Minute Mission

Privacy Policy

Last updated: 10 September 2026

Short version: no ads, no tracking, no selling data. In the self-hosted edition your data stays on your own server and we never see it. In the hosted edition we store only what the app needs to work, in the EU, and you can export or delete it at any time.

1. Controller

4V3D OÜ (registry code 17515961), Tallinn, Estonia, support@minutemission.app. For the self-hosted edition the person running the server is the controller; this policy then describes what the software stores.

2. What we store

  • Grown-ups: name, e-mail (used as login), a salted hash of your password (never the password itself), language, session cookies.
  • Children: first name or nickname, an avatar or an optional photo, a colour, and their mission history and points. We do not ask for a child's date of birth, school or any other detail.
  • Family content: missions, rewards, notes, completion history, the point ledger, and any avatar or reward images an adult uploads. The app never opens a camera and has no way for a child to add anything: every image in the app was chosen by an adult from their own device.
  • Notifications: if you turn on notifications, the push subscription your browser gives us (an endpoint URL and encryption keys) and the device language.
  • Technical: the IP address of failed login attempts (kept for a short time to stop brute-force attacks), and standard server logs.

We do not use analytics SDKs, advertising identifiers, or third-party trackers.

E-mails we send. We send e-mails about your account only: a link to confirm your address, password resets, receipts of changes you made, a note when your free period or plan is about to end, and occasionally one message asking how the app is working for you. There is no newsletter and no marketing list. Every such e-mail comes from a minutemission.app address.

3. Why we store it (legal bases)

To run the service you asked for (contract, GDPR art. 6(1)(b)); to keep the service secure (legitimate interest, art. 6(1)(f)); and, for children's data, the consent of the parent or guardian who created the profile (art. 6(1)(a) and art. 8). You can withdraw that consent at any time by deleting the child's profile.

4. Where and how long

Hosted edition data is stored on servers in the European Union. We keep your data for as long as your family account exists. If you delete your account, everything is erased within 30 days (backups are rotated out within 90 days). Self-hosted data lives wherever you put it, for as long as you keep it.

5. Who else sees it

Nobody, except: our hosting provider Hetzner Online GmbH (servers in the EU), which stores the data under a data-processing agreement; our e-mail delivery provider, which handles the e-mails we send you (address confirmations, password resets and account notices) and sees only the address and the message; the push-notification service of your browser vendor (Google, Apple or Mozilla), which receives only an encrypted message it cannot read; and, if you buy a plan, Google Play or the Apple App Store, which handle the payment and tell us the purchase status (bought, renewed, cancelled, refunded) so we can switch your plan. We never see your card number. We do not sell or share data with anyone else.

6. Your rights

You can access, correct, export (Settings → Export everything) and delete your data yourself in the app. You also have the right to restrict or object to processing, to data portability, and to complain to a supervisory authority, in Estonia the Data Protection Inspectorate (Andmekaitse Inspektsioon). Write to support@minutemission.app for anything you can't do in the app; we answer within 30 days.

7. Cookies

The app uses one strictly necessary cookie to keep you logged in. No marketing or analytics cookies.

8. Children

The app is not used by children at all. Profiles for children are created and maintained by the adult raising them; a child cannot sign up, log in, chat, take or upload photos, share anything publicly or make a purchase, and there is no screen in the app intended for a child to operate.

9. Changes

When we change this policy we will update the date above and, for meaningful changes, show a notice in the app.