Privacy Policy
Last updated: October 30, 2026
Our Commitment to Privacy
MinuteKeep is built with privacy as a core principle. Unlike cloud-based record systems, MinuteKeep stores your corporate records locally on your device. We do not have access to the content of those records. The limited technical data used for purchase fulfillment, Store services and earlier-purchase license validation is described below.
Data Storage
Local Storage Only
Corporate-record data you enter into MinuteKeep is stored locally on your device in a SQLite database. This includes:
- Corporation information and profiles
- Director and officer records
- Shareholder information and cap table data
- Meeting minutes and resolutions
- Compliance tracking items
- Documents and attachments
- Audit logs
MinuteKeep does not automatically upload your corporate records to our servers, and we do not have access to them.
The primary SQLite database is not encrypted by MinuteKeep. The lock screen controls ordinary access through the app, not direct access to the database files. Use a strong operating-system account password and enable device encryption such as FileVault on Mac or BitLocker/device encryption on Windows when you need encryption at rest.
Android and Chromebook
On Android and compatible Google Play-enabled Chromebooks, records remain in the app's local device storage. When you export a document or backup, you choose its destination through Android's file picker. A chosen cloud-backed provider may transfer that exported file under its own terms; MinuteKeep does not choose a cloud destination for you. Automatic Android app-data backup is disabled. Save your own backup before uninstalling the app or changing devices. A lock-screen password does not encrypt the local database; optional protected backups use AES-256-GCM encryption.
What We Collect
Earlier-Purchase Support
New Mac purchases are through the Mac App Store. An earlier-purchase recovery service remains temporarily available while pending-payment checks are completed. The following processing does not apply to the Mac App Store app.
When you activate and validate your license, the licensing service processes:
- Your license key during activation
- A random installation ID generated by MinuteKeep
- A random activation token
- Activation and validation timestamps
The service persists SHA-256 hashes of the license key, installation ID, activation token, and Stripe Checkout Session ID. For abuse protection, it also derives a SHA-256 hash from the connecting IP address and request path as a short-lived Cloudflare rate-limit counter key; this reduces direct exposure but is not a promise that an IP-derived value is anonymous. MinuteKeep does not store the raw IP address in its durable license records. MinuteKeep does not persist your user agent, device name, hardware fingerprint, username, email address, or corporate records. Cloudflare necessarily processes network connection metadata while delivering the website and licensing service under its own terms.
Purchase Information
For earlier website checkout activity, Stripe processes checkout and payment information under its own privacy policy. Our recovery service receives a signed payment event containing a Checkout Session identifier, payment status, amount, currency, and Payment Link identifier. It stores only a hash of the Checkout Session identifier and does not receive or store your payment card details.
For the Windows edition, Microsoft Store processes purchase authorization, payment, installation entitlement, and Store updates under Microsoft's privacy terms. The Windows Store edition does not send a separate MinuteKeep license key to Ownerstate Software, and Ownerstate Software does not receive your payment card details from the app.
For the Mac App Store edition, Apple processes purchase authorization, payment, installation entitlement, and App Store updates under Apple's privacy terms. The Mac App Store edition does not send a separate MinuteKeep license key to Ownerstate Software, and Ownerstate Software does not receive your payment card details from the app.
For the Android edition, Google Play processes purchases, installation entitlement, Store updates and automatic installer protection under Google's privacy policy. The Google Play edition does not send a separate MinuteKeep license key to Ownerstate Software, and Ownerstate Software does not receive your payment card details from the Android app. Google Play and device system services may process purchase, installation, device and diagnostic information under Google's terms. This is separate from MinuteKeep's local corporate-record storage.
What We Don't Collect
Ownerstate Software does not automatically receive the following data from MinuteKeep. Records you choose to export to an external provider are handled under that provider's terms:
- Any corporate data you enter into the application
- Usage analytics or telemetry
- Crash reports (unless you manually send them)
- Personal information of directors, officers, or shareholders
- Document contents or attachments
- Search queries or activity logs
- Raw IP addresses or hardware fingerprints in MinuteKeep's durable license records
Retention and Deletion
Earlier-purchase license records are retained for as long as needed to validate the perpetual license, enforce its activation limit, prevent duplicate fulfillment, and handle refunds, chargebacks, or support requests. These records contain the hashed identifiers described above, not the reusable plaintext license key or your corporate records.
Deactivation or an authorized support reset removes the corresponding activation-token record from active storage. The hashed license and Checkout Session records remain so the perpetual license can continue to be validated and the same purchase cannot be fulfilled twice.
Cloudflare rate-limit counters use 60-second enforcement periods. MinuteKeep Worker observability and invocation logs are disabled, although Cloudflare and the payment or Store providers may retain operational records under their own policies.
Data Security
Your data security is protected by:
- Local corporate records: Corporate-record content remains on your device unless you choose to export it; earlier-purchase recovery requests contain only the limited technical data described above
- Lock screen protection: Password-controlled access through the application; this is not database encryption
- Encrypted backups: Optional AES-256-GCM encryption for exported backups
- Channel-appropriate licensing: Earlier-purchase activation state is stored in macOS Keychain; Microsoft Store manages the Windows Store entitlement; Apple manages the Mac App Store entitlement; Google Play manages the Android purchase and installation entitlement
- Activity history: A local audit trail supports review but is not a tamper-proof security boundary
Third-Party Services
MinuteKeep uses minimal third-party services:
- Stripe (earlier purchases only): Processes historical checkout and payment information
- Microsoft Store: Processes Windows purchases, installation entitlement, and Store updates
- Apple: Processes Mac App Store purchases, installation entitlement, and App Store updates
- Google Play: Processes Android purchases, installation entitlement, Store updates and automatic installer protection under Google's privacy terms
- Cloudflare: Delivers the website and runs the privacy-minimized license service; it processes ordinary network metadata
The MinuteKeep app does not integrate advertising networks or developer-operated usage analytics. Store and device system services may process technical information under their own privacy terms, as described above. Opening documentation or privacy links takes you to an external browser; that browser and any export destination you choose operate under their own terms.
The website stores your light/dark theme preference. Limited Google ad measurement and browser privacy choices are described below; the app's corporate records remain separate.
Website ad measurement
On visits carrying our exact Google campaign labels, we use Google Ads to measure the website visit and a click to the Mac App Store. Google receives browser and network information, the ad-click identifier when present, the limited campaign URL and these events. These events are not purchases, revenue or access to your corporate records.
Limited measurement starts with the inline notice and opt-out for US visitors and Canadian visitors outside Quebec. In Quebec, or when the Canadian province is unknown, it stays off unless you enable it. Cloudflare supplies only the regional measurement setting to the page; we do not request precise location. Other or unknown countries, ordinary visits, Global Privacy Control, Do Not Track and an unexpired opt-out keep Google measurement off.
We disable ad personalization and Google signals and enable restricted data processing. We do not use GA4, enhanced conversions, remarketing or a Meta Pixel here. Measurement cookies are configured to last up to one day. This browser's enable choice lasts 30 days and opt-out lasts 180 days; a session marker prevents duplicate event requests. Storage restrictions and ad blockers can reduce measurement coverage.
You can opt out immediately below or on an ad landing. Opting out stops future events, clears the feature's scoped cookies and, if the Google tag has loaded, reloads the page without the campaign labels. It cannot recall information already sent. Browsing and buying do not depend on measurement.
When measurement is enabled, Mac App Store links include the shared campaign label mk_google_mac_p01. We do not copy Google click identifiers, email addresses or visitor identifiers into Apple's link. Apple receives it only when you follow a Store link. Apple's aggregate campaign reports have disclosure thresholds and do not prove an ad caused a purchase.
Cloudflare processes network information to deliver and protect the site. Google and Apple may process information outside Canada under their respective Google privacy policy and Apple privacy policy. The app's local corporate records are separate from website measurement.
Your Rights
Because your corporate records are stored locally on your device:
- Local control: Your corporate-record content remains in the local application data you manage
- Data portability: Export your data anytime using the backup feature
- Data deletion: Delete the application and database files to remove all data
- No account required: No online account means no data stored on our servers
Children's Privacy
MinuteKeep is designed for business use by adults. We do not knowingly collect information from children under 16.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Significant changes will be communicated through the application's update notes.
Contact Us
If you have questions about this Privacy Policy, please contact us at: