Privacy Policy

Effective date: October 13, 2026

Last updated: October 17, 2026
Policy version: 2026-10-17-v9

This Privacy Policy explains how MinuFlow (“MinuFlow,” “we,” “us,” or “our”), handles personal information when you visit MinuFlow.com, use the Focus workspace or MinuFlow Chrome extension, create an account, buy or receive Premium access, or contact us.

1. The short version

• You can use the core Focus workspace without an account.
• Free and Trial workspace information remains in the browser where it was created.
• The MinuFlow Chrome extension is separate from the website. Its timer, preferences and optional short focus label stay in that browser and do not join Workspace Sync.
• A member with a Premium subscription or complimentary Premium access may separately turn on Workspace Sync. It does not begin merely because the member signs in or receives Premium.
• When Workspace Sync is on, supported settings, theme and music favorites, Tasks, Notes, daily goal, quote preferences and saved video-background links can follow the account across devices.
• Running timers and current audio or video playback never sync.
• An eligible member with a Premium subscription or complimentary Premium access may upload one private custom-background image. MinuFlow stores and serves it through an authenticated account route rather than a public media URL.
• Premium Focus Stats for paid or complimentary access has a separate synchronization boundary for completed-session facts.
• Account, Trial, Premium and purchase records are stored on our WordPress/WooCommerce service when you use those features.
• We do not sell personal information or share it for cross-context behavioral advertising.
• We do not collect a date of birth. MinuFlow is a general productivity and study service and is not designed specifically for children.

2. Information we collect

Account and profile information

When you register with email, we process your email address, a securely hashed password, email-verification status, account and sign-in records, and acceptance of the Terms and Privacy Policy. Passwords are not stored in readable form. You may also provide a first name, optional last name and account time zone. Those profile fields are used for account management and are not used to create a personalized greeting unless MinuFlow later introduces that feature with appropriate notice.

If you choose Google sign-in, Google provides a verified email address and a stable account identifier. MinuFlow stores the email address and a one-way hash of the Google identifier used to recognize the linked account. We do not request access to Gmail, Google Drive, contacts or calendars.

Trial, Premium and campaign information

We process records needed to determine and explain access, including Trial eligibility, Trial start and end dates, Premium entitlement or membership status, renewal or scheduled-end information supplied by WooCommerce, the source and duration of access, and controlled coupon redemption history. Complimentary one-month and one-year Premium offers end after the stated period and do not create a recurring subscription by themselves.

Optional paid Premium Workspace Sync

Workspace Sync is available only to eligible accounts with a Premium subscription or complimentary Premium access and begins only after the signed-in member chooses to turn it on. MinuFlow records the time of that choice.

The synchronized workspace document may include supported display and timer preferences, selected scenes and favorites, Tasks and task steps, Notes and supported formatting, saved Spotify or YouTube music links, the daily focus goal, quote preferences, up to five saved YouTube video-background links, and which eligible background is selected for Clock, Focus or Scene.

The synchronized document does not include a running timer, remaining timer time, current audio playback, current video playback, passwords, payment-card details or unrelated browser history. Free and Trial accounts do not receive Workspace Sync.

Turning Workspace Sync off stops future synchronization on that account but does not automatically delete the existing server copy. The member can use MinuFlow’s verified privacy-erasure process to remove eligible synchronized data. Local copies remain on each browser until removed there.

Custom background image

An eligible member with a Premium subscription or complimentary Premium access may upload one JPG, PNG or WebP custom-background image of up to 5 MB. MinuFlow stores the file under a randomized name in a protected uploads folder and serves it only through an authenticated, eligible account request. Replacing the image removes the prior file; removing the image or completing an eligible erasure request removes the stored file.

Do not upload an image you do not have the right to use or an image containing information you do not want associated with the account.

Paid Premium Focus Stats

When Focus Stats Sync is enabled and an account has a Premium subscription or complimentary Premium access, MinuFlow stores newly completed focus-session facts with that account. These facts include session type, duration, UTC start and completion times, the completion day reported by the device and a random session identifier used to prevent duplicates. Sync begins only after the feature recognizes eligible Premium access.

After an account’s seven-day Trial has ended and that account later has eligible Premium access, MinuFlow may show an optional Trial-history import in the same browser. The member must choose Import Trial history before anything is uploaded. The import is limited to completed Focus sessions whose completion times fall inside that account’s server-recorded Trial window. Choosing Not now uploads nothing and leaves a later manual option. The feature does not search another device or silently backfill unrelated history.

A completed timer is not proof of attention, school attendance, academic progress or work performance.

