Privacy Policy

Effective date: 2026-10-26

1. Who we are

GoodMinutes (the “app”) and getgoodminutes.com are run by Hensu LLC (“Hensu”, “we”, “us”). This policy explains what information we handle, why, and the choices you have. It applies to the GoodMinutes app for iPhone and iPad and to this website.

Hensu LLC
384 Gunter Ln
Redwood City, CA 94065, USA
Phone: (408) 758-8783
Email: hello@getgoodminutes.com

2. What we collect

Your parent account

During setup, a parent creates an account behind a parent gate by entering their own email address. This is the only personal information our server stores:

If you sign up with an address that isn’t yours, or someone else enters your address, the welcome email says to simply ignore it. An unconfirmed address is never emailed again and is never added to any mailing list.

Technical information our providers process

When the app talks to our account service, or a browser loads this website, the computers involved necessarily receive standard connection information such as an IP address and the time of the request. Our providers use it to deliver and secure the service, and it may appear in their short-term security logs. We do not use it to identify, track or profile anyone.

Emails you send us

If you email us, we receive your email address and whatever you choose to write, and use it only to reply and help you.

3. What stays on the device

Everything about your child is stored only on the device where they learn, in storage shared between GoodMinutes and its own Screen Time extensions. It is never sent to us or anyone else:

• Child profiles: name, birth month and year, and chosen avatar.
• Learning progress, levels, lesson history, activity and earned minutes.
• Drawings made in the app.
• Screen Time settings: which apps are locked, allowances, bedtime hours. Apple’s Screen Time system gives us only opaque tokens for the apps you choose. We can’t see which apps they are, and usage information stays inside Apple’s system on the device.
• The parent PIN.

Microphone and speech recognition. During read-aloud practice, GoodMinutes listens so it can cheer your child on as they read. Speech is recognized on the device only, using Apple’s on-device speech recognition. Audio is never sent to us or to Apple’s servers, and we don’t save recordings. On a device that can’t recognize speech locally, read-aloud listening is turned off. The microphone is only used after you allow it in the iOS permission prompt.

Notifications. Reminders, such as the 5-minute warning before time runs out, are created on the device. We don’t operate a push notification server.

Because this information never leaves the device, deleting the app (or removing a child’s profile in the Parents area) deletes it. Progress does not sync between devices.

4. What we don’t collect

• No advertising, ad networks or advertising identifiers.
• No analytics or tracking tools, and no third-party SDKs that collect data.
• No AI services: nothing your child does is sent to an AI model.
• No location, contacts, photos or camera.
• No payment details. Purchases are handled entirely by Apple. The app checks with Apple, on the device, whether a plan is active. We don’t receive your name or card information.

If you have chosen in iOS Settings to share analytics with app developers, Apple may provide us with crash reports and aggregate statistics it has collected. Apple controls that sharing, and you can turn it off in Settings → Privacy & Security → Analytics & Improvements.

5. How we use information

• To create and run your parent account.
• To send the welcome email and messages about your account (for example, about deleting it).
• If you opted in: to send occasional emails about new Hensu kids apps. Every one has an unsubscribe link, and you can switch it off in the app under Parents → Parent account.
• To answer your questions.
• To keep the service secure and to comply with the law.

We do not sell personal information, share it for advertising, or use it to build profiles. We do not disclose it to third parties except the service providers below, or if the law requires it.

6. Service providers

We use a small number of companies to run the service. They process information only on our instructions and only to provide their service to us:

• Supabase: database and account sign-in. Stores the parent account information listed above, in the United States.
• Amazon Web Services (Amazon SES): sends our emails, such as the welcome email. Amazon Web Services also hosts this website.
• Apple: App Store purchases, Family Sharing and Screen Time. Apple’s handling of your information is covered by Apple’s privacy policy.

7. Children’s privacy (COPPA)

GoodMinutes is made for children ages 4 to 11, and is designed to comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and Apple’s rules for apps in the Kids category.

• We do not knowingly collect personal information from children. The parent sets up the app and provides their own email address, behind a parent gate. Children are never asked for an email address or any contact information.
• Information a parent enters about a child, and everything a child does in the app, stays on the device and is never transmitted to us or to third parties.
• Purchases, settings, the parent account and links out of the app appear only during parent setup or behind the parent gate (a PIN, with a grown-up-level math question as the fallback).
• There is no chat, no social features and no way for a child to share information publicly or with other users.
• There are no ads, no behavioral advertising and no third-party analytics.

If we learn that we have received personal information from a child (for example, if a child typed their own email address during setup), we will delete it. If you believe this has happened, contact us at hello@getgoodminutes.com.

8. Retention and deletion

• Parent account: kept for as long as you have an account.
• Delete your account in the app: go to Parents → Delete account. This removes your account, including your email address, from our database. Your child’s progress on the device is not affected. To keep using GoodMinutes afterward, you’ll need to sign up again.
• Delete by email: if you no longer have the device, email us from the address on the account and we’ll delete it.
• Backups: deleted information may remain in our provider’s encrypted backups for a limited time until they are overwritten.
• Unconfirmed email addresses: never emailed again after the welcome email. They stay attached to the account that entered them until that account is deleted, and you can ask us to remove one at any time.
• Marketing emails: stop right away when you unsubscribe or switch off the opt-in.
• On the device: remove a child’s profile in the Parents area, or delete the app to delete everything stored on that device.
• Support emails: kept only as long as needed to help you.

9. Parental rights

Parents can at any time:

• Review the account information we hold. Your email is shown in the app under Parents → Parent account, or you can ask us for a copy.
• Delete it, in the app or by emailing us.
• Change your email choices, by turning the opt-in off in the app or using the unsubscribe link.
• Review or delete your child’s information directly on the device, in the Parents area (behind your PIN). We hold none of it, so there is nothing about your child for us to send or delete.

To make a request, email hello@getgoodminutes.com from the address on the account. We may ask you to confirm the request from that address before acting on it. We will respond within the time the law requires.

10. Security

We keep the information we hold to a minimum, which is the best protection. Data travels over encrypted connections (HTTPS). Our database uses row-level security, so an account can only read its own record, and the app can’t change anything in it except your email opt-in. The account session is kept in the device’s keychain. No system is perfectly secure, but if a breach ever affected your information, we would notify you as the law requires.

11. International users (including the EU and UK)

Hensu LLC is based in the United States, and our providers store account information in the United States. If you use GoodMinutes from another country, your parent account information is transferred to and processed in the United States. Where required, we rely on safeguards such as the Standard Contractual Clauses in our providers’ data processing terms.

If the EU or UK General Data Protection Regulation applies to you, Hensu LLC is the controller of your parent account information, and we rely on these legal bases:

• Contract: running the account you asked for.
• Consent: emails about new Hensu kids apps. You can withdraw it at any time.
• Legitimate interests: keeping the service secure.

You have the right to access, correct, delete, restrict or object to our use of your information, to receive a copy of it, and to complain to your local data protection authority. Email us to use these rights.

Children (GDPR-K / UK Age Appropriate Design Code). We don’t process children’s personal data on our servers. A child’s information stays on their device under their parent’s control. The app is built with high-privacy defaults: no profiling, no ads, no location, no nudges to share data, and marketing emails only with a parent’s opt-in.

12. California privacy notice (CCPA/CPRA)

This section applies to California residents.

• Categories collected in the past 12 months: identifiers (a parent’s email address and an anonymous account ID), plus the account records described above. Our providers also process internet connection data, such as IP address, for delivery and security.
• Sources: directly from you, and from your device when the app connects to our service.
• Purposes: as described in “How we use information”.
• Disclosures: only to the service providers listed above, for business purposes.
• Sale and sharing: we do not sell personal information or share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.
• Sensitive personal information: we do not collect it.
• Retention: as described in “Retention and deletion”.

You have the right to know what personal information we collect and how we use and disclose it, to delete it, to correct it, and not to be discriminated against for using these rights. To make a request, email hello@getgoodminutes.com. We will confirm the request comes from the account’s email address. You may use an authorized agent; we may ask for proof of their authority. We do not disclose personal information to third parties for their direct marketing purposes.

13. This website

getgoodminutes.com is a plain static website. It uses no cookies, no analytics, no tracking pixels, no third-party scripts and no third-party fonts. As with any website, the hosting service receives standard request information such as your IP address in order to deliver the pages.

14. Changes to this policy

If we change this policy, we will post the new version here and update the effective date. If a change materially affects how we handle personal information, we will tell parents in the app or by email before it takes effect, and will ask for consent where the law requires it.

15. Contact us

Questions or requests about privacy: hello@getgoodminutes.com or (408) 758-8783
Hensu LLC, 384 Gunter Ln, Redwood City, CA 94065, USA