Your family's information
What Minsaur collects, why, how long we keep it, and how to ask for a copy, a correction, or deletion.
Draft updated:
Version: [CONFIRM: version number and effective date at publication]
Minsaur is operated by Nidhi Yadav, an individual based in India ("we", "us", or "our"). Nidhi Yadav decides how and why the information described here is used.
Postal address: Near Radha Krishna Mandir, Sector 51, Gurgaon, Haryana 122003, India.
Privacy and grievance contact: Nidhi Yadav, privacy@minsaur.com. This mailbox is monitored, and we aim to reply to every request within 30 days.
This statement covers the Minsaur apps for Android and iOS, the services behind them, and this website. Minsaur is offered to families in India.
Every family has a parent account held by an adult. The parent adds learner profiles for children aged 5 and over. Learners do not need their own email address or password; they use a PIN on a device the parent has set up.
In this statement, a "child" is anyone under 18. Adults can also be learners in a family; see section 6.
What we hold depends on the features your family uses. Notes and learning entries can contain whatever you or your child type into them.
Information: the parent's email address, profile names, dates of birth, avatars, the parent's display title, and which modules are switched on for each learner.
Why: to create the family account, link learners to their parent, show the right learning content for each learner's age, and keep the family's settings.
Dates of birth are entered by the parent and are not checked against identity documents.
Information: the password and PINs you set (we store them in protected form, not as readable text), verification and reset codes, sign-in sessions, device-link codes, and device names. If you sign in with Google, we receive your Google account identifier, email address, and name from Google. If you use Sign in with Apple (on iPhone and iPad), we receive an Apple account identifier, an email address, which is a private relay address if you choose Apple's Hide My Email, and your name if you choose to share it. We use the name from Google or Apple only to pre-fill the parent's profile name, which you can change.
Why: to sign you in, verify the parent's email, help you recover access, and let a parent approve a learner's device.
Information: which version of our Terms and Privacy statement the parent accepted and when, the parent's confirmation that they are the parent or guardian of the learners they add, the parent's usage-measurement choice, and adult learners' acknowledgements.
Why: to show what was agreed and to respect the choices made.
Information: balances, income and spending entries, categories, dates, allowances, savings, requests and the parent's decisions, notes, and spending plans.
Why: to keep the family's money-learning records, handle requests between learner and parent, and show history and summaries. These are records only. Minsaur does not hold money, make payments, or connect to bank accounts.
Information: task names and descriptions, categories, due dates, completion and review times, the parent's decisions, stars, streaks, wishes, and redemptions.
Why: so families can set and review tasks, recognise effort, and talk about goals. Stars are points, not money.
Information: venture ideas, intended customers and place, activity dates, plans, materials and costs, sales, reflections, customer feedback the learner types in, parent decisions, milestones, and titles earned.
Why: to guide parent-reviewed entrepreneurship activities and show the learner's progress.
Information: each learner's access status, including any promotional access, its start and end dates, and which features it covers.
Why: to decide which features each learner can use. Minsaur does not take payments at present. If we introduce paid plans, we will update this statement before taking any payment.
Information: what you write when you email us, and your email address.
Why: to answer you and handle your request.
Information: our servers record technical details of requests, such as the time, the IP address, and whether the request worked.
Why: to keep the service secure, stop misuse, and fix problems. These logs are kept for 30 days and should not contain names, email addresses, or money amounts.
[CONFIRM AND TEST: exact server log fields and that names, emails, tokens, PINs, and amounts are removed from logs]
Please do not type passwords, card details, identity numbers, home addresses, or other people's personal details into notes, venture feedback, or emails to us.
To make Minsaur better we use two Google tools: Google Analytics for Firebase to understand how the app is used, and Firebase Crashlytics to find and fix crashes.
When the app crashes or hits a serious error, Firebase Crashlytics sends us technical details: what went wrong in the app's code, the app version, device model, operating system, and the time. This applies to everyone who uses the app, including learners, because we need it to keep the app working. It cannot be turned off.
During signup the parent can tick a box to allow usage measurement. The box starts unticked. The parent can turn it on or off at any time in Personal settings, under Help improve Minsaur. Saying no does not change what the app can do.
Usage measurement only covers the parent's own use of the app. We never measure how learners use the app: it is switched off whenever a learner's profile is open. Nothing is measured before someone signs in.
When it is on, we measure:
Names, email addresses, dates of birth, account or profile identifiers, notes or other typed text, money amounts, spending categories, or the places and shops in your records. We do not use advertising identifiers and do not use this information for advertising.
These tools still use an identifier created for the app on your device, so this information is not anonymous. We look at it in totals, not to follow a particular person.
[LEGAL REVIEW REQUIRED: confirm always-on crash reports, including during learners' sessions, need no separate permission]
Minsaur is built for children and teens, with a parent or guardian in charge of the family account. When signing up, the parent confirms that:
The parent creates each learner's profile, chooses their modules, and reviews requests. Parents can see and change their learners' information and can ask us to delete it.
We rely on the details the parent gives us. We do not check identity documents, so please enter accurate dates of birth.
A learner who is 18 or older, either when added or when they reach 18 by the date of birth on record, must accept our Terms themselves before continuing. Until they do, their learning features are paused, but they can still read this statement, contact us, and ask for their profile to be deleted. Pausing does not delete anything and does not affect other learners in the family.
If you think a child's information was added without the right adult's permission, email privacy@minsaur.com. Please do not send identity documents unless we ask for them.
[LEGAL REVIEW REQUIRED: confirm signup confirmation meets parental-consent requirements for under-18 users when India's data protection rules apply]
Accounts are protected by a password, Google sign-in, or Sign in with Apple, and each profile by a PIN. Learner devices must be approved by the parent. Sign-in sessions are saved in your device's secure storage, and information travels between the app and our servers over encrypted connections.
Some display information and unsaved drafts are kept in the app's ordinary storage on your device. Protect devices that have your family's profiles, and do not share passwords or PINs.
[CONFIRM: encryption of stored data, staff access controls, and the process for handling a data breach]
No system is perfectly secure. If a breach affects your information, we will tell you and the relevant authorities as the law requires.
| Information | How long |
|---|---|
| Family account, learner profiles, and their records | Until you delete them. Deletion removes them from our live systems immediately. |
| Server logs | 30 days, then deleted automatically. |
| Backups | Replaced within 30 days. Deleted information is never brought back into use from a backup. |
| Record of what you agreed to | As long as the account exists. |
| Emails you send us | As long as needed to handle your request. |
| App usage measurement | 2 months, then deleted automatically. Totals that do not identify anyone, such as how many parents used the app in a month, can be kept longer. |
| Crash reports | 90 days, then Google starts deleting them. |
Uninstalling the app does not delete your account. Use the steps in section 10.
[CONFIRM AND TEST: backend confirmation of 30-day log expiry, 30-day backup rotation, and re-deletion after any backup restore]
If you cannot use the app, or you want a copy of your information, a correction, or anything else, email privacy@minsaur.com from the parent account's registered email address. For deletion, use the subject "Minsaur account deletion" and say whether you mean the whole family or one learner.
Never send your password, PIN, or card details. We check requests against the registered email before acting, and we complete them within 30 days. We will tell you when it is done.
Contact our grievance contact in section 2 first. You may also be able to complain to the Data Protection Board of India once it is accepting complaints, or to another authority available to you.
This website has no sign-in, forms, analytics, advertising, or third-party fonts, and the pages do not set cookies.
The site is hosted on GitHub Pages, and GitHub records visitors' IP addresses for security. See GitHub's Privacy Statement. Email links open your own email app, and external links take you to services with their own privacy practices.
If we change this statement in a way that matters, we will tell parents in the app or by email before the change takes effect. The updated statement applies from that date. If you do not want to continue, you can delete your account at any time (see section 10). If we ever want to use your information for a new purpose that needs your permission, we will ask first. We keep earlier versions and will send one on request.
Questions: privacy@minsaur.com.