Minute Mission: Privacy Policy
Version 2026-10-09.
Changes announced: none.
The short version. No ads, no tracking, no selling, and no analytics in the app. The hosted edition stores only what the app needs, in the European Union. Only adults have accounts. If you run the self-hosted edition, your data is on your own server and we see none of it.
1. Who is responsible
4V3D OÜ (registry code 17515961), Tallinn, Estonia, is responsible for the personal data described on this page (in legal terms, the controller). Contact: support@minutemission.app, +372 5444 0211. The full company details are in the Terms of Use.
The law does not require us to appoint a data protection officer and we have not appointed one. Your message goes straight to the person who runs the company.
Two cases are different. If you run the self-hosted edition, you are responsible for the data on your server and this policy does not apply to it. If a daycare uses the group edition, the daycare is responsible for its group's data and we work on its instructions under the data processing agreement (minutemission.app/dpa/).
2. The rules we hold ourselves to
These rules are the same in everything 4V3D OÜ makes.
- Only what is needed. We collect the least the product needs to work, and we build features so that less is needed.
- Never sold, never used for ads, never used to train anything. Data is used to run Minute Mission for you, in the ways this page lists, and for nothing else. We do not analyse you to predict or influence anything, and no machine makes decisions about you. We hand data to an authority only when a law or a court order obliges us to.
- No advertising tools, no analytics, no tracking of any kind in the app.
- Named helpers only. Every company that handles data for us is listed below. We give 30 days' notice on this page before adding or replacing one.
- Kept in the EU where we can. Where a helper is outside the EU, the list says so and says what protects the data there.
- One person has access. Only the board member of 4V3D OÜ can reach our systems. There is no employee, contractor or support agent with access.
- Gone when you say so. When you ask us to delete something we hold, it is gone from our live systems within 30 days, and from the last backup at the latest 90 days after that. The exceptions are the records the law makes us keep and the record of which terms you accepted.
- Told if something goes wrong. If a security incident is likely to put you at high risk, you hear from us without undue delay.
3. What we store, why, and for how long
| What | Details | Why | Legal basis | How long |
|---|---|---|---|---|
| Your account | Name, email address, password (stored only as a salted hash), language | To sign you in and run your family's board | Contract with you | Until you delete your account or your family |
| Children's profiles | First name or nickname, a picture (a drawing from our set, or a picture you choose to upload), a colour, missions done, points, rewards and badges | To show your family's board | Our legitimate interest, and yours, in running the board you asked for. For a picture you upload: your consent as the child's parent. Removing the picture withdraws it | Until you delete the profile or the family |
| Your family's content | Missions, rewards, piggy bank entries | To run the board | Contract with you | Until you delete it or the family |
| Sign-in safety | Sign-in sessions (the token is stored hashed) with your browser name, the IP addresses of failed sign-in, sign-up and password-reset attempts, and the IP address and email address used to redeem a gift code | To keep accounts safe and stop password guessing | Our legitimate interest in security | Sessions until you sign out or they expire. Failed attempts and request addresses for 10 minutes. Gift code details for 30 days |
| Server logs | IP address, time and the page requested | To keep the service running and safe | Our legitimate interest in security | 14 days |
| Notifications, only if you turn them on | The address your browser or phone gives us for sending them | To send the reminders you asked for | Your consent. Turning them off withdraws it | Until you turn them off |
| The terms you accepted | Version, time and the email address of the account | To be able to show what was agreed | Our legitimate interest in keeping proof | While the account exists and for 3 years after |
| Purchases | Plan, dates, the store's or Stripe's order reference, country for tax. For a website purchase also the name and email address you gave when paying. For a store purchase also what the store's sales report shows us (section 5) | To give you what you paid for and to keep our accounts | Contract with you, and accounting law | 7 years from the end of the financial year under Estonian accounting law, or 10 years where EU VAT rules require it |
| Emails you send us | Your email address and whatever you write | To answer you | Our legitimate interest in answering, or steps towards a contract | Deleted when no longer needed, at the latest 2 years after the last message |
| Counting visits | The page viewed, the site you came from, your country, browser and device type, as totals | To see which pages are read | Our legitimate interest in knowing what is used | Kept by Cloudflare for up to 6 months. Nothing in it says who you are |
An email address and a password are needed to have an account. Everything else is your choice.
We never ask for a child's surname, date of birth, age, school, address, phone number or email address. The app has no field for them. We do not collect your location, your contacts or an advertising ID. The only place we see is the country on a purchase. The only device identifier is the notification address above.
When you delete your family, it is erased from the live service within 30 days and from the last backup at the latest 90 days after that.
4. Children
Children have no accounts and cannot sign in. They cannot chat, upload, share anything or buy anything. A parent creates and looks after each child's profile and can change or delete it at any time. Deleting a profile deletes its history.
5. Who helps us, and where the data is
| Who | What they do | Where |
|---|---|---|
| Hetzner Online GmbH (Germany) | Runs the server and holds the server's backups | Helsinki, Finland (EU) |
| Scaleway SAS (France) | Sends service email, for example a password reset. No child's data is in any email | France (EU) |
| Proton AG (Switzerland) | Our mailbox. It holds the emails you send us and our replies | Switzerland, which the European Commission recognises as protecting personal data adequately |
| Your browser's notification service (Google, Apple, Mozilla or Microsoft), only if you turn notifications on | Delivers the notification to your device, under its own policy. The text is encrypted and the service cannot read it. In the Android and iPhone apps, reminders are made on the phone itself and nothing is sent through Google or Apple | Depends on your browser maker |
| Cloudflare, Inc. (USA) | Directs visitors to our addresses, delivers our daycare page minutemission.com, and counts visits on minutemission.com and minutemission.app. To count them it receives your IP address and basic browser details. It does not carry the app's data | Worldwide network. Transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses |
| Stripe Payments Europe Ltd (Ireland) | Takes the card payment. It receives your name, email address, card and billing details, and your IP address and device details for fraud checks. Stripe decides for itself how to handle them, under its own privacy policy | Ireland (EU). Stripe may also process data in the USA, under the EU-US Data Privacy Framework and standard contractual clauses |
| The store (Google or Apple) | Takes the payment for purchases made in the app, under its own terms and privacy policy. It tells us that a purchase exists and whether it is active, with an order reference. In its sales reports Apple shows us each sale without a name (plan, date, price, country, device type and a random number that stands for the subscriber), and Google Play shows us each order (number, date, plan, price, phone model, the buyer's country and in some countries the town and postcode). Neither gives us your name, email address or card details | See the store's own policy |
The app's data and its backups are in the European Union. Nobody in this list may use your data for their own purposes, except where the table says a company acts under its own policy. You can ask us for a copy of the safeguards that cover a helper outside the EU.
6. How we protect it
- Everything in transit is encrypted (HTTPS).
- Passwords are never stored, only a salted hash. Sign-in tokens are stored hashed as well, so a copy of the database is not a set of working keys.
- Each family is separate. Nobody outside your family can see it.
- Daily encrypted backups, kept 14 days on the server and 90 days off-site in the EU. They are encrypted with a key the server itself does not hold. Restoring from a backup has been tested.
- Only the board member of 4V3D OÜ can reach the server, with two-step sign-in on the hosting account.
- Sign-in and sign-up are rate limited.
- The whole source has been through a written security review.
7. If something goes wrong
If a security incident with your personal data is likely to put you at high risk, we tell you without undue delay: what happened, what we know and what we recommend you do. We write to the email address on your account. Where the law requires, we also report it to the Estonian Data Protection Inspectorate within 72 hours. We keep a written record of every incident.
8. Your rights
You can ask us what we hold about you, have it corrected, get a copy you can take elsewhere, have it deleted, and have its use restricted. Where something is based on your consent, you can withdraw the consent at any time. In Settings you can see and correct everything, export your family's data as a file, and delete a child's profile or the whole family yourself.
Your right to object. Where this page gives our legitimate interest as the reason, you can object at any time, by writing to support@minutemission.app.
For anything else write to support@minutemission.app. We confirm within 5 working days and answer in full within 30 days. It costs nothing.
If you are not happy with our answer, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data protection authority of the country where you live.
9. Cookies
One cookie keeps you signed in. When you pay by card, you pay on a page run by Stripe. It sets its own cookies there to prevent fraud. These cookies are strictly necessary, so there is no consent banner. There are no advertising or analytics cookies, and the app has no analytics of any kind.
Our website minutemission.app is separate from the app. On minutemission.app and on our daycare page minutemission.com we count visits with Cloudflare Web Analytics. It sets no cookie, stores nothing on your device, does not follow you from site to site and shows us totals only: pages, countries and browsers.
10. Changes to this policy
The version and date at the top change with every edit. If a change matters, we announce it in the app and by email at least 30 days before it takes effect. A change never reduces the protection of data we already hold, unless the law requires it.