Privacy Policy

Information we collect

• Account information. Your name and email address. If you sign in with Google or Apple, we receive a stable identifier for your account and your email; we do not receive your provider password. Passwords you set with us are stored only as an argon2id hash, never in plain text.
• Work and tax records. The time entries you create — descriptions, durations, dates, categories, and the property each relates to — and the participation totals we calculate from them. These records can be sensitive because they support a tax position.
• Property information. Details you add about your rental properties, such as a nickname, address, and city.
• Voice input. When you use voice logging, your device transcribes speech to text. On supported devices this happens on-device; the resulting text is sent to us as a normal time-entry message. We do not store raw audio.
• Chat messages. Messages you send to the in-app assistant to log or edit entries, and the assistant’s responses, are retained with your conversation so the assistant has context.
• Photos. Only if you choose to attach one (for example, a receipt) do we access your photo library, and only the photo you select.
• Technical and usage data. Standard server logs and diagnostics — identifiers, timestamps, status codes, and error reports — used to operate and secure the service. We do not log the free text of your messages or entry descriptions to our operational logs.

How we use your information

• To provide the core service: recording entries and computing participation totals.
• To authenticate you and keep your account secure.
• To process your chat and voice messages into structured time entries. To do this, message text is sent to our AI provider, Anthropic, for processing. Anthropic does not use this content to train its models.
• To operate, maintain, debug, and improve the service.
• To communicate with you about your account (for example, email verification).

How your information is shared

We do not sell your personal information. We share it only with service providers that help us run STR Minion, under contracts that limit their use of it:

• Hosting and database providers that store your account and records.
• Anthropic, to process chat and voice message text into structured entries, as described above.
• Error monitoring to detect and fix problems.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service. Your household’s records are scoped to your household; we never expose them to another household.

Data retention

We keep your records for as long as your account is active. Deleting a time entry is a soft delete with a 30-day undo window before permanent removal; archived properties are likewise retained until you remove them. You can ask us to delete your account and associated data at any time.

Security

Connections are encrypted in transit. Passwords are hashed with argon2id, and API keys and tokens are stored only as hashes. Access to your data is scoped to your household on every request. No system is perfectly secure, but we work to protect your information using industry-standard practices.

Your choices and rights

You can review and edit your entries and properties in the app, change or reset your password, and revoke connected applications under Settings. Depending on where you live, you may have rights to access, correct, export, or delete your personal information. To make a request, contact us at the address below.

Children

STR Minion is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

Contact us

Questions about this policy or your data? Email privacy@strminion.com.