OurMinutes Privacy

Updated: September 20, 2026
Developer: Shanhe Yi
Contact: ysh@yishanhe.net

This page describes the current OurMinutes development build. It will be updated as the app changes.

Household records on your device

Names or nicknames, avatars, minute balances, allowance schedules, sessions, receipts and correction reasons are stored in the app’s local household file. The app does not require accounts, birth dates or a connection to a developer-run server. It has no advertising or third-party analytics SDK.

OurMinutes records sessions entered by the family. It does not monitor TV or console activity, detect participants or collect browsing history. There is no cross-device household synchronization in this version.

Demo mode

The optional demo uses a separate sample household held in memory. Demo changes are discarded on exit; it does not write to your household file or parent credentials, send notifications, or export or restore backups.

Parent access

The app stores a derived PIN and a hash of the recovery code in the device Keychain with device-only accessibility. The PIN and recovery code are not included in household backups. Recovery changes the PIN and rotates the recovery code without changing household records.

The parent gate limits access to credits, corrections and other parent tools inside the app. The device owner still controls the device and app data.

Notifications

If you grant permission, the app schedules local two-minute and time-up notifications. You can manage notification permission in the device’s Settings. OurMinutes does not use a developer-operated push notification service.

Backups and Files

Exports contain household names, balances, schedules and history. They are written to the location you choose in Files. A cloud storage provider may upload and store an exported file under its own settings and policies. OurMinutes does not synchronize household records through that file.

An import reads the file you select, validates it and shows a replacement preview. Before a confirmed restore or starting a new household, the app preserves the previous household file locally. You can export that copy through Export previous household. These actions leave parent credentials unchanged.

Retention and removal

You can edit a child’s name or archive their profile. Archiving retains their balance and history in the parent ledger; it does not erase those records. Corrections also retain the original entries.

Deleting the app removes its local household files. Exported files, provider copies and device backups are managed separately. Parent credentials are stored separately in Keychain; app deletion should not be treated as a guarantee that Keychain items are removed.

Support email

If you contact support, your email address, message and any attachments you send are received to respond to your request. Send only what is needed to explain the issue, and omit household backups, children’s identifying details, PINs and recovery codes.