← mini-date.com
Privacy Policy
Short version: Minidate has no accounts and no user database. What you do together is encrypted on your phones and cannot be read by us. The only thing we receive is anonymous statistics: activity ratings and stability signals when the app misbehaves. None of it can be linked to you.
1. Who is responsible
The data controller for Minidate and this website is Oskar Ekeberg. Questions about privacy and data: support@mini-date.com.
2. What exists — and where
Minidate is built so that most things never leave your phones in readable form. The protection has three layers that work in three different ways, and we describe them precisely, promising neither too much nor too little:
- Toward us and the server — encryption. Everything you do together in the app (your evenings, picks, verdicts) is encrypted on your devices with keys the server never sees. Our server relays locked packages between your two phones. It can see that a couple ID exists, how large the packages are, and when they are sent. Their contents it never sees.
- Between the two of you — app behavior, not cryptography. Your private choices (what you tapped, your verdicts, your secret missions) are never shown to your partner in the app. But both phones technically hold your shared log. Sync requires it. This is the same trust model as a shared household, and we do not claim it is secret at a cryptographic level. We say this plainly, because honesty about the boundaries is part of the promise.
- In the statistics — anonymity by construction. See section 4.
3. Push notifications
When one phone needs to wake the other, a notification goes through Apple's push service (APNs). The notification is content-free. It tells your partner's phone to wake up, never why. Apple sees the push token, as with every iOS app.
4. Anonymous statistics
To learn which activities work, we receive anonymous ratings. They contain no couple ID, no device ID, no precise timestamp, and are sent in batches with a randomized delay so they cannot be tied to a particular evening or a particular couple.
To find faults, we also receive stability signals, meaning an anonymous line saying the app crashed or got stuck. The line says which screen it happened on and where in the evening you were, never what was on the screen. The signals are built with the same protections as the ratings and go through the same off switch.
Everything is analyzed only in aggregate, and you can turn the sharing off entirely in the app's settings. Nothing we receive can identify you.
5. Storage and retention
The server runs in Azure, Sweden region (within the EU). It is a mailbox, not an archive. Packages already fetched by both phones are pruned continuously, and 90 days is the hard ceiling. No encrypted package is kept longer than that, regardless. Temporary transfer files created when you pair a new phone are deleted after at most 7 days. Your phones are the original. The server is only a buffer.
6. Deletion
"Unpair & erase" in the app deletes the couple's data, both on the server and on the phone. If you pair again, you start from zero.
7. Purchases
Payments are handled entirely by Apple through the App Store. We have no customer database, receive no payment details, and cannot see who has bought the app.
8. This website
mini-date.com uses no cookies, no analytics, and loads nothing from third parties. There is nothing to consent to.
9. Legal basis and your rights
The legal basis for processing is contract (delivering the app's function to you) and legitimate interest (operations and troubleshooting, in content-free form). Here is what your GDPR rights look like in practice:
- Access and rectification are exercised directly in the app. That is where your data lives, readable only by the two of you.
- Erasure (art. 17) is built in as "Unpair & erase", see section 6. We cannot delete selectively on your behalf, because we cannot read what is what. But neither can we keep anything you have erased.
- Data portability: your shared history is readable in the app on both your phones, and moves with you when you pair a new phone.
- You always have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
The anonymous statistics are not personal data. They cannot be linked to any person, by us or by anyone else.
10. Changes
If this policy changes, the version and date at the top of this page are updated. Material changes are described here before they take effect.
1.1 (July 23, 2026): the wording about an exportable backup file has been removed — the feature no longer exists in the app; pairing a new phone covers the move.
1.2 (July 29, 2026): section 4 widened — the stability signals (anonymous, content-free crash and fault lines) are named alongside the ratings, and the wording is sharpened. The promise is unchanged: nothing that leaves your phones can identify you.