OurMinutes Privacy

Updated: September 22, 2026
Developer: Shanhe Yi
Contact: ysh@yishanhe.net

This page describes the OurMinutes TestFlight beta.

Household records on your device

Names or nicknames, avatars, minute balances, allowance schedules, sessions, receipts and correction reasons are stored in the app’s local household file. The app does not require accounts, birth dates or a connection to a developer-run server. It has no advertising or third-party analytics SDK.

OurMinutes records sessions entered by the family. It does not monitor TV or console activity, detect participants or collect browsing history. A parent may optionally connect the household to iCloud for synchronization across family devices.

When a parent enables iCloud, OurMinutes stores the household document in the owner’s private CloudKit database. It includes profiles and photos, balances, allowances, sessions, receipts, correction reasons, and salted verifiers for parent access. Invited Apple Accounts can read and edit the shared household through CloudKit. The raw PIN and recovery code are not uploaded. OurMinutes does not use a public CloudKit database or a developer-run account server. Apple handles CloudKit data under its privacy terms.

A child device shows only its assigned child in the app, but an iCloud sharing invitation grants access to the full household data. Device assignment is an app interface rule, not separate server-side access control. Invite only trusted household members. Disconnecting a device does not delete the cloud household or revoke another person’s access; the owner can manage sharing in the app.

Demo mode

The optional demo uses a separate sample household held in memory. Demo changes are discarded on exit; it does not write to your household file or parent credentials, send notifications, or export or restore backups.

Parent access

In local mode, the app stores derived parent credentials in the device Keychain with device-only accessibility. When iCloud is enabled, salted credential verifiers are also part of the shared household so another parent device can check the household PIN or recovery code. The PIN and recovery code are not included in household backups. Recovery changes the PIN and rotates the recovery code without changing household records.

The parent gate limits access to credits, corrections and other parent tools inside the app. The device owner still controls the device and app data.

Notifications

If you grant permission, the app schedules local two-minute and time-up notifications. You can manage notification permission in the device’s Settings. OurMinutes does not use a developer-operated push notification service.

Backups and Files

Exports contain household names, balances, schedules and history. They are written to the location you choose in Files. A cloud storage provider may upload and store an exported file under its own settings and policies. OurMinutes does not synchronize household records through that file.

An import reads the file you select, validates it and shows a replacement preview. Before a confirmed restore or starting a new household, the app preserves the previous household file locally. You can export that copy through Export previous household. These actions leave parent credentials unchanged.

Retention and removal

You can edit a child’s name or archive their profile. Archiving retains their balance and history in the parent ledger; it does not erase those records. Corrections also retain the original entries.

Deleting the app removes its local household files. It does not delete an iCloud household or revoke sharing. Exported files, provider copies and device backups are managed separately. Parent credentials are stored separately in Keychain; app deletion should not be treated as a guarantee that Keychain items are removed.

Support email

If you contact support, your email address, message and any attachments you send are received to respond to your request. Send only what is needed to explain the issue, and omit household backups, children’s identifying details, PINs and recovery codes.