed by search engines, but anyone you give the link to can see them.

When a duel is accepted, both of you see each other’s display name, day-by-day results and the final verdict. The duel becomes part of both records.

5. Sharing

Proof posts and images are generated only when you ask, and handed to the app or service you chose. We do not post anything on your behalf, and we do not see what you publish.

6. On your Mac

Your tasks, timer state, schedule and settings live in the app on your Mac. Notifications are delivered locally by macOS. Deleting the app removes all of it.

7. What we don’t do

  • No analytics or tracking SDKs in the app or on the website.
  • No advertising, and no sharing of your data with advertisers.
  • No selling or renting of your data to anyone.
  • No cookies on noftime.com.

8. Providers we rely on

  • Google Cloud (Vertex AI): the single-shot screenshot verdict.
  • Supabase: sign-in and the database that holds your account and record.
  • Google and Apple: sign-in.
  • Vercel: hosting for noftime.com.

Each of them processes data on our instructions under their own terms, and our hosting providers keep standard server logs (IP address, browser, time of request) for security and operations.

9. How long we keep it, and how to delete it

We keep your account and record for as long as your account exists. To delete everything, email support@noftime.com from the address on your account. Deletion removes your account, profile, record and device list. A duel you took part in stays on your opponent’s record, with your account detached from it. Token-issue logs expire on their own.

10. Your rights

You can ask us to show you what we hold about you, correct it, export it, or delete it, and you can object to how we use it. Email support@noftime.com and we will answer within 30 days. If you are in the EU or the UK, you also have the right to complain to your data protection authority.

11. Children

noftime is not for anyone under 16, and we do not knowingly collect data from them.

12. Security

Everything leaving your Mac travels over encrypted connections. Your session is encrypted at rest on your Mac. In the database, row-level security means only you can read your own data, and the integrity chain is append-only. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

13. Changes to this policy

When we change this policy we update the date at the top. If a change is material, we will tell you in the app before it takes effect.

14. Contact

Questions about your data: support@noftime.com.