Orders, subscriptions and payments

When you choose a paid Premium plan, WooCommerce processes the order and subscription and Stripe processes the card payment. We retain order, billing, subscription, cancellation, refund and invoice records needed to provide the plan and meet legal obligations.

For paid subscriptions, we also retain versioned evidence of the renewal terms accepted at checkout, including the plan, amount, billing frequency, next-payment information available at that time, policy versions and acceptance time. We do not directly store complete payment-card numbers.

Security and technical information

Our site, hosting provider, Cloudflare, WordPress and security tools may process IP address, browser and device information, request time, requested pages, cookie or session identifiers, and security events. MinuFlow account rate limits use salted digests rather than retaining raw email or IP values in those rate-limit keys.

Analytics and product interactions

Google Analytics 4, placed through Site Kit, measures use of public pages. The existing Google tag may also receive a small set of bounded Focus interaction events, such as the type of control used. We do not send task text, note text or similar user-entered workspace content as Analytics event parameters. Site Kit is configured to exclude logged-in users from Analytics measurement.

Search Console and PageSpeed Insights help us understand search visibility, availability and performance. The active site theme may request web fonts from Google Fonts.

Communications

If you contact us, submit the Support form or make a privacy request, we receive the information in your message and the details needed to respond and verify the request.

School pilot inquiries

If you use the separate Schools inquiry form, we receive your name, role, school or district, work email, what you would like to try, and any optional teacher count (up to 10) and device information you choose to provide. The form emails these details to [email protected] so we can review and reply to your inquiry. Submitting the form does not create a MinuFlow account or activate Premium. The inquiry is not stored in a separate WordPress form-entry database. Please do not include student names or other student information.

3. Browser-local workspace and backups

Free and Trial Tasks, Notes, settings, favorites and focus history remain in the browser profile where they were created. A workspace with a Premium subscription or complimentary Premium access also remains usable locally whether or not Workspace Sync is on. Signing out does not clear local content or stop a local timer. Clearing browser data may erase local content, and people sharing the same browser profile may be able to see it.

When Workspace Sync is on, the supported information described above is associated with the signed-in account, may be included in a WordPress personal-data export and can be removed through the verified erasure process. Running timers and current playback remain browser-local.

MinuFlow’s Backup feature creates a file on the device only after the user requests it. Preparing or restoring a local backup does not by itself upload that file to MinuFlow. A backup remains useful before clearing browser data or making a large change, including when Workspace Sync is enabled.

MinuFlow Chrome extension

MinuFlow: Pomodoro Focus Timer is a separate Chrome browser extension. It works without a MinuFlow account or Premium access. It saves the current timer, selected mode and durations, optional short focus label, sound preference, and appearance preference only in Chrome’s local extension storage. The label is text you choose to enter. The extension does not send this information to MinuFlow, analytics providers, advertisers, or other third parties. It does not read visited webpages, browsing history, website Tasks or Notes, account information, or payment details. The extension does not participate in the website’s optional Premium Workspace Sync.

The extension can show an operating-system completion notification and play a bundled optional chime on your device. Its full-screen view uses the same local timer state. Selecting the Website link opens MinuFlow.com/focus/ with non-personal campaign parameters; activity on the website is then covered by the other sections of this policy. Local extension information remains in the browser profile until it is cleared or the extension is removed, subject to browser backup behavior. Our use of information through Chrome extension APIs is limited to providing these timer features and follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

4. Cookies, local storage and optional third-party features

MinuFlow uses necessary cookies and browser storage for login sessions, security, site operation, WooCommerce compatibility and workspace preferences. We do not use advertising cookies.

Optional third-party services are requested only when needed or when you choose them where practical. Google’s sign-in service loads when you open our login or sign-up page. No automatic sign-in takes place; Google sign-in starts only when you choose the Google button. Spotify content is loaded after you select a Spotify item. YouTube is contacted only after you choose a YouTube player or select a saved YouTube video background. YouTube may set cookies, receive technical playback information and show advertising under Google’s and YouTube’s own terms and privacy notices. Saving a YouTube link in Workspace Sync stores the link with MinuFlow; it does not make a YouTube request until that background or player is selected. Stripe and supported payment methods are contacted when you open or use paid checkout. Those providers apply their own privacy policies.

5. California Do Not Track disclosures and privacy signals

MinuFlow does not sell personal information and does not share personal information for cross-context behavioral advertising.

MinuFlow does not currently change how the Service operates in response to a browser “Do Not Track” signal. Where a legally applicable Global Privacy Control or similar opt-out signal is received, we treat it as a request to opt out of sale or sharing. Because our current practice is not to sell or share personal information for cross-context behavioral advertising, that signal does not currently change such a practice.

Service providers and optional third-party features may receive technical information when their services are used. Depending on the provider, browser and account settings, those providers may collect information about activity over time and across websites or online services under their own privacy notices.

6. How we use information

We use information to:

• create, verify, authenticate, secure and support accounts;
• provide Trial, complimentary and paid Premium access;
• synchronize the supported workspace only when an eligible member turns Workspace Sync on;
• provide paid Premium Focus Stats synchronization and the optional bounded Trial-history import;
• store and serve an eligible member’s private custom-background image;
• process orders, subscriptions, cancellations, refunds and invoices;
• record subscription authorization and provide renewal information;
• send verification, password-reset, privacy-request and service messages;
• prevent fraud, abuse and unauthorized access;
• operate, troubleshoot, measure and improve MinuFlow;
• respond to support and privacy requests;
• review and respond to school pilot inquiries;
• comply with applicable legal, security, tax, accounting and dispute obligations; and
• enforce our Terms and protect MinuFlow, our users and others.

7. When we disclose information

We disclose only what is reasonably necessary to service providers that help us host, secure, deliver, authenticate, email, measure or support MinuFlow. These may include our hosting provider, Cloudflare, Google and YouTube when their services are used, Spotify when its player is requested, WordPress/WooCommerce service components, our email provider and Stripe for payments.

We may also disclose information when required by law, to protect rights and safety, investigate abuse, establish or defend legal claims, complete a business transfer subject to appropriate safeguards, or act at your direction.

We do not sell personal information or share it for cross-context behavioral advertising.

8. Retention

We retain account and access information while an account is active and afterward only as reasonably necessary for security, restoration, disputes, legal obligations and request handling. Short-lived verification, password-reset, Google challenge and rate-limit records expire as part of normal operation.

Eligible synchronized Workspace and Focus Stats data are kept while the account is active and can be removed through the verified WordPress erasure process or account-closure review, subject to active security, dispute or legal holds. Turning Workspace Sync off alone does not delete the server copy. Erasing synchronized data establishes a new synchronization boundary so deleted server records are not silently recreated.

The private custom-background image is deleted when it is replaced, removed by the member, or included in an eligible erasure or account-deletion cleanup.

Order, subscription, consent, invoice, tax and refund records may be retained for the period required by accounting, tax, payment and dispute obligations. Hosting, security, support and email records are retained according to operational need, provider settings and applicable law. School inquiry emails and replies are retained only as reasonably needed to respond, manage a proposed pilot, and meet applicable legal obligations. We delete or anonymize information when it is no longer reasonably needed for these purposes.

Deletion requests are verified and reviewed before action. Some information may be retained where required or permitted by law, including security, fraud-prevention, dispute and transaction records. Browser-local information must be removed in the relevant browser by the user.

9. Your choices and rights

You may use the core workspace without an account; choose email/password or Google sign-in when available; choose whether to provide optional profile fields; decide whether to turn paid Premium Workspace Sync on or off; download a local workspace backup; remove a custom image; request a copy of eligible account data; request deletion; request account closure; or contact us for access, correction or help.

Depending on applicable law, you may also have rights to know, correct, delete, restrict or object to processing, receive portable data, withdraw consent, opt out of certain sharing, or complain to a regulator. We may need to verify identity before fulfilling a request. We will not discriminate against you for exercising an applicable privacy right.

Account-data exports do not include information that exists only in a browser. They may include synchronized Workspace and Focus Stats data associated with the account. An account-deletion request does not automatically cancel a paid subscription or clear local browser data. Cancel a paid subscription separately through My Account > Plan & billing or contact us.

10. Age information

We do not collect a date of birth. MinuFlow is a general productivity and study service and is not designed specifically for children.

11. Security

We use reasonable safeguards designed to protect information, including HTTPS, password hashing, restricted account endpoints, request verification, rate limits, randomized private file names and access controls. No system is completely secure. Keep your password private and contact us if you suspect unauthorized access.

12. International use and policy changes

MinuFlow is operated from California, United States. Our service providers may process information in the United States and other countries. We will post an updated policy and effective date when our practices or the Service materially change and provide additional notice or obtain additional consent when required.

13. Contact

MinuFlow provides the service described on this page.

• Privacy and support: [email protected]
• Website: https://minuflow.com

Privacy requests may be submitted through signed-in MinuFlow account controls or by emailing [email protected